Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2zE9RjHSRTdpI38YUrZe7V-tR0U.roa
File: 2zE9RjHSRTdpI38YUrZe7V-tR0U.roa (raw, json)
Hash identifier: Eb4mbGJ6TGXpLj5x+Bk6ILfRfZUcx/GP8J+XTdpnX08=
Subject key identifier: DB:31:3D:46:31:D2:45:37:69:23:7F:18:52:B6:5E:ED:5F:AD:47:45
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D88D8F1EC3D74A22B931468A65D7136BA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2zE9RjHSRTdpI38YUrZe7V-tR0U.roa
Signing time: Thu 08 Feb 2024 13:12:15 +0000
ROA not before: Thu 08 Feb 2024 13:12:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:88:d8:f1:ec:3d:74:a2:2b:93:14:68:a6:5d:71:36:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 8 13:12:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db313d4631d2453769237f1852b65eed5fad4745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:70:d4:3a:5a:fe:5c:c3:a3:58:35:51:b8:
2d:96:c5:61:d9:39:c9:77:e3:d2:2b:1f:04:87:74:
dd:1f:5d:fe:b6:1d:47:dc:d6:a1:6d:c0:1b:4c:6d:
22:79:02:2b:70:6b:c7:76:80:df:1a:ae:64:f7:2b:
79:f4:1c:17:36:34:c1:7f:f2:ff:0c:8d:18:50:84:
91:e4:bf:c2:5b:2b:b7:93:dd:5c:b9:e2:87:67:15:
44:8c:77:ce:94:b2:9f:66:4b:65:23:b5:9f:8c:a6:
c9:e6:a4:63:1d:6f:9d:f0:15:d3:7e:98:e6:ca:65:
77:76:27:32:72:cf:a9:82:e5:e3:43:73:c4:67:74:
14:ce:e5:99:dd:23:bc:a4:82:8b:19:86:65:f1:91:
60:a5:6c:95:b5:60:1b:5e:ac:16:8e:ae:b9:84:34:
09:b4:c7:2d:23:4e:c2:4d:bd:ae:c6:42:35:77:15:
5b:7f:62:6a:3f:bd:b2:84:18:e2:f1:6a:d6:27:31:
b2:4b:e2:7d:ee:12:c1:30:3c:f1:d8:e5:c4:5b:5f:
39:b9:b5:7f:35:f6:e8:58:74:56:51:54:a5:1c:43:
59:a1:c0:98:38:76:a0:a5:da:97:e6:86:02:03:50:
5f:6b:1a:94:99:de:b9:5d:a3:1f:7c:1d:a4:3e:cc:
1e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:31:3D:46:31:D2:45:37:69:23:7F:18:52:B6:5E:ED:5F:AD:47:45
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2zE9RjHSRTdpI38YUrZe7V-tR0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:51:f0:02:b8:1c:37:2d:85:42:1a:f5:a7:7c:02:dc:92:74:
62:86:cc:e5:87:15:6a:b6:4d:26:8d:20:31:8d:3d:7d:59:03:
85:0a:30:e0:cd:75:b6:54:0d:ed:46:15:1d:56:14:fc:a0:17:
6f:c2:3a:f2:5d:54:04:6f:9a:d2:60:b4:62:54:5f:69:eb:d2:
89:82:0e:09:9d:8e:75:fb:79:17:5f:65:0e:cd:0d:e8:6c:22:
a5:0a:8f:65:98:c3:00:7e:74:57:67:63:27:63:1e:51:a7:e7:
98:09:0b:c4:bd:76:14:03:6a:d0:52:66:91:01:c2:47:7d:f2:
08:95:07:fd:18:3b:10:06:36:c8:75:70:83:f0:0f:38:f8:3c:
a5:ee:e3:b3:02:5b:a9:fe:4e:33:76:62:04:35:fd:75:11:f0:
ec:6a:d8:85:95:58:c4:9f:1f:14:8d:c5:f7:80:95:23:dd:0d:
b8:b9:af:db:75:66:dc:cc:3e:d5:de:27:10:81:31:22:68:23:
8f:ea:fe:fd:1c:41:37:f1:5d:bc:1a:08:62:27:c9:3f:b9:46:
87:5d:f2:1d:04:51:11:92:d1:9f:c3:6c:81:38:a1:f5:92:26:
1a:09:d8:b9:cf:1e:8f:f6:cf:9c:9c:dc:2b:23:84:a9:e7:8c:
8f:69:ef:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:11:55 2025 by rpki-client