Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BBwj0EprTibufqZUMFqQYPwPKc4.roa
File: BBwj0EprTibufqZUMFqQYPwPKc4.roa (raw, json)
Hash identifier: uIfC5BolfxaeExHb3BjYhVwoczyYl1/IL+dl4cMtQY4=
Subject key identifier: 04:1C:23:D0:4A:6B:4E:26:EE:7E:A6:54:30:5A:90:60:FC:0F:29:CE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E3E912C310B10A51C79CB1C80BBC2AAC4
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BBwj0EprTibufqZUMFqQYPwPKc4.roa
Signing time: Thu 14 Mar 2024 20:04:44 +0000
ROA not before: Thu 14 Mar 2024 20:04:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:3e90:aee2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3e:91:2c:31:0b:10:a5:1c:79:cb:1c:80:bb:c2:aa:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 14 20:04:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=041c23d04a6b4e26ee7ea654305a9060fc0f29ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:6e:b5:e9:14:17:00:af:75:15:ca:f6:5e:
26:6c:5d:ee:d2:4a:67:67:9f:9a:b1:fb:3c:bb:d4:
56:c4:1d:0d:36:b2:bb:96:03:6b:6f:58:b6:cb:d1:
cd:b5:e9:fc:ac:78:50:35:12:75:b1:96:91:8e:82:
a0:b8:43:e1:26:87:20:8f:c0:38:27:57:ea:8d:e6:
57:b9:78:32:32:ff:82:7d:0f:23:11:dc:1f:9c:54:
99:7e:ca:06:69:af:0f:f5:0b:05:e6:2a:37:8e:c4:
4a:49:01:30:c0:d7:0d:8e:13:9c:6d:30:a8:7e:53:
61:a7:77:69:03:e6:32:8f:88:9a:29:0a:ed:cc:d3:
ec:08:10:e1:d9:00:66:57:27:a7:2c:e2:7f:4f:86:
2f:4b:49:32:18:90:ea:fb:b5:d9:cf:bc:85:d4:f3:
e2:7b:6d:0b:c9:75:52:09:30:77:8b:09:10:9a:f3:
b8:0f:18:cd:3e:bf:4a:d2:02:85:3e:61:14:d8:91:
d3:4e:b9:b5:9b:9e:d9:70:c7:ba:b4:a0:4d:5b:09:
d2:03:bc:e6:1b:70:cf:ec:0d:9a:8c:c4:3d:71:76:
98:27:2c:17:b4:46:b6:46:29:97:7a:ed:5f:ce:da:
7e:7f:74:94:c6:e0:01:a7:63:38:2d:cb:d0:c9:ac:
c0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1C:23:D0:4A:6B:4E:26:EE:7E:A6:54:30:5A:90:60:FC:0F:29:CE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BBwj0EprTibufqZUMFqQYPwPKc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:fb:0a:a9:00:ef:1c:c7:81:59:bc:f9:3d:e3:c7:63:b8:d4:
22:4e:ca:1a:86:27:ee:2b:1d:70:0a:e8:c6:d5:d1:c2:6e:1a:
da:c8:b5:cc:c7:01:33:2b:fa:e9:a2:83:0e:c7:c8:ad:e4:60:
a4:1f:96:fb:99:b1:1f:03:e3:1d:b1:99:4a:8c:9e:c1:d5:5d:
7c:4d:7b:91:59:76:49:13:0d:a2:fd:d5:71:c0:37:a6:36:39:
06:1e:64:64:34:f8:15:ef:7c:94:da:fc:28:68:4b:a2:3b:fc:
42:e7:a6:6c:68:65:b6:22:80:8e:98:c9:36:f4:6b:56:12:69:
fb:01:8e:d8:24:a9:82:f7:cd:02:24:13:b4:7e:6d:e6:bf:1f:
27:c4:bb:e6:62:68:db:69:90:06:e5:69:9f:68:64:d3:1f:31:
00:88:09:fa:20:1a:dd:65:21:4e:cb:06:7d:13:c3:eb:1e:1b:
c5:24:ca:31:7a:4a:5a:20:10:e2:47:83:08:ab:89:93:5a:18:
0e:cd:98:b4:fc:5a:d7:8a:02:c0:d6:59:82:1a:10:1e:24:cc:
3d:8b:ce:67:2c:bf:6e:43:f0:55:7b:78:0a:a6:a1:42:0c:43:
b3:94:60:14:af:36:22:fe:cb:71:41:a0:12:73:71:5e:a0:f9:
82:1b:6a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:48:11 2025 by rpki-client