Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6UvdJBJ9L58b1Pzhbgy0PQSQSdY.roa
File: 6UvdJBJ9L58b1Pzhbgy0PQSQSdY.roa (raw, json)
Hash identifier: JWzPn5wAaQqQKYYCV7j8j8EiX0KDx2cYj9Fxcwh17I0=
Subject key identifier: E9:4B:DD:24:12:7D:2F:9F:1B:D4:FC:E1:6E:0C:B4:3D:04:90:49:D6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CDE79B85A8DCE55F7A04860F26238D1C8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6UvdJBJ9L58b1Pzhbgy0PQSQSdY.roa
Signing time: Sat 06 Jan 2024 11:12:48 +0000
ROA not before: Sat 06 Jan 2024 11:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:de:79:b8:5a:8d:ce:55:f7:a0:48:60:f2:62:38:d1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 6 11:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e94bdd24127d2f9f1bd4fce16e0cb43d049049d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:6b:ef:05:38:55:8c:3a:3c:27:f1:6c:c7:
45:12:6d:9e:7e:8b:31:f7:79:9f:5a:a0:29:3c:bd:
34:5d:d1:4b:4b:06:57:1d:30:58:96:f2:1a:93:11:
0f:05:4e:aa:21:c2:a7:7c:2c:88:ee:b1:f4:60:a2:
bc:34:18:f7:a4:38:75:6d:b3:e0:ef:42:92:13:ea:
ab:17:35:fc:53:d1:71:9b:38:01:48:6c:48:ed:f5:
ad:83:7f:29:dd:55:5f:30:b7:95:12:d9:92:1a:ff:
c2:92:b7:ac:b6:55:62:18:5a:ed:e3:e6:a1:1b:42:
73:7f:2d:ed:49:ac:ac:5e:50:94:7a:2a:25:35:29:
1a:55:8e:2d:73:94:d7:66:39:14:56:44:53:ed:97:
97:ac:0c:cb:2d:ff:b4:48:02:50:ba:a4:c2:05:05:
af:21:90:70:c3:7b:08:dc:dd:e4:be:7c:b6:74:83:
cb:60:12:db:1a:e4:b0:83:f9:4b:b7:64:9a:b4:ad:
10:4b:5b:1d:06:26:71:6e:6a:0e:08:24:e4:21:fa:
c8:89:d6:75:0b:6f:46:c4:46:31:7e:4b:1e:34:5a:
ce:3a:55:3a:b7:a2:6b:b4:f5:67:1c:91:70:42:96:
50:33:af:f1:7d:4b:4d:74:dc:2b:12:79:15:0f:00:
aa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4B:DD:24:12:7D:2F:9F:1B:D4:FC:E1:6E:0C:B4:3D:04:90:49:D6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6UvdJBJ9L58b1Pzhbgy0PQSQSdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:56:d3:d0:9d:76:bd:98:af:b4:d7:36:2f:19:1b:fa:b8:19:
2a:c2:76:14:22:5c:70:89:ba:f1:ec:79:3b:76:65:0f:f5:23:
14:87:d7:c2:2f:fc:01:14:f6:96:6c:e4:9a:07:33:03:62:36:
28:96:fe:09:a4:f6:c9:af:18:a5:b7:a2:9a:0b:19:50:f4:83:
47:74:b3:a7:3a:78:66:c8:ee:13:d1:9f:c5:6b:e3:52:1f:c9:
b5:0f:91:d8:a4:8e:d2:9a:0c:25:f9:48:ec:eb:83:40:0c:27:
c8:cd:25:73:80:92:b3:64:c9:be:c5:e4:6f:28:07:3c:10:34:
7e:ab:0d:5a:af:b3:87:7d:29:29:ae:d3:93:48:53:d4:28:85:
93:28:70:3e:5a:9d:b6:39:37:3c:c0:f3:3a:26:6a:e7:13:6a:
df:61:9f:a4:f6:82:a1:0c:2a:d7:06:be:8c:77:46:64:a2:d6:
e4:9f:6a:3b:b6:be:25:e1:12:18:5d:95:c0:12:80:07:ca:78:
ec:c4:b8:f8:6f:e9:53:8e:84:e3:3b:b5:e6:bb:02:90:36:a0:
d1:a4:b8:65:a9:4d:00:bd:7b:5f:3f:e8:6f:c0:fa:b6:f8:7c:
f6:4b:08:f0:df:57:5d:05:b8:f8:08:5d:22:71:94:50:22:11:
10:b9:a1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:03 2025 by rpki-client