Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9bYqAIHD5yJrr0j7zpMV9cOXSwA.roa
File: 9bYqAIHD5yJrr0j7zpMV9cOXSwA.roa (raw, json)
Hash identifier: t/8+7yoV/WAoMxNqgnWttoMdp48be1QWiJMTGDZmkoc=
Subject key identifier: F5:B6:2A:00:81:C3:E7:22:6B:AF:48:FB:CE:93:15:F5:C3:97:4B:00
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E781A2CA83BB307ACA2878F7C77FACA0E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9bYqAIHD5yJrr0j7zpMV9cOXSwA.roa
Signing time: Tue 26 Mar 2024 00:12:45 +0000
ROA not before: Tue 26 Mar 2024 00:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:78:1a:2c:a8:3b:b3:07:ac:a2:87:8f:7c:77:fa:ca:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 26 00:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5b62a0081c3e7226baf48fbce9315f5c3974b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c6:f4:64:c3:be:15:4b:50:ed:d2:3c:04:7d:
fa:ad:c6:8a:7e:5a:40:db:95:67:3c:1e:0a:0e:3f:
98:a7:4b:40:44:99:ab:b1:77:40:ed:7e:39:c7:49:
64:ae:ec:39:64:77:ff:e8:78:7d:d6:ba:8b:12:35:
ca:30:86:88:d3:32:13:e9:49:1b:17:fb:3e:45:30:
1f:b6:b3:7f:2f:73:f1:e4:d4:a0:79:87:df:95:5e:
68:3b:af:5f:88:72:1e:09:9a:a2:4f:9e:07:39:d6:
36:66:4c:ec:81:c9:e0:1c:68:f8:09:00:cf:f2:ca:
e7:35:df:bf:ff:38:26:98:39:3e:00:ab:c7:0b:d1:
33:5f:ff:d9:e8:7b:a5:64:ab:3e:cf:35:0b:be:89:
bd:96:93:99:77:e1:0f:5c:2e:df:d7:a7:a5:86:fb:
7c:36:15:4a:35:11:cd:28:ab:e1:49:b6:fb:46:b5:
5e:2e:62:ec:ec:ce:b8:67:4b:fd:65:90:b7:55:81:
d2:23:56:73:81:78:54:0b:b2:3c:82:a3:11:0a:31:
c8:6f:2e:b4:90:b1:54:88:96:eb:1c:60:85:4a:80:
7a:13:cf:1b:ec:92:8a:80:c9:98:dc:38:43:8c:cc:
c1:99:e9:bb:d4:d0:ee:b7:ac:0b:54:44:e0:28:6f:
b1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B6:2A:00:81:C3:E7:22:6B:AF:48:FB:CE:93:15:F5:C3:97:4B:00
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9bYqAIHD5yJrr0j7zpMV9cOXSwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:9a:45:6e:42:94:74:40:76:3f:7a:e7:6e:ac:23:93:bf:3f:
c3:1b:14:ac:be:1c:c5:c9:3d:5b:00:94:0b:80:46:9b:d5:62:
4f:20:90:10:86:b8:86:d5:e2:db:7b:01:ac:61:05:0c:74:e0:
63:01:9e:61:d1:b4:49:1f:03:2f:51:b1:2c:f2:0e:ca:2c:77:
f6:9a:c8:e1:a9:74:08:54:cc:6c:06:86:cd:74:97:af:2a:e8:
ef:3c:3b:c2:d7:d2:ce:de:be:6c:9d:1c:a8:92:85:af:c8:3c:
06:02:86:73:a2:28:1d:80:de:8c:41:b4:ba:41:32:ce:d2:46:
ca:6c:3b:ba:26:82:54:3b:1a:b3:75:f8:65:c9:9c:7e:83:10:
38:ac:4b:c3:37:b6:50:2c:b1:ed:76:6b:4f:ac:55:24:66:a7:
eb:89:a8:6a:76:db:70:d5:39:e4:e2:22:17:5e:a7:32:14:bf:
9d:0d:17:cf:fe:d0:29:1f:e8:f4:3a:0e:86:df:0a:5b:ef:a9:
40:f3:60:fa:a6:b2:36:5a:4a:3a:fd:e1:e7:6f:0c:81:84:a6:
22:71:ac:eb:38:6c:33:b8:89:5d:bf:f4:bc:f5:0d:5f:0c:f8:
d9:e6:b9:22:c6:d5:e3:c3:42:4e:46:7f:54:91:cc:da:84:d4:
b6:ca:f2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:33 2025 by rpki-client