Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2V2cB20FdNjpyjFsjMtUN-mlQ20.roa
File: 2V2cB20FdNjpyjFsjMtUN-mlQ20.roa (raw, json)
Hash identifier: 7SHgA999kg7e00/TtsPLs7d6QIUCVFMBQx6SoqwTzSc=
Subject key identifier: D9:5D:9C:07:6D:05:74:D8:E9:CA:31:6C:8C:CB:54:37:E9:A5:43:6D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E407F8E45EB88DCF5296E4801445A46F7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2V2cB20FdNjpyjFsjMtUN-mlQ20.roa
Signing time: Fri 15 Mar 2024 05:04:45 +0000
ROA not before: Fri 15 Mar 2024 05:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:407f:5ea5/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:40:7f:8e:45:eb:88:dc:f5:29:6e:48:01:44:5a:46:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 15 05:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d95d9c076d0574d8e9ca316c8ccb5437e9a5436d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:0d:a3:5c:43:51:3c:a3:45:fa:65:4b:7e:
fc:77:50:17:6e:3f:bc:dd:44:ae:de:1c:47:08:f7:
01:5a:38:5c:eb:e1:cf:2c:b6:df:a9:d9:d3:c9:83:
b4:8b:85:53:b7:0e:5b:f4:a1:b6:f0:29:35:af:0b:
28:29:18:ce:77:a7:c6:f6:1f:d5:a6:d8:4a:8a:30:
a4:38:53:53:a8:38:ef:8c:cd:20:ea:5f:3b:2d:5a:
80:98:74:28:3c:5d:dc:29:1f:cf:56:9b:8c:21:97:
d9:94:07:4d:bb:4b:b0:ad:82:ca:78:38:e9:f7:23:
0d:8b:05:3d:96:ed:fa:01:cd:e4:e1:23:ad:f5:7e:
b9:16:81:f4:9f:c3:39:00:22:b4:80:89:f5:e8:31:
cc:64:63:dd:d6:01:37:1c:fd:6a:8d:e9:bc:3f:67:
91:1d:67:b3:37:9b:2f:03:81:f2:d3:08:d2:71:df:
02:6a:63:bc:7d:72:8c:4b:cb:e0:c9:fe:da:44:3a:
19:81:c7:d8:b0:48:10:70:98:c4:bc:5b:77:8a:a2:
4d:df:0b:ed:22:8f:19:dc:f3:3a:b3:2c:8a:c6:91:
af:3a:ee:a9:e8:c4:28:02:78:50:38:1f:c0:f9:32:
69:71:dc:a4:d3:95:7e:1f:9a:d6:ef:d7:73:95:e6:
18:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5D:9C:07:6D:05:74:D8:E9:CA:31:6C:8C:CB:54:37:E9:A5:43:6D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2V2cB20FdNjpyjFsjMtUN-mlQ20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:3a:25:ba:1a:8a:09:fc:cc:f0:b5:04:85:e1:f4:09:0e:9c:
3d:1c:4c:aa:80:cd:01:5c:fc:6a:89:6b:ea:8f:2d:20:a9:20:
bc:13:15:b5:5f:16:c7:e7:ca:e5:f3:8b:50:63:be:a0:66:d7:
b7:fd:5b:6d:e4:74:49:0b:32:18:a7:1b:04:23:91:c6:3c:f5:
84:d3:67:9c:ca:d0:30:e6:6f:20:10:cf:81:2f:c3:4d:51:3d:
7d:5a:71:6a:77:fe:84:e5:b3:11:61:e2:a7:ff:a9:81:ae:32:
99:e1:7b:61:6e:1a:41:22:90:90:64:59:56:eb:d1:31:c0:a6:
59:4a:a6:2b:09:08:56:13:13:f6:3d:4e:d2:dc:c1:93:ad:61:
3d:0e:ff:9f:2e:e7:ac:a2:82:96:eb:fb:77:e0:0e:67:6b:c6:
9d:4f:7a:6d:37:45:04:a7:3e:92:c0:12:53:66:08:41:25:48:
7b:61:38:b4:82:2c:e4:b4:c2:32:8d:75:5d:b8:8a:a2:b6:69:
02:3f:43:ad:d6:7b:79:88:e8:41:20:0f:8c:1e:00:35:c8:0e:
8a:e6:18:37:e3:7e:a9:0e:9d:9b:55:16:a7:e0:9d:00:cc:2e:
16:3f:d8:86:f7:25:b9:93:1f:a2:4e:80:1f:a6:1f:5a:f3:ed:
47:51:0f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:24 2025 by rpki-client