Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9U6Qw-v1OgOCf7EX0jxMn8vYpzA.roa
File: 9U6Qw-v1OgOCf7EX0jxMn8vYpzA.roa (raw, json)
Hash identifier: +Nm1/94sxdZHbAGPtD6yZDfgQlyViyhMQK0bR4SMS2c=
Subject key identifier: F5:4E:90:C3:EB:F5:3A:03:82:7F:B1:17:D2:3C:4C:9F:CB:D8:A7:30
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E6CEFE60D994C07762CFF357E315B69B8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9U6Qw-v1OgOCf7EX0jxMn8vYpzA.roa
Signing time: Sat 23 Mar 2024 20:10:45 +0000
ROA not before: Sat 23 Mar 2024 20:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6c:ef:e6:0d:99:4c:07:76:2c:ff:35:7e:31:5b:69:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 23 20:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f54e90c3ebf53a03827fb117d23c4c9fcbd8a730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:01:73:d1:7b:8d:a7:89:9b:c9:47:5e:19:
bf:e8:35:30:78:e1:8a:97:28:3e:64:cd:fa:cc:f3:
64:f8:5a:06:08:6a:f8:c6:5b:1d:83:b1:32:9d:c1:
fe:bb:1b:9f:e8:08:0b:6d:52:6c:16:8f:56:19:99:
56:1b:36:81:12:70:56:a0:a5:c9:bb:7d:82:74:c6:
38:01:18:71:f3:1b:55:5d:48:b0:fb:51:10:0f:76:
93:7f:c9:de:d2:83:74:19:e9:26:20:b9:6b:f8:13:
9b:90:d3:04:e5:aa:fc:a7:da:3c:dd:e6:01:5d:9f:
a7:96:42:44:34:4c:13:e1:c7:c0:d2:f8:1f:bd:45:
92:e0:7b:1c:01:87:33:2e:c3:fc:bb:31:90:ee:5d:
f9:24:38:d3:e9:37:e4:21:bc:e1:39:d8:d6:de:41:
1d:12:16:41:1e:d6:33:92:4f:14:06:cc:a0:04:71:
f0:7f:7f:4f:f0:c0:22:99:42:c9:3c:e7:3d:a9:2b:
ff:5a:eb:7b:98:25:7b:bc:06:75:28:b1:18:1d:6e:
22:39:c8:34:01:71:5d:1d:db:cf:08:cd:0a:ff:1d:
62:b0:4a:5a:67:38:52:df:93:14:e1:c0:9e:84:29:
59:4a:1d:37:c2:c2:79:ba:ed:b8:3d:ea:61:cb:9d:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4E:90:C3:EB:F5:3A:03:82:7F:B1:17:D2:3C:4C:9F:CB:D8:A7:30
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9U6Qw-v1OgOCf7EX0jxMn8vYpzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:a6:3c:94:67:87:01:d9:34:65:2b:0b:d8:4f:94:7b:c9:0b:
41:7e:2b:fb:3d:87:b1:b3:29:e7:f3:05:5c:89:c4:4d:0c:67:
e7:06:9d:af:a0:ac:33:3e:2f:68:c6:b6:65:a2:c6:0e:d0:8d:
a2:29:3e:3c:fe:54:a6:ea:78:2b:b7:88:51:2b:a7:a7:af:15:
5f:28:09:fa:95:54:b0:32:3f:5c:aa:39:04:e6:86:aa:29:a9:
4b:8c:bb:59:51:7e:fa:49:50:96:21:77:b1:e5:c7:a2:c8:15:
f3:a0:a2:1b:85:4b:22:18:f7:58:4c:e0:d1:98:4a:f8:53:0d:
44:29:36:7e:d3:fc:14:ca:da:71:5a:75:2b:b0:3e:6c:6c:d4:
21:43:73:6b:73:78:ef:ba:4f:b9:b1:7d:65:7e:04:18:0d:6d:
b2:8b:03:d2:14:09:6c:a0:45:39:35:9b:75:2c:d3:0b:be:c5:
99:23:83:71:48:90:bc:02:13:22:a0:b7:45:54:9f:dd:c7:3a:
20:38:f4:97:ad:f0:29:9b:69:2c:99:16:ea:0e:2e:f7:5d:5f:
c3:eb:9e:3a:29:9f:18:7f:df:8f:f1:ab:db:49:5b:29:06:f8:
58:9b:89:8c:dc:d9:c0:7b:fc:d2:98:d4:ff:5a:50:d2:39:d0:
72:22:b5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:02 2025 by rpki-client