Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AoIrBLQtBZ915pdZHLIZeHWnbS4.roa
File: AoIrBLQtBZ915pdZHLIZeHWnbS4.roa (raw, json)
Hash identifier: Z6aj0B5qTajnmDN2NaDF8MM8PYjJ8bK4eVVuk6qWBSw=
Subject key identifier: 02:82:2B:04:B4:2D:05:9F:75:E6:97:59:1C:B2:19:78:75:A7:6D:2E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D9324BFACE68CA629F8A8E473192EAB6D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AoIrBLQtBZ915pdZHLIZeHWnbS4.roa
Signing time: Sat 10 Feb 2024 13:11:15 +0000
ROA not before: Sat 10 Feb 2024 13:11:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:93:24:bf:ac:e6:8c:a6:29:f8:a8:e4:73:19:2e:ab:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 10 13:11:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02822b04b42d059f75e697591cb2197875a76d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d3:8b:76:e4:53:0f:26:fc:1c:d7:81:16:da:
fe:e3:c7:3f:16:ab:ca:d5:43:f4:5e:29:a5:d1:20:
b1:6f:5b:8a:3c:00:65:a3:9d:21:e1:df:a0:8f:19:
b7:54:35:14:50:8b:f2:1c:6a:a6:cc:14:62:58:49:
f9:c5:c4:07:a9:58:78:f0:74:40:9b:a5:d8:8e:8d:
b5:f5:d8:85:46:01:6f:2f:fe:9c:36:83:8c:6c:63:
f9:4b:00:80:c7:c6:0c:2c:be:25:f5:33:41:40:e6:
1b:e1:5f:e6:69:ce:07:ae:69:61:42:ad:53:23:09:
e4:0f:8e:4a:0a:61:2f:a3:f4:f1:06:93:9b:d1:db:
d0:32:c7:1d:30:86:65:1b:a3:b7:82:ee:5c:4b:e3:
00:9f:d9:73:91:88:0e:23:49:a4:5c:81:e3:58:b6:
77:d9:e8:e8:34:cc:23:40:19:2c:a6:64:73:a2:32:
70:47:b8:1b:7d:8c:5b:b3:a6:21:31:9c:af:09:7a:
22:c3:12:e4:54:cf:b7:1e:29:03:f2:9d:e0:8f:91:
4c:73:25:5b:c1:9a:9a:6c:8c:12:31:df:39:e2:36:
d5:f5:92:d9:39:89:15:02:4f:4f:c1:aa:c6:12:9d:
13:2f:5e:f3:3e:37:1e:18:5b:5a:23:c1:72:dd:04:
44:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:82:2B:04:B4:2D:05:9F:75:E6:97:59:1C:B2:19:78:75:A7:6D:2E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AoIrBLQtBZ915pdZHLIZeHWnbS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:e3:6a:9b:e6:8a:09:f0:de:e6:3e:7f:c9:58:78:d0:fa:1d:
b1:5b:23:37:88:69:16:15:aa:b6:0b:c7:4f:43:e2:f6:78:eb:
77:55:dd:e8:30:93:b2:b6:62:ec:b9:e5:5c:a5:37:ec:26:c9:
f5:46:74:0a:bb:80:dc:e2:94:ae:e3:0d:de:1b:9c:70:3d:d9:
fa:bd:dc:fa:e5:6d:5d:b8:54:ac:31:a3:99:f5:5e:c2:34:84:
85:58:a4:a3:a8:11:ea:ad:83:c1:e3:f2:57:3d:18:50:7f:99:
05:34:f9:bf:02:5b:60:bb:68:2f:d1:0c:6c:08:de:bc:98:a2:
e0:3e:c1:d4:a0:c9:8f:07:b6:bd:cc:d8:18:19:de:a0:0a:30:
0a:0e:af:0c:a0:e7:ce:74:a6:d0:e4:c5:47:f1:e2:83:d9:94:
5c:08:b1:0d:bf:60:64:7e:c2:4e:9d:a9:f4:e4:9e:27:18:37:
18:46:c1:5d:df:53:b4:04:be:81:73:8b:05:f4:e2:bd:b7:58:
02:26:dd:8a:a9:a7:0a:30:02:47:c6:79:48:81:04:9b:1b:cf:
37:ae:df:1a:a8:6b:b1:7a:e9:03:5d:38:e5:f3:49:b4:cc:79:
90:49:28:4b:07:a6:62:df:f7:67:0b:d6:95:1b:20:5f:b4:d3:
90:89:54:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:09 2025 by rpki-client