Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-BToeE87N6TXbj8QfLqaMzQhQu8.roa
File: 1-BToeE87N6TXbj8QfLqaMzQhQu8.roa (raw, json)
Hash identifier: qhJjBO8C9kW0IOz8VZzA8SY9K2acxxQG/Y97Anzk7GI=
Subject key identifier: F8:14:E8:78:4F:3B:37:A4:D7:6E:3F:10:7C:BA:9A:33:34:21:42:EF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D58C8A072BC3F63F9E236F9C2F70DA002
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-BToeE87N6TXbj8QfLqaMzQhQu8.roa
Signing time: Tue 30 Jan 2024 05:12:39 +0000
ROA not before: Tue 30 Jan 2024 05:12:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:58:c8:a0:72:bc:3f:63:f9:e2:36:f9:c2:f7:0d:a0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 30 05:12:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f814e8784f3b37a4d76e3f107cba9a33342142ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:26:c9:e0:81:b8:45:2e:c4:27:86:de:b2:09:
e5:d0:9e:cc:8d:59:a8:75:36:e5:68:4d:7b:5c:83:
9c:65:8d:42:e8:e8:c6:3d:43:67:ae:24:21:4d:01:
ac:d8:18:d9:98:51:3e:92:3a:d5:f6:0e:22:c2:90:
b5:73:d6:7e:f4:d9:c6:66:92:7d:b7:39:43:2c:e5:
6d:98:9d:e1:97:82:db:f5:d8:e5:f0:f5:2d:3f:32:
2b:1a:87:4e:f8:2c:49:ff:16:3b:ef:5c:3e:b0:e9:
1e:df:69:42:4c:18:c4:74:21:2e:67:56:50:4a:bf:
bf:7e:fc:46:3c:c3:e8:9a:49:6b:98:a9:3a:9b:1c:
ef:fb:ea:e0:0f:60:63:0c:62:b1:3d:d6:a4:92:40:
3b:0b:e0:a8:5c:7c:65:3a:9c:9a:f2:0b:88:d8:72:
a2:a8:70:ca:fc:5c:12:13:96:57:12:a1:cf:b6:0e:
9a:ea:db:2b:9a:ee:81:73:ed:2e:a1:f0:d9:41:48:
e0:df:1d:a9:ef:0a:cf:07:22:d6:71:46:9c:5d:34:
2c:d6:60:ed:4a:af:f1:b5:fb:55:77:ff:32:d0:5c:
7e:9b:93:ae:be:6c:57:1f:59:d5:9f:99:78:05:56:
ec:5c:c4:06:7f:e7:e3:e8:a2:33:6b:67:a1:82:7c:
45:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:14:E8:78:4F:3B:37:A4:D7:6E:3F:10:7C:BA:9A:33:34:21:42:EF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-BToeE87N6TXbj8QfLqaMzQhQu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:a5:80:a8:e5:3e:5e:99:4b:3c:79:5a:2f:73:39:4e:f4:0a:
40:47:0c:0e:a3:e8:18:18:b2:0f:22:67:2e:fe:a2:f4:c7:c7:
8c:2b:e9:51:c3:b4:18:f6:d1:d0:a8:60:eb:dd:3a:85:0a:ef:
b1:0d:bc:f6:b6:50:d3:cc:5d:8a:f7:59:81:99:c0:2c:eb:40:
4f:6d:7e:d4:73:7b:01:53:27:ed:a7:14:db:35:23:f8:d1:2b:
88:c7:8b:3f:7b:a3:69:dc:da:33:81:45:05:a3:2c:0f:c4:c5:
5e:72:85:a4:13:62:a5:ca:8e:a1:87:87:d2:1a:f7:eb:09:c6:
00:e3:c6:4f:49:e0:0a:fa:15:a4:98:33:ff:7b:b0:9d:e3:d9:
08:c1:df:98:52:61:28:d3:48:7f:f9:92:d7:27:31:de:e7:e7:
34:d8:94:ee:b0:43:d1:24:eb:7f:26:17:17:f0:12:e3:f0:a9:
ea:a7:ef:db:84:df:6e:37:8a:95:1d:7d:08:86:87:81:cf:e0:
ac:98:82:ef:44:4b:87:0a:d6:92:95:1f:84:14:2a:01:b0:2e:
ac:ae:61:8e:09:97:68:ef:81:3c:25:9b:a2:f8:ba:a1:bd:bd:
96:7d:1e:20:1f:c5:0a:e1:22:0d:99:d7:41:36:25:fa:8f:a9:
84:28:26:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:14:05 2025 by rpki-client