Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7LO7bKamc2VJAiHe0vwB06597V4.roa
File: 7LO7bKamc2VJAiHe0vwB06597V4.roa (raw, json)
Hash identifier: ris3TMmz1U5k/q1n0ZF+78+u1aDcmJR6HUTO3IGuWSs=
Subject key identifier: EC:B3:BB:6C:A6:A6:73:65:49:02:21:DE:D2:FC:01:D3:AE:7D:ED:5E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E6B69E1CA8B17D678767BD39B691A047E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7LO7bKamc2VJAiHe0vwB06597V4.roa
Signing time: Sat 23 Mar 2024 13:04:44 +0000
ROA not before: Sat 23 Mar 2024 13:04:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:6b69:7afa/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6b:69:e1:ca:8b:17:d6:78:76:7b:d3:9b:69:1a:04:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 23 13:04:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecb3bb6ca6a67365490221ded2fc01d3ae7ded5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:97:75:6c:31:f2:78:e0:72:56:dd:17:7c:cb:
dd:6d:5e:e7:8a:5b:71:e7:7b:46:6c:9a:b9:8c:3e:
55:96:49:06:c5:9b:f7:17:09:d7:d5:a7:4b:c1:11:
32:f1:e0:bb:93:cf:27:0b:83:7b:89:c1:f9:c0:37:
48:8e:88:ed:25:88:27:7c:63:7d:dd:2e:a9:16:0c:
60:71:a9:a8:c6:06:05:66:60:e9:e6:10:83:ac:76:
a4:8b:1c:f4:45:33:b3:05:53:48:4a:d6:a6:b0:dd:
d4:41:ce:c9:df:a6:f0:f5:44:30:33:f4:63:98:da:
ce:8c:60:f6:a7:e3:2b:e5:43:9a:6b:30:77:57:84:
c7:9e:45:c0:fe:2b:6c:72:48:07:2c:5e:5f:23:8f:
3e:67:2c:32:9c:d3:a4:de:f9:5e:8e:37:a6:dc:e3:
4f:36:3e:28:c6:ac:2e:fa:cd:a4:41:83:7d:8d:22:
5a:6d:a3:52:7d:1a:f2:c6:85:22:c7:3d:2b:7c:5a:
4c:19:f0:e8:c9:20:f6:81:e7:54:fa:8c:b0:a4:a9:
c7:b9:aa:dc:62:d7:28:32:2e:77:bc:bd:2c:f2:47:
de:c8:cd:86:f8:0e:f4:e5:6c:e9:70:58:db:c0:ca:
42:54:e3:06:60:11:c2:4c:cb:ea:5f:bb:ec:cf:a6:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B3:BB:6C:A6:A6:73:65:49:02:21:DE:D2:FC:01:D3:AE:7D:ED:5E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7LO7bKamc2VJAiHe0vwB06597V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:d2:29:3c:c3:ad:27:f1:8e:5b:81:14:79:f2:4a:e9:f5:2e:
6f:dc:ce:e4:41:b4:00:8e:7a:b2:a2:58:c9:6b:f3:9a:24:ab:
63:5d:cb:a2:88:b8:59:1c:d8:c7:c6:9c:c4:04:dc:19:9f:72:
67:5b:42:dd:ba:7c:8f:31:82:7f:f3:29:d1:85:34:22:cd:8b:
11:90:8e:6c:8d:6a:ff:87:d9:a5:9b:ec:3b:de:29:8c:db:34:
b1:0e:5f:95:fb:40:42:20:88:d3:2f:c1:57:39:9a:48:e0:51:
47:26:0a:b1:ea:28:05:af:94:b9:02:24:3f:8c:eb:b0:c1:d7:
ba:59:bc:28:c8:6b:4f:6d:5e:e2:88:b2:b6:5b:de:e0:4e:83:
fa:23:61:48:f8:23:78:53:37:a9:18:5e:e3:ea:83:5a:d0:76:
8f:00:ec:16:7a:aa:9b:4c:75:4d:1a:8a:13:53:cd:2f:a9:67:
9d:76:89:80:b6:94:b1:c4:6e:8b:1e:85:d3:4f:45:38:c0:92:
81:d5:bb:b2:be:66:a0:ea:6f:5d:59:7a:64:4b:e6:1a:80:e3:
ca:d9:46:11:38:35:74:6f:ac:df:fd:33:22:24:bc:5e:d4:0b:
0a:1b:3e:44:df:51:0c:c2:c5:67:43:8a:63:7d:59:bf:a9:09:
d7:22:75:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:45:29 2025 by rpki-client