Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1kiofv_cG2jKSz0J5zc_Lb6Cdpo.roa
File: 1kiofv_cG2jKSz0J5zc_Lb6Cdpo.roa (raw, json)
Hash identifier: XLcwYlUjE++Svt4/6mTvyQSuVn2g4o/ccu0/PR1bp9w=
Subject key identifier: D6:48:A8:7E:FF:DC:1B:68:CA:4B:3D:09:E7:37:3F:2D:BE:82:76:9A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E9D71324A0792402E75DE887C7131BD7E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1kiofv_cG2jKSz0J5zc_Lb6Cdpo.roa
Signing time: Tue 02 Apr 2024 06:13:45 +0000
ROA not before: Tue 02 Apr 2024 06:13:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9d:71:32:4a:07:92:40:2e:75:de:88:7c:71:31:bd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 2 06:13:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d648a87effdc1b68ca4b3d09e7373f2dbe82769a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:01:b4:18:92:7a:08:79:4e:29:a3:f6:d3:94:
4d:5e:b7:ea:da:f0:1d:db:1f:97:7a:1d:08:f6:0e:
c1:a7:93:48:6a:7d:db:1b:d1:af:44:e5:95:47:66:
62:b1:9d:f3:de:d7:f7:a8:1c:0d:6d:5b:29:bb:c2:
03:20:38:d4:7b:1f:c0:71:8b:17:b7:f6:b8:ad:94:
e3:61:99:b1:e1:a4:66:42:4c:e8:75:f2:e9:e9:bd:
da:fe:3c:64:cb:75:dc:38:29:91:00:71:50:bf:91:
c8:22:bd:95:df:d1:4f:d0:ce:7f:6b:4d:4b:03:00:
d8:12:95:de:4e:06:46:23:f7:69:27:a5:d3:7a:74:
55:91:65:c9:6b:a5:95:a3:e4:ad:89:8f:ac:15:e6:
a3:60:dd:d8:56:e5:af:94:71:a0:f1:37:67:0f:3c:
95:bd:c8:14:aa:30:2b:cc:5f:0c:1b:65:92:a3:c3:
f3:6d:98:cf:3b:59:9e:18:36:bb:69:16:0d:64:7b:
f2:58:aa:f3:50:81:84:9c:79:4a:81:fd:59:18:71:
05:b1:21:bc:68:49:28:25:f0:53:49:3a:01:c1:68:
fc:26:41:c7:55:31:8b:99:25:2e:b2:52:5f:48:8b:
89:83:60:af:18:99:83:19:15:af:c5:4c:f1:61:c6:
79:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:48:A8:7E:FF:DC:1B:68:CA:4B:3D:09:E7:37:3F:2D:BE:82:76:9A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1kiofv_cG2jKSz0J5zc_Lb6Cdpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:f4:b1:29:28:c5:7f:c2:c3:cd:5f:e7:2e:23:7e:06:70:e4:
de:da:b5:31:69:bb:7a:68:6a:89:97:8d:d9:6e:4a:67:a6:f0:
16:8a:d6:a7:1b:ea:c3:c0:92:a2:21:c4:ad:b6:b3:1e:73:0d:
49:c8:a9:31:34:78:c7:1a:8f:41:37:2c:af:5d:a4:f0:95:7f:
81:1a:95:44:33:08:ce:66:2d:cf:9a:ec:6d:8a:c8:f4:a1:ee:
0e:88:de:22:18:6e:67:79:9f:32:ca:27:b1:f6:7e:d0:db:a3:
41:e6:2f:d9:83:ee:ef:a0:23:4b:e8:88:15:a8:25:a3:e2:2c:
31:ee:4f:66:ad:f3:68:02:ed:89:29:9d:8e:ac:85:b7:cb:4d:
d8:d6:8a:d7:8b:c9:b1:95:41:21:27:86:d5:58:22:f6:b0:8b:
ac:ae:66:d4:fb:ae:39:2a:02:a9:6d:39:5e:c3:cb:6e:67:fb:
d0:83:11:53:a9:98:ef:98:2b:3b:11:b9:7f:ec:3c:47:20:62:
f1:99:98:5b:6d:f8:4a:0a:39:32:cc:c5:a0:3e:59:6f:92:8c:
9c:41:54:23:dd:6f:d9:9a:20:fb:78:10:34:bf:89:94:69:1e:
97:53:b0:03:73:ed:f7:48:a0:5c:78:6f:0f:b9:89:a6:86:1f:
94:77:ac:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:27 2025 by rpki-client