Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/30ZTMelGhUREc_6O3pQSR-3oPC0.roa
File: 30ZTMelGhUREc_6O3pQSR-3oPC0.roa (raw, json)
Hash identifier: L6ojrqaJ7ye+viGOPevWP0XsSEB3V6zOjBwjVXB+tk4=
Subject key identifier: DF:46:53:31:E9:46:85:44:44:73:FE:8E:DE:94:12:47:ED:E8:3C:2D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E5FDAE60308135FBF5E0EFF1256634619
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/30ZTMelGhUREc_6O3pQSR-3oPC0.roa
Signing time: Thu 21 Mar 2024 07:12:44 +0000
ROA not before: Thu 21 Mar 2024 07:12:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5f:da:e6:03:08:13:5f:bf:5e:0e:ff:12:56:63:46:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 21 07:12:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df465331e94685444473fe8ede941247ede83c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:78:f4:17:28:5e:ae:83:c9:81:67:ad:af:06:
3c:75:72:0f:9a:3a:80:26:dc:98:50:64:ad:b4:f1:
6c:f5:3d:bc:57:16:c5:a7:fe:25:0b:71:61:e4:ce:
21:a2:93:e7:49:39:5c:df:56:2b:c2:ea:9f:0d:14:
32:ce:be:6b:b0:10:59:e6:5b:20:e2:93:18:b6:04:
8e:30:db:79:96:97:5d:70:d9:fb:d1:5a:4f:70:2b:
11:48:b0:a7:94:43:e6:92:f3:6d:71:b9:3f:2d:60:
fc:97:85:30:ed:d8:8f:f7:26:8a:67:45:9d:14:b3:
99:4a:c5:cd:84:d3:44:f9:33:c4:ff:96:b2:b8:3a:
3a:b9:63:32:b3:cd:a6:92:74:f2:23:21:29:5e:ad:
ec:ba:01:3c:95:87:90:53:92:15:96:8f:16:e1:e9:
98:64:9e:e9:37:86:c2:09:20:5f:8f:fe:d7:26:5e:
a8:87:86:db:bd:f4:0a:94:f9:5d:41:55:71:92:85:
09:be:57:96:9e:a4:3e:80:ac:7e:59:b6:84:46:94:
8c:e0:d7:17:52:06:ca:eb:a8:f7:78:69:bd:d1:ec:
9d:7c:38:e0:a5:bc:07:05:f7:50:ac:2e:49:b2:26:
03:65:a0:a9:f7:a1:d9:b7:47:5a:09:1b:cc:78:aa:
19:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:46:53:31:E9:46:85:44:44:73:FE:8E:DE:94:12:47:ED:E8:3C:2D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/30ZTMelGhUREc_6O3pQSR-3oPC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:ce:bc:38:8c:65:b7:0e:b1:79:d3:fb:5f:bb:1f:ca:e7:df:
d6:d6:66:04:f7:0f:61:b8:e9:14:ea:c4:86:7e:57:ba:52:8b:
08:4f:b2:a1:88:d4:14:4a:11:6e:3a:6f:6a:a7:c8:a4:ac:73:
fe:b8:d6:8f:09:c2:9c:3a:ab:39:36:10:65:18:61:20:0b:42:
af:92:68:d6:6b:53:b1:49:66:17:4a:64:79:ed:76:1c:8d:9b:
58:18:94:18:61:55:cc:8a:26:af:ab:68:9a:22:51:30:88:11:
a7:c4:a1:83:62:a3:0d:6a:fc:12:dc:63:db:ab:18:f3:4b:35:
0b:08:79:2a:11:66:f9:c5:de:df:c0:8a:98:aa:c7:83:1c:a5:
a3:13:a2:10:5b:d4:a1:d4:82:cf:72:a3:cd:dc:71:5e:bc:0d:
3d:9e:6f:e9:82:39:49:97:71:64:7e:86:4d:ce:c5:02:c2:e6:
35:6a:ea:0b:61:f8:1a:84:89:23:d8:d9:be:e1:f3:f6:de:04:
d5:ca:c0:e8:bf:70:15:5f:23:4c:e5:93:10:0e:fe:01:2c:ff:
aa:aa:4b:92:34:2b:1e:41:11:3d:f5:d0:f0:0c:5e:24:5e:59:
4b:8b:36:ac:ac:a7:2e:3f:f7:cd:d4:d8:4a:74:b0:10:a3:fc:
a4:c7:4d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:30 2025 by rpki-client