Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4gfLfvjvuPph0ypnXnnPSYkeOKY.roa
File: 4gfLfvjvuPph0ypnXnnPSYkeOKY.roa (raw, json)
Hash identifier: VAtHgSkzgo+yGizGs/TBTlX2g7TSlVvP7WN6RXlRlCY=
Subject key identifier: E2:07:CB:7E:F8:EF:B8:FA:61:D3:2A:67:5E:79:CF:49:89:1E:38:A6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DDFF6C6F77252CE7B600EF22E17D843E3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4gfLfvjvuPph0ypnXnnPSYkeOKY.roa
Signing time: Sun 25 Feb 2024 11:11:48 +0000
ROA not before: Sun 25 Feb 2024 11:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:df:f6:c6:f7:72:52:ce:7b:60:0e:f2:2e:17:d8:43:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 25 11:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e207cb7ef8efb8fa61d32a675e79cf49891e38a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:1f:e1:4f:93:5f:05:15:a3:5c:06:2f:45:
60:a4:bc:09:b6:35:a6:a7:66:ab:65:a7:23:ed:9c:
70:99:4f:c3:d7:58:44:d2:b7:b7:60:1f:25:d7:00:
b2:10:53:37:a2:6e:fd:67:d6:9b:d1:8c:87:99:13:
03:7e:cc:17:64:ab:44:d1:35:9e:6c:86:3f:bb:a3:
47:0d:b8:fb:91:92:95:0a:55:af:15:bd:03:57:47:
38:2e:3a:ff:67:6b:62:3d:cd:bb:4c:0b:ea:b3:7c:
b2:f5:ca:cd:af:d6:38:bb:98:ef:fe:77:e4:09:86:
6e:ae:de:e7:8e:35:84:70:48:97:3d:04:39:10:ae:
84:c0:5f:2a:75:8b:3a:60:a1:a5:d9:78:d6:b6:a7:
db:d6:de:8f:12:2e:88:a1:ca:7a:fc:62:f4:92:44:
9e:9c:e6:b3:d6:02:63:5f:d5:0a:da:83:c2:57:0b:
50:b4:be:3b:10:e1:50:2f:41:4d:6f:c2:7c:70:ec:
85:25:16:90:1d:38:fe:db:ff:08:81:42:07:01:de:
78:41:6a:39:1e:fa:0b:ba:a1:d7:b1:7a:6b:41:4e:
e3:90:30:f8:f3:d1:3c:3a:62:24:5c:48:b5:88:b2:
32:b4:31:02:2e:21:73:6a:38:10:06:b1:6b:f5:14:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:07:CB:7E:F8:EF:B8:FA:61:D3:2A:67:5E:79:CF:49:89:1E:38:A6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4gfLfvjvuPph0ypnXnnPSYkeOKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:0b:8f:fd:92:65:a4:c2:6f:cd:82:53:35:c1:bf:9e:a6:50:
19:23:b4:5a:fd:87:67:98:6b:a5:e9:17:3d:73:e4:1d:17:cb:
17:08:6c:93:d2:db:1d:52:5e:ae:bb:62:ee:14:bd:24:40:35:
05:50:b3:a3:27:1b:e8:64:b4:65:a2:c1:cd:49:a7:f4:23:44:
7d:5d:4a:99:6a:c6:f3:9d:3e:3f:a6:3a:76:9e:43:c7:22:c5:
32:c4:8b:1b:0a:84:6f:f9:b6:f1:3f:50:77:38:75:b1:fa:44:
29:f6:a9:7f:4c:56:e7:fe:bf:f6:54:03:44:1f:50:f0:69:6c:
39:08:9e:58:87:64:06:e3:d2:24:c0:43:0f:7d:7b:eb:ab:6f:
9b:e7:27:13:ba:66:a9:db:3d:87:59:d9:45:77:f6:63:43:06:
5d:0e:e7:24:82:a4:de:3a:73:8c:38:8c:de:b9:d9:fc:19:c6:
5e:b1:1d:2e:c8:7b:5e:b0:57:3a:c2:e3:22:84:38:98:fc:24:
ac:41:51:6c:70:14:b0:c5:c3:62:b6:fc:61:80:fe:c2:d8:2b:
f9:b4:d7:28:6f:07:e4:9e:0e:d6:ad:17:eb:a1:ba:fe:6d:5d:
6b:68:ff:ce:90:8a:20:5d:ff:e9:dc:70:26:7e:7c:20:2f:08:
10:42:9c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:38 2025 by rpki-client