Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7ktYgIhk5b8OVlN9Vt8VJSbzUOQ.roa
File: 7ktYgIhk5b8OVlN9Vt8VJSbzUOQ.roa (raw, json)
Hash identifier: MDVYENTU4pr9FWA+A6r61iH0ZJFd10C7MNZaBy2yYyo=
Subject key identifier: EE:4B:58:80:88:64:E5:BF:0E:56:53:7D:56:DF:15:25:26:F3:50:E4
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E54B27471F2B4E052C438B805BBE348B0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7ktYgIhk5b8OVlN9Vt8VJSbzUOQ.roa
Signing time: Tue 19 Mar 2024 03:12:45 +0000
ROA not before: Tue 19 Mar 2024 03:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:54:b2:74:71:f2:b4:e0:52:c4:38:b8:05:bb:e3:48:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 19 03:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee4b58808864e5bf0e56537d56df152526f350e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:91:67:c3:1d:b9:28:66:3a:d4:75:16:83:50:
a6:44:bf:ed:c4:69:e4:4b:aa:2f:05:fa:90:ce:58:
dc:be:e3:b1:d4:a0:ba:ce:52:d5:c1:4b:94:e0:c8:
58:61:62:a6:a4:1c:de:8d:68:69:c5:8b:20:50:7a:
40:33:55:fc:72:61:a4:bc:f1:81:19:ea:65:d7:5d:
25:f2:4e:dd:29:42:7f:26:67:a0:5c:74:69:ea:55:
aa:c9:0b:39:07:2d:ca:b5:d6:bc:70:c5:1d:24:69:
d2:00:19:3c:9b:25:06:1a:70:5a:00:5a:71:38:0f:
93:38:96:2e:eb:53:cd:a7:ee:c1:cb:88:91:20:d2:
c6:70:6a:49:44:18:3d:89:05:ab:f4:d8:a3:8a:97:
b7:31:05:45:6d:f9:28:0f:e0:04:05:5a:3e:1d:aa:
db:8d:41:4d:cf:dd:a9:05:65:46:b9:8d:e1:a6:2b:
0d:32:62:08:d8:32:32:13:a3:66:e5:20:b2:e5:d8:
5c:18:0c:9d:c2:24:9b:e5:40:1c:52:48:f6:f8:c8:
47:52:12:cf:bd:fa:59:b8:c1:17:89:b3:3e:87:27:
56:db:56:23:11:f9:61:a8:ee:cf:94:d5:ca:7d:54:
47:a0:81:61:3c:e3:e2:28:87:5c:c8:e0:d1:c9:f9:
07:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4B:58:80:88:64:E5:BF:0E:56:53:7D:56:DF:15:25:26:F3:50:E4
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7ktYgIhk5b8OVlN9Vt8VJSbzUOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:a2:03:32:5d:d6:76:fb:49:b8:36:0c:8d:ac:62:ed:b2:ee:
e8:84:47:80:45:03:13:16:e5:ab:86:63:c1:ea:99:05:af:48:
37:84:e6:77:15:87:01:87:44:96:34:fe:e3:91:72:81:41:1f:
3b:71:67:48:e7:26:ac:b3:92:e3:50:84:db:1d:ed:12:6d:a4:
83:38:99:5a:fc:b8:53:32:e0:f1:c8:4d:f4:05:34:ff:68:23:
c5:ea:c3:be:ea:b3:e4:2c:5c:e6:52:4b:57:a1:0a:7b:20:5d:
0d:ab:71:20:da:d9:92:ec:f4:6d:00:24:40:53:98:b7:35:b6:
93:ca:86:49:aa:9a:e1:fb:ce:fc:ec:d5:0a:92:77:e9:d1:e0:
47:ac:61:cd:0a:46:97:f3:16:88:ce:21:13:a1:cf:82:57:14:
09:1b:b7:6a:d3:d0:93:9e:2b:93:62:8f:e0:c1:19:90:9a:c7:
71:9f:7d:39:49:43:d9:f0:56:d5:80:a7:1e:8b:2d:cc:e8:72:
37:e7:49:d9:bb:a9:f7:83:34:88:f9:71:8b:d3:2c:08:b1:dd:
ba:66:d5:c7:ef:a3:9c:53:d3:03:52:f8:db:15:05:81:e5:8a:
12:e1:04:d3:f6:19:04:a3:c6:4b:44:63:15:86:1a:2c:56:bb:
da:74:6e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:33 2025 by rpki-client