Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5Lj4kCOivzJurLDhvo7rEHjjh-s.roa
File: 5Lj4kCOivzJurLDhvo7rEHjjh-s.roa (raw, json)
Hash identifier: 9ISKVAbr3h7S3MgGvIEsTQMduawD1zW9D48DtADUx+U=
Subject key identifier: E4:B8:F8:90:23:A2:BF:32:6E:AC:B0:E1:BE:8E:EB:10:78:E3:87:EB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018ECDF01439AE2BA16012D4316708AACA09
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5Lj4kCOivzJurLDhvo7rEHjjh-s.roa
Signing time: Thu 11 Apr 2024 16:14:06 +0000
ROA not before: Thu 11 Apr 2024 16:14:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cd:f0:14:39:ae:2b:a1:60:12:d4:31:67:08:aa:ca:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 11 16:14:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4b8f89023a2bf326eacb0e1be8eeb1078e387eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5f:eb:fb:96:44:5b:ce:cd:2d:b6:a4:58:ce:
1c:37:b9:f9:ff:6a:9a:50:7b:00:09:e5:08:4c:da:
63:81:c3:ab:c7:f0:37:97:47:86:ae:79:72:5d:79:
e4:ab:17:78:0e:0d:57:11:51:8e:5e:34:e7:ec:b6:
ac:85:84:f2:66:a8:25:c5:a0:d0:61:4c:62:c3:7c:
98:f7:50:75:3d:ea:8b:e3:9b:a7:9c:cb:98:dd:2c:
61:e3:ad:7f:9f:e1:d2:22:d5:1e:c8:c8:4b:30:d7:
ff:86:9b:49:49:6d:ea:0d:99:5e:01:6b:92:32:30:
f9:b3:a6:84:5c:17:db:4c:48:e3:24:f6:57:e9:13:
42:6f:72:d8:a4:62:f6:69:ae:6f:23:68:d3:b9:eb:
45:7f:dd:4c:f6:1a:28:3f:47:b8:44:07:4e:a4:e0:
5a:0f:b0:5f:b0:44:47:d1:b1:4e:f4:74:07:3c:55:
ad:20:1d:7b:25:53:81:8f:b6:66:62:c1:ea:3d:88:
9e:80:f3:d2:18:56:29:34:d1:ed:72:f5:6d:2b:06:
b1:61:b6:00:e6:a3:da:37:ae:29:59:01:55:55:8c:
4b:63:53:8b:94:55:de:1f:d6:c6:3c:2f:67:a3:17:
e3:74:10:72:df:40:85:ef:75:d5:45:36:4f:79:47:
65:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B8:F8:90:23:A2:BF:32:6E:AC:B0:E1:BE:8E:EB:10:78:E3:87:EB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5Lj4kCOivzJurLDhvo7rEHjjh-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:22:7a:1f:3c:5e:87:3e:41:14:45:7e:7a:3e:a8:b1:29:a6:
43:96:7d:de:5f:9a:64:0b:d4:15:03:7d:85:f5:7d:cc:fa:5e:
b9:02:4f:a7:bf:b0:a8:a4:a3:75:a2:46:a1:f4:a2:63:a7:93:
b0:0c:c8:4d:e5:e9:bf:7d:0c:af:bc:12:d1:07:b3:30:f4:b2:
f2:ad:c4:43:16:c0:39:d2:6d:8a:e0:0a:e4:55:11:37:05:1a:
ce:29:d0:45:d2:14:9d:42:47:a8:f5:b8:d1:cb:1c:c6:d9:30:
ad:44:81:f2:65:df:0f:69:77:af:f5:fa:ae:0b:bb:32:d8:59:
85:98:20:54:84:5b:5e:e6:82:bf:6d:1e:bf:2a:f0:b6:f2:35:
ef:4b:82:6c:48:fd:88:09:a0:5a:9d:16:4a:28:80:69:4c:cf:
01:70:03:c8:c8:81:a7:bc:52:8b:0a:b0:98:10:39:ab:47:f1:
76:6b:59:ba:23:87:b2:78:22:7d:bc:61:b0:14:5a:9d:e5:53:
03:73:1b:2b:3b:fd:66:ea:ec:9b:5c:b4:6f:68:3c:dc:b4:83:
b5:36:5e:a2:91:4b:c5:51:ac:38:1d:9a:89:83:89:56:40:04:
ea:dd:e6:9a:a4:03:5a:28:20:ad:4c:07:a3:7f:28:10:7a:66:
bb:83:bf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:38 2025 by rpki-client