Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/769JSFmm05TG64w1UyyaEZ0eSww.roa
File: 769JSFmm05TG64w1UyyaEZ0eSww.roa (raw, json)
Hash identifier: Tu7M+B/yBA6sxAIGq7rOzb+/rmf2MoPKri7DU/C2CqE=
Subject key identifier: EF:AF:49:48:59:A6:D3:94:C6:EB:8C:35:53:2C:9A:11:9D:1E:4B:0C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DE96B6E50C54C8DF9F22897F278C26D89
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/769JSFmm05TG64w1UyyaEZ0eSww.roa
Signing time: Tue 27 Feb 2024 07:15:48 +0000
ROA not before: Tue 27 Feb 2024 07:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e9:6b:6e:50:c5:4c:8d:f9:f2:28:97:f2:78:c2:6d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 27 07:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efaf494859a6d394c6eb8c35532c9a119d1e4b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:df:dc:e3:94:6d:0d:a2:e2:0a:c2:d1:59:c6:
09:ae:91:44:b1:76:96:b8:5e:b5:43:43:3f:3a:76:
1b:aa:66:df:98:6f:a9:01:57:0c:c1:4d:7a:44:d6:
4c:de:0b:34:9f:e7:ee:0e:fd:0e:7c:37:9b:ae:7f:
d1:65:6c:1e:a5:8d:e7:86:36:4f:3d:b5:5f:11:49:
9b:ee:81:69:cb:3e:9a:a3:39:95:d5:e8:e4:db:6c:
fd:d9:e8:22:11:64:5b:8e:6a:b6:50:b3:74:9d:9c:
e5:c3:88:9c:b7:27:ed:90:29:63:a6:c0:f7:3c:36:
c6:f3:24:a3:a0:36:59:26:fc:ac:96:c8:13:6f:e0:
22:3b:e2:e0:00:23:f6:cc:ad:8f:ef:68:d3:44:57:
5a:54:c6:2a:04:9f:30:1f:3b:05:16:ed:03:66:a7:
4b:f0:33:c0:05:a7:2a:ac:d6:a3:38:6b:a9:76:c5:
45:49:13:1f:cf:56:e6:d2:d1:de:de:a5:58:8c:57:
e9:7f:bb:5c:e0:f9:1b:de:2d:31:b4:8b:43:58:e6:
20:9b:20:98:0b:8d:5a:0b:77:a4:00:c4:30:ed:8d:
1a:fe:a1:16:51:da:25:ac:03:30:56:e1:e2:60:9c:
12:02:cb:cf:b1:07:72:7d:d0:f5:af:b6:a6:58:d3:
0d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AF:49:48:59:A6:D3:94:C6:EB:8C:35:53:2C:9A:11:9D:1E:4B:0C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/769JSFmm05TG64w1UyyaEZ0eSww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:24:43:11:9d:55:49:6d:67:af:f4:a8:95:cd:4f:1f:c8:23:
b6:74:cf:0d:29:e0:af:88:e0:7f:db:fc:34:fb:f3:98:73:5c:
fd:9e:71:e2:c4:38:bb:15:47:d4:cf:14:09:2a:b4:43:6c:e6:
40:66:5b:e4:f8:63:9f:a6:6a:f9:8f:2a:d1:e7:53:23:c3:6a:
c1:dc:60:b5:c4:64:f2:59:d4:0c:bc:92:6c:48:6d:73:df:52:
c0:fb:9a:20:f3:3c:eb:b6:a6:53:2a:3b:4c:65:c5:ff:fd:11:
66:06:0f:61:1f:c8:43:a1:9d:44:e4:b4:d3:97:23:b8:e0:f8:
5e:0b:20:b1:4e:3b:3b:c3:c4:31:96:3c:24:f0:c9:58:45:8c:
09:32:95:35:27:f8:2c:7c:29:77:88:b3:d6:9f:02:39:5f:3c:
d8:b2:e3:83:b0:8b:72:26:ca:a5:c4:f6:43:a2:fe:72:80:34:
9e:6b:9b:3c:45:38:36:8b:c1:b2:4e:09:9b:8c:f6:c1:fc:f2:
42:26:19:0a:4a:57:c9:f9:e3:bb:c7:cc:24:8e:cb:7e:8e:df:
59:97:a8:9e:09:eb:97:b1:83:0c:9a:0e:d1:16:77:b0:cd:49:
95:96:e3:19:24:99:7c:38:81:af:a6:b9:9a:06:15:19:6c:c5:
00:27:6e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:29 2025 by rpki-client