Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1O7ts7wxANv8cllXVGiEl3C1v9U.roa
File: 1O7ts7wxANv8cllXVGiEl3C1v9U.roa (raw, json)
Hash identifier: agwkZ7Fc7Ni0uGl6b1ls1TScqHnXRE014kuAUtXVqWo=
Subject key identifier: D4:EE:ED:B3:BC:31:00:DB:FC:72:59:57:54:68:84:97:70:B5:BF:D5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D70657EF5758153C4FC61EC88872DC48D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1O7ts7wxANv8cllXVGiEl3C1v9U.roa
Signing time: Sat 03 Feb 2024 19:15:16 +0000
ROA not before: Sat 03 Feb 2024 19:15:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:70:65:7e:f5:75:81:53:c4:fc:61:ec:88:87:2d:c4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 3 19:15:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4eeedb3bc3100dbfc7259575468849770b5bfd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:54:dd:47:22:e7:db:1a:7c:90:5f:22:22:
4a:b2:d1:57:f9:1f:ae:d1:e1:d5:d9:4e:3f:1b:f8:
e4:1c:a8:0b:5a:78:7c:a7:10:8d:41:29:74:cf:da:
14:27:0b:9b:bc:66:98:bd:c1:7e:f8:85:0b:f9:01:
ce:64:2d:d5:e5:ea:68:b7:88:23:14:15:ed:5d:ee:
4f:00:c1:69:54:e0:4c:c3:6f:68:99:11:44:c2:50:
a3:cd:86:44:c9:44:bd:1d:20:41:72:93:48:d2:ae:
10:fb:76:0a:ed:da:e5:c5:43:cb:89:b5:dd:0c:f2:
f4:75:d6:7a:c7:8d:16:17:a6:1e:e3:f2:7f:1c:1b:
ed:68:30:c1:a7:25:e0:f8:94:4a:5a:26:3f:6a:74:
8d:08:e6:ce:54:cf:ef:c5:b0:e5:c1:db:ed:49:ee:
4c:2e:23:4d:2d:30:22:d2:70:45:03:81:0e:13:39:
33:a1:62:fe:15:d9:43:d9:c6:60:e6:29:e1:24:53:
98:15:48:39:07:9f:5a:76:3d:85:db:30:f5:bb:48:
61:17:e3:f2:e0:5e:61:88:12:81:64:59:d2:c8:bd:
62:81:07:fa:c9:19:e5:8f:d8:0f:ab:82:c6:c7:b5:
eb:c4:e4:3b:80:0b:b6:d3:ab:f9:00:ab:93:55:27:
8a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EE:ED:B3:BC:31:00:DB:FC:72:59:57:54:68:84:97:70:B5:BF:D5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1O7ts7wxANv8cllXVGiEl3C1v9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:04:16:17:7a:89:98:a9:57:65:06:9a:be:57:b7:0d:c0:41:
11:cd:f5:92:55:4c:cb:22:07:f4:48:99:6f:79:79:e4:11:30:
7a:48:1b:51:e4:0f:7f:55:ea:fc:24:2e:22:86:5b:ae:e2:f5:
b3:13:95:81:95:90:e7:02:4e:78:11:b8:fc:f3:34:fd:a9:0d:
d0:48:5b:95:88:d7:df:85:9a:40:f8:5c:72:d6:9e:f5:0e:94:
02:1b:d5:c4:7c:bd:66:2b:a0:5e:3b:41:7b:bb:fc:97:ce:f5:
1c:76:a0:7c:f2:18:73:cb:c2:0d:0e:4d:c9:43:e6:ca:ab:e7:
9a:72:c9:91:38:03:f6:fd:b5:a1:c4:ca:c4:7c:b8:ef:22:a9:
fd:99:03:a8:e7:35:9c:43:56:c8:68:cd:69:c3:a6:54:8e:ef:
03:91:ba:ed:af:66:39:b8:0d:32:38:9a:16:5b:f9:9b:11:a6:
86:f6:57:ca:5f:62:97:dc:17:94:26:0a:91:5a:6d:83:d2:58:
01:6a:13:77:e9:87:8e:65:2b:91:8b:7d:65:56:9d:87:79:05:
1c:e6:4f:a0:9e:ad:b1:e5:e2:09:47:01:d8:27:be:29:f8:99:
6c:5a:88:e1:17:7c:26:12:52:ee:8c:67:bc:83:9b:5b:ba:e1:
98:e8:2e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:07 2025 by rpki-client