Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6_Vuo_Q2jIkh2VJCqF3Qs09nuWM.roa
File: 6_Vuo_Q2jIkh2VJCqF3Qs09nuWM.roa (raw, json)
Hash identifier: TirMCj361UGT1otImRwM5Qr1DZ0+X0sV4DuAiD51nO4=
Subject key identifier: EB:F5:6E:A3:F4:36:8C:89:21:D9:52:42:A8:5D:D0:B3:4F:67:B9:63
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D75F60E7E5E8CCEFC017FB6077B1B34ED
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6_Vuo_Q2jIkh2VJCqF3Qs09nuWM.roa
Signing time: Sun 04 Feb 2024 21:11:16 +0000
ROA not before: Sun 04 Feb 2024 21:11:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:75:f6:0e:7e:5e:8c:ce:fc:01:7f:b6:07:7b:1b:34:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 4 21:11:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebf56ea3f4368c8921d95242a85dd0b34f67b963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9a:9f:9b:93:a0:f5:ce:c4:d5:66:2f:a4:d5:
e1:71:c1:42:8e:43:6b:ca:f6:f9:54:66:b9:76:47:
62:e5:c5:18:fc:28:b5:48:85:cd:d3:48:65:d5:e1:
b6:6e:28:61:71:45:23:26:1d:80:e9:be:be:ea:4e:
63:a6:0f:0d:d9:28:73:58:62:7c:ab:f8:55:51:a7:
20:d1:b3:21:a4:d8:02:18:2f:35:ee:77:1c:59:ba:
db:1f:1c:d2:52:16:96:a8:0c:33:9a:e9:78:72:0f:
66:ea:18:17:dd:9d:1d:f3:88:b8:f2:46:5b:fa:50:
57:2d:3c:ef:fa:9d:ae:f7:85:61:94:17:7f:04:30:
02:db:66:ce:36:91:85:44:75:04:d2:b7:aa:1c:43:
39:d1:ab:a5:1d:dd:73:47:e7:c4:d5:8b:bc:5b:c9:
69:60:26:eb:8e:74:bd:1f:f1:06:23:83:9a:62:fc:
03:ed:4a:4a:8e:2b:0c:00:2c:c6:3f:7a:a1:0b:51:
92:c5:fd:21:d0:ee:7d:ff:a3:44:24:ab:5e:af:b9:
c5:17:4f:46:8d:fa:28:ff:23:9c:a7:e0:6a:6b:15:
54:e6:7c:c4:b6:b7:f1:a0:28:80:6e:62:1c:bb:59:
6d:44:b6:f0:67:8e:56:39:d4:a9:31:3a:79:6a:fd:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F5:6E:A3:F4:36:8C:89:21:D9:52:42:A8:5D:D0:B3:4F:67:B9:63
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6_Vuo_Q2jIkh2VJCqF3Qs09nuWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:77:f5:30:fe:f7:af:c3:f8:3f:d9:a3:ef:43:f6:5e:5b:7c:
98:f5:1a:9c:10:e7:c3:c8:15:d5:7c:e5:22:2d:90:d3:f9:72:
2b:e3:66:f0:ff:de:6d:13:b5:08:3e:a8:7c:18:cf:2c:a8:20:
d6:00:86:d2:1d:93:f5:d0:0e:f6:dd:5a:fe:98:3d:73:7c:56:
a6:e3:e3:70:74:a8:3a:f7:22:29:14:ee:73:7c:61:d7:aa:ca:
25:1a:ad:6b:e7:59:8c:ea:d0:b0:80:31:87:cd:fc:47:3e:c3:
56:8d:56:e8:fa:3d:5c:a8:9d:ab:f8:51:b3:67:81:5c:05:9b:
4e:a6:0b:17:a1:23:27:ee:3c:92:2c:40:45:f3:b1:bc:d0:97:
62:cc:98:d2:d7:21:5c:47:ea:17:d7:e7:30:07:b7:ba:fa:f2:
48:1a:86:8c:58:60:34:3e:3f:2d:d8:82:ac:29:7d:ae:c5:87:
07:24:6d:bf:34:7a:a1:db:98:76:03:d8:72:93:2e:2b:f5:1d:
4b:b7:d2:9c:97:af:1e:e5:f2:c2:2c:53:73:a1:c6:f3:a3:b0:
85:7d:c2:c5:d3:11:8b:5f:97:69:d9:9d:7a:84:a3:54:5b:fd:
04:55:34:67:a4:c6:5f:3d:b3:4a:8b:db:7e:47:90:ed:9f:5e:
a4:78:92:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:17 2025 by rpki-client