Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5hCiz9fhWFVafrWNbEIIB79hGRQ.roa
File: 5hCiz9fhWFVafrWNbEIIB79hGRQ.roa (raw, json)
Hash identifier: 7/AluyQRUIBjc4Pa+Gos0tNAnICc0kHWg+1IETOAlJI=
Subject key identifier: E6:10:A2:CF:D7:E1:58:55:5A:7E:B5:8D:6C:42:08:07:BF:61:19:14
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D642B829868C86CA662BD3D80E85C6056
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5hCiz9fhWFVafrWNbEIIB79hGRQ.roa
Signing time: Thu 01 Feb 2024 10:16:29 +0000
ROA not before: Thu 01 Feb 2024 10:16:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:2b:82:98:68:c8:6c:a6:62:bd:3d:80:e8:5c:60:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 1 10:16:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e610a2cfd7e158555a7eb58d6c420807bf611914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:6e:f5:e1:7e:3a:b1:ed:f6:64:66:c6:2f:
b2:fa:50:f4:e5:cb:a4:0e:ae:32:74:74:2e:f0:25:
3f:d2:dc:b2:62:65:84:c9:d0:61:06:ab:30:36:b5:
70:5b:5f:53:01:7b:cb:b6:70:40:7e:0d:37:51:28:
3b:7a:a9:5e:6e:05:66:ca:ff:25:c4:79:77:7d:d9:
26:bb:86:a9:71:49:2d:91:3d:58:e6:b9:45:15:9a:
60:3d:1b:29:84:ca:c2:cf:59:a9:bd:5b:a9:16:bb:
e2:e0:6f:6b:1c:d0:39:de:e6:fb:63:72:8e:31:eb:
21:37:ce:0e:3d:73:0a:df:9a:07:6d:d5:86:b2:81:
63:15:93:03:85:b4:f8:f1:29:c8:82:aa:78:d7:a7:
73:d7:1d:47:05:f8:02:34:e6:f5:65:ba:9b:53:f2:
86:ff:45:4f:d8:30:f4:2f:f9:06:81:93:92:5e:18:
d8:4f:ef:fb:be:b1:18:d6:46:80:6a:7b:34:c1:a6:
88:20:d8:8f:b5:1b:04:4a:d9:12:e0:7d:3f:c9:9c:
0b:43:bc:ae:ed:6a:ca:15:77:9b:a8:61:5b:74:78:
05:4a:6d:24:a3:99:ff:da:a2:42:db:10:27:26:0a:
46:4b:2e:79:8d:d1:62:cb:a1:6e:04:dd:bf:a6:b3:
0b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:10:A2:CF:D7:E1:58:55:5A:7E:B5:8D:6C:42:08:07:BF:61:19:14
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5hCiz9fhWFVafrWNbEIIB79hGRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:51:77:88:31:33:02:1c:96:bb:4a:ea:8c:7a:d7:a5:b7:53:
8e:25:cf:fb:c0:e3:bb:75:92:61:d0:42:a3:73:3f:e5:81:50:
bc:85:8a:bb:a0:38:5c:7b:e2:64:f4:8c:17:91:ed:7f:91:38:
16:76:f0:ca:17:29:d8:08:82:ef:52:8a:8a:da:e0:fd:f8:4f:
d2:1c:b1:38:86:eb:9d:9d:fd:30:cf:3e:0f:58:80:ff:ab:ba:
6e:bd:36:22:92:42:e5:c5:0a:12:9f:d4:13:df:01:52:c2:75:
fa:0e:c7:9c:b8:c6:f7:be:a1:f1:83:28:5a:b3:e0:33:5f:89:
bf:51:8b:c9:0a:ad:37:0f:2d:0c:f8:39:45:92:af:51:d0:f1:
6a:9f:48:16:58:f3:b8:52:1f:27:9d:f0:f8:ef:e9:ef:03:cd:
57:c9:f5:b1:25:5b:69:7f:02:5f:5b:13:44:f4:41:06:5f:2f:
17:8c:da:5b:0e:49:7e:c2:42:a7:eb:a0:5d:7e:fc:23:b8:28:
57:16:9a:f4:ee:db:88:04:94:0b:ad:de:ca:e1:bc:a8:ed:01:
b5:41:a0:63:39:e3:e6:59:15:5f:ae:f4:a5:8b:0b:ef:a3:47:
e5:1b:6d:32:c6:46:5d:0c:20:a4:46:a7:a8:cb:48:bc:b3:c9:
65:25:b7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:15 2025 by rpki-client