Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9tBuM_oQdpjVk6lz5w4NctArb4Y.roa
File: 9tBuM_oQdpjVk6lz5w4NctArb4Y.roa (raw, json)
Hash identifier: l+bh/G8imbC3lmDYLVWgiHUrKB4d+nmw1JbbJ2nXdYA=
Subject key identifier: F6:D0:6E:33:FA:10:76:98:D5:93:A9:73:E7:0E:0D:72:D0:2B:6F:86
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E924600CF832649DCF059FFD11A48AE91
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9tBuM_oQdpjVk6lz5w4NctArb4Y.roa
Signing time: Sun 31 Mar 2024 02:10:44 +0000
ROA not before: Sun 31 Mar 2024 02:10:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:92:46:00:cf:83:26:49:dc:f0:59:ff:d1:1a:48:ae:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 31 02:10:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6d06e33fa107698d593a973e70e0d72d02b6f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:2a:8a:a6:87:71:e2:0f:7f:63:44:da:ab:
66:31:fa:89:33:3f:36:a1:7e:84:7f:7a:82:48:90:
e1:ca:65:3a:27:10:9d:7a:91:1e:b8:7f:9c:cc:43:
d6:c5:a1:45:65:bb:aa:a2:3d:c0:f7:b9:16:08:c4:
8d:6a:ca:c4:36:72:14:4d:74:3c:bc:7a:3a:ff:c1:
07:10:16:73:b1:29:d3:ea:3f:0a:cd:56:72:57:a1:
c4:fa:5c:fd:64:d2:82:19:0a:00:f0:ad:51:6e:d2:
fc:75:dd:15:5c:29:0f:31:f0:de:e2:4c:14:8a:9e:
26:da:41:2d:7e:86:5f:84:cc:8b:fc:0e:b9:6f:90:
57:c9:26:da:5b:a6:7d:dd:e4:56:fa:17:cf:60:51:
54:ef:db:f6:11:98:e0:31:04:04:68:7c:da:a0:43:
08:4d:df:8d:86:9d:b1:ef:53:16:5a:75:29:be:6a:
a2:6c:fd:22:cf:b5:81:4d:c7:f8:af:35:9d:d5:0f:
1c:34:b8:95:a5:02:6a:31:b0:c9:24:99:6e:62:a7:
e0:62:38:c7:bb:36:ef:a0:a5:c2:c4:84:00:91:3c:
a9:63:01:74:7d:d6:53:ed:f6:3d:57:38:be:a3:08:
8f:c1:1c:03:1d:0d:89:5d:30:9a:8c:66:9a:16:0f:
a8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D0:6E:33:FA:10:76:98:D5:93:A9:73:E7:0E:0D:72:D0:2B:6F:86
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9tBuM_oQdpjVk6lz5w4NctArb4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:78:e4:ea:33:d5:b7:76:b8:42:12:04:6a:2d:bb:2d:bc:6d:
c1:0d:69:3e:ce:f6:2c:a6:af:c6:b9:01:e6:a7:c0:a0:6a:53:
46:0a:bf:e7:30:6a:fb:32:68:51:cf:11:1d:aa:b7:3e:c5:6c:
bf:ed:1d:c0:13:c7:91:1e:54:0f:08:2e:a3:fa:af:9b:2b:dd:
f2:10:af:cf:8c:93:70:16:6f:bb:a0:c7:f2:5c:eb:2c:65:b0:
eb:51:d3:3b:d9:7e:d9:0d:22:c4:20:ad:ae:17:5e:35:8b:a4:
e9:33:26:a2:2d:d6:a1:8c:ad:84:94:c3:0e:89:f8:f2:49:93:
a8:68:2d:ff:34:f2:00:e2:79:6b:3e:89:f2:d5:93:1c:72:07:
40:2d:f7:3e:54:40:c9:1d:f4:f7:7e:ef:e3:4f:40:ce:9f:d2:
cf:ad:d8:6b:f8:dc:0b:4c:fd:2e:94:a9:b7:95:8c:fc:df:fb:
a5:15:c8:20:0d:d3:e0:9b:b9:5d:b5:61:28:d7:8f:a7:83:56:
ef:b9:dc:65:ff:8f:c8:cc:cc:04:4f:2c:c3:d3:4a:60:c2:82:
87:1f:4d:3e:c4:c1:d3:42:a0:20:1f:87:fc:8b:44:ed:cd:b8:
a0:8d:88:58:b4:25:7d:ae:d4:5b:99:40:98:cf:d9:54:fd:94:
03:c5:f5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:48:10 2025 by rpki-client