Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6JApy1BqSu9LanV1RBk8KYRfvHI.roa
File: 6JApy1BqSu9LanV1RBk8KYRfvHI.roa (raw, json)
Hash identifier: +/xPvZHUPpOR0FgX1DX14p1fENVHNJOSVZUxbrM2fe0=
Subject key identifier: E8:90:29:CB:50:6A:4A:EF:4B:6A:75:75:44:19:3C:29:84:5F:BC:72
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DB3FB37E77B730962D1D461417B7DBE9E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6JApy1BqSu9LanV1RBk8KYRfvHI.roa
Signing time: Fri 16 Feb 2024 22:13:21 +0000
ROA not before: Fri 16 Feb 2024 22:13:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b3:fb:37:e7:7b:73:09:62:d1:d4:61:41:7b:7d:be:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 16 22:13:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e89029cb506a4aef4b6a757544193c29845fbc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:35:38:38:f2:30:37:b8:5f:c5:cc:a7:91:79:
ac:66:c7:1a:c7:0e:0e:6b:0c:23:94:a7:59:e3:b8:
78:e2:d6:6b:d4:86:53:b6:36:c4:3c:ae:60:c6:a9:
0f:1e:3e:6f:e3:b7:a9:e3:c7:87:3e:fa:59:1e:24:
41:76:f7:09:d1:0f:2b:05:a3:af:a3:90:9f:ed:36:
e9:6e:14:8e:57:ce:17:28:f6:5b:14:c7:3c:a7:e4:
4e:e3:40:37:93:72:44:62:7d:70:d5:e0:af:51:73:
fe:e6:8c:48:29:72:6e:33:7e:e8:b4:70:60:01:8d:
da:eb:4d:88:34:6c:8f:9c:c0:1a:05:69:e6:b6:be:
ae:1b:62:1c:5e:da:0e:41:0a:c2:7d:29:95:ab:f4:
8d:a3:46:65:98:63:a8:5b:e3:3a:1e:2c:ca:97:51:
12:9c:a7:36:38:44:e7:68:4b:33:be:7f:e9:40:3c:
ec:59:a7:ec:52:79:12:3e:fe:82:14:3a:a0:da:cc:
83:6c:81:0c:98:1b:c3:a5:5f:d9:4e:01:04:a8:ca:
55:9f:65:c5:20:22:27:47:8a:bf:a1:2c:59:a4:bb:
33:f1:81:5d:1c:68:b3:40:80:5b:c7:82:49:91:ae:
af:15:8e:04:3b:a8:f7:78:5a:d9:84:82:a1:b3:b0:
6a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:90:29:CB:50:6A:4A:EF:4B:6A:75:75:44:19:3C:29:84:5F:BC:72
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6JApy1BqSu9LanV1RBk8KYRfvHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:ec:43:f3:b4:f7:47:7f:51:e9:a5:83:14:a2:5e:2c:c9:df:
40:39:78:21:04:2a:5e:3d:1d:fb:46:e8:11:65:35:22:17:fa:
c6:a4:5a:eb:af:48:26:18:55:b9:69:6c:02:32:be:7d:fb:a0:
e1:7d:0b:4b:0c:38:18:9f:13:01:92:c4:7f:c0:d4:bc:0a:2d:
33:4f:74:c3:de:67:27:77:07:80:06:5d:d8:37:ce:2b:93:9e:
80:14:96:d9:8b:2d:3f:a8:2a:d9:53:b5:be:7d:87:a5:0c:65:
1f:0b:82:62:8e:f9:11:34:ba:b5:d9:13:18:f5:6c:0f:7a:f8:
85:b4:a7:60:30:8d:0c:01:7c:5c:c6:8a:b1:b8:57:c5:19:63:
a4:f0:b0:29:7b:98:3b:b4:77:8f:b7:25:7b:a8:b9:8c:84:76:
2c:39:6a:01:17:0b:61:5d:aa:1a:39:b5:a4:ad:9b:43:26:5e:
70:d5:50:04:8b:a2:49:e1:3a:07:1c:a7:5f:55:77:89:18:ae:
75:58:c7:62:02:94:01:80:41:1a:89:f1:80:dd:f1:28:f7:58:
fa:b7:e3:c8:b2:5b:29:7f:33:e1:1a:75:7b:a4:2b:70:6e:73:
94:77:1e:89:ac:fe:2f:75:66:c6:6f:85:36:f7:60:ef:fd:17:
89:da:37:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:25:32 2025 by rpki-client