Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5RHJ_srpwQ9QWLZpP3ib90x8XV0.roa
File: 5RHJ_srpwQ9QWLZpP3ib90x8XV0.roa (raw, json)
Hash identifier: Gwzagf0g/SnvrLNYFFcfOvzUc3boiLr6Q8ceuDe515c=
Subject key identifier: E5:11:C9:FE:CA:E9:C1:0F:50:58:B6:69:3F:78:9B:F7:4C:7C:5D:5D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DCDF259C1C14A3A96D3E99FC1C5FAF009
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5RHJ_srpwQ9QWLZpP3ib90x8XV0.roa
Signing time: Wed 21 Feb 2024 23:13:48 +0000
ROA not before: Wed 21 Feb 2024 23:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cd:f2:59:c1:c1:4a:3a:96:d3:e9:9f:c1:c5:fa:f0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 21 23:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e511c9fecae9c10f5058b6693f789bf74c7c5d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:96:c7:88:4e:c2:ea:dc:c1:e9:3b:ab:be:d5:
67:e7:f2:ff:d3:c4:c2:38:2f:a0:d6:f4:3f:b0:34:
c8:87:7a:82:c7:66:d7:1b:eb:d1:cf:bb:1f:b8:c8:
4c:24:49:47:84:8b:90:85:10:56:5f:0d:7a:c8:f9:
c1:82:8b:a3:1c:9e:fd:d7:12:94:9e:8c:9a:d1:49:
ae:14:53:56:38:d1:26:16:a8:09:f3:e1:c8:b4:80:
64:29:b9:07:a1:f3:ec:52:fc:eb:25:a9:c7:2f:da:
7b:59:8e:43:01:c1:d8:27:7a:92:80:69:22:4b:86:
f2:b1:f7:90:42:92:e9:33:f9:4c:37:5b:d0:52:8e:
e7:33:24:02:dd:1c:ea:99:2c:e4:c4:74:71:c3:c1:
27:87:53:50:4a:61:51:7d:df:13:1a:54:8e:6a:6c:
74:e6:d3:73:a0:36:45:97:63:1d:87:d5:5e:03:5b:
47:18:66:df:b0:89:f9:87:05:16:75:b0:58:76:cf:
b5:55:1f:82:60:f2:c1:2f:42:a6:f3:4d:60:8a:c2:
06:49:11:41:ce:6f:9d:48:4a:22:8d:63:98:85:84:
d9:ad:f6:77:9c:b8:71:64:7c:fc:55:99:29:2b:2a:
2c:25:97:67:84:d0:69:e9:bb:93:8e:f8:b7:ed:22:
d1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:11:C9:FE:CA:E9:C1:0F:50:58:B6:69:3F:78:9B:F7:4C:7C:5D:5D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5RHJ_srpwQ9QWLZpP3ib90x8XV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:e6:5d:26:56:18:6c:25:c3:65:37:bb:72:98:eb:fa:47:bb:
55:d6:3a:11:55:67:19:3d:5b:6f:3b:16:16:9e:da:7f:7f:82:
63:ac:67:73:bc:b7:c7:18:09:71:db:7a:c5:7e:08:c1:f0:94:
b7:a8:7a:e9:8d:b7:b2:8e:67:c7:af:37:10:c7:bc:89:d9:d7:
b5:de:e2:32:30:5e:24:0e:a2:ee:50:2d:c4:b2:6f:7f:0e:64:
a8:31:49:e2:24:08:5e:e3:80:6c:38:a8:50:c8:ac:e5:2b:9a:
63:87:c1:d2:23:5c:72:65:c3:24:bd:29:bc:71:07:26:ca:21:
52:52:ef:14:9c:28:a3:d7:53:bb:35:3c:ba:15:dc:3d:7d:ba:
ca:5a:0d:21:e1:d0:d2:0d:3b:fa:b8:a8:1d:a5:9d:40:a5:78:
bd:c8:cb:bb:09:40:39:c7:8d:ff:80:ec:04:8a:17:c1:7b:5e:
13:a0:d6:17:44:e5:ff:19:4c:61:f4:c9:b8:8a:e2:39:a2:3a:
c9:bf:6d:08:cc:f6:c7:15:3d:27:52:f6:67:01:63:d6:6a:f9:
91:44:ba:cc:08:6a:04:72:a9:9f:39:30:26:8f:43:14:05:fe:
1a:14:4f:f4:34:ca:ed:37:8e:51:46:10:21:53:53:6b:bd:d1:
a3:24:17:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:25:22 2025 by rpki-client