Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7_9Xtxd5AtoYtWKIJ8NZKadZAuY.roa
File: 7_9Xtxd5AtoYtWKIJ8NZKadZAuY.roa (raw, json)
Hash identifier: ozPRBc9mFYwX772G2Au8yHrSJ5nRXixdb7cw7h9R/rM=
Subject key identifier: EF:FF:57:B7:17:79:02:DA:18:B5:62:88:27:C3:59:29:A7:59:02:E6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DF8D470370D053B3A6EF53390C1DAF4FB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7_9Xtxd5AtoYtWKIJ8NZKadZAuY.roa
Signing time: Fri 01 Mar 2024 07:04:48 +0000
ROA not before: Fri 01 Mar 2024 07:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18d:f8d3:efdc/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f8:d4:70:37:0d:05:3b:3a:6e:f5:33:90:c1:da:f4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 1 07:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efff57b7177902da18b5628827c35929a75902e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:f3:8e:41:45:ea:fb:60:2d:d6:39:82:32:
0e:cd:b1:04:ea:d5:e7:0e:93:d2:0a:bb:a6:ed:7f:
e4:97:41:9e:78:7d:2f:38:0f:f0:18:f6:48:be:71:
5b:a6:e1:ff:87:96:61:83:54:7e:4b:cd:e8:61:40:
cd:4d:ee:99:9b:0e:c2:88:fc:f6:d6:39:d0:ed:6f:
8e:b1:b2:1f:b4:6f:e0:e8:14:e7:1b:72:3c:60:33:
7a:16:b7:88:15:4a:66:f3:7d:87:48:97:e0:96:e3:
db:7b:3c:50:df:ef:40:d2:3f:0f:9a:4a:32:9e:4f:
9e:c3:5b:22:9a:e0:24:60:51:a7:f9:df:89:35:e2:
46:16:18:e7:f6:c3:9f:82:7c:98:77:ce:0e:a4:21:
5e:eb:7a:03:a9:5e:8d:fb:86:e3:ef:1d:6c:37:7c:
f1:e0:ea:0d:a5:55:78:95:a7:78:8e:29:bc:77:27:
87:57:9e:58:a0:ff:b6:5d:2a:5b:31:be:02:46:cd:
6b:76:5e:0b:48:b9:11:f1:25:40:db:8b:9d:e0:be:
bd:f2:d1:9c:9c:d9:db:aa:c3:1c:b1:26:ce:68:11:
cc:0d:6b:1e:92:b6:26:90:d0:6f:6f:ba:84:b9:32:
f3:3f:c9:22:e5:df:7d:d9:1d:3c:16:08:ed:f7:37:
d0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FF:57:B7:17:79:02:DA:18:B5:62:88:27:C3:59:29:A7:59:02:E6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7_9Xtxd5AtoYtWKIJ8NZKadZAuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:37:65:bb:70:42:41:86:47:fb:43:a1:33:66:44:34:fe:58:
4f:ee:02:c0:f2:7e:4a:14:47:d7:f8:2b:fd:a1:08:44:c7:7b:
70:76:00:6d:c1:c3:84:5f:f7:be:a4:e8:2b:07:42:2d:c5:05:
92:dd:71:ae:47:b4:c3:26:3a:01:28:3b:ed:90:26:ea:88:6f:
22:a8:6e:48:8e:8a:c7:d6:2c:2a:d4:83:20:96:7b:66:71:a1:
75:ab:0b:b1:7a:9c:87:18:94:57:b4:18:87:31:d3:63:97:a6:
70:b4:6e:08:33:b8:4b:95:99:38:7e:46:57:50:c9:3e:21:6b:
7d:a0:01:14:ab:71:15:6f:a0:a9:e3:ad:b4:7c:86:de:32:1b:
50:56:dc:7c:d3:e4:8f:6b:de:b4:f8:d1:99:0e:4e:52:4f:f4:
ac:22:d9:cc:fb:64:4d:33:d2:96:17:ab:16:e7:f4:34:c6:52:
50:fe:64:94:7e:ad:31:2d:92:ce:73:72:e0:6e:96:68:57:21:
1b:1b:fe:86:4c:24:17:3a:7b:df:02:6d:bd:94:c2:71:38:6f:
48:93:a9:46:3d:39:df:6b:ad:9f:00:ef:51:08:ca:cb:aa:42:
1b:69:26:a4:a3:f3:56:99:d5:42:53:cb:fa:6d:1b:9e:31:3a:
e6:c5:56:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:34:00 2025 by rpki-client