Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BGVq6jB6UMqhaaaTJA426Z8XdzA.roa
File: BGVq6jB6UMqhaaaTJA426Z8XdzA.roa (raw, json)
Hash identifier: e6I5uBwtTEeMKdAUPAtBdU/o1Pk9bBzTiFVLf7OsDSs=
Subject key identifier: 04:65:6A:EA:30:7A:50:CA:A1:69:A6:93:24:0E:36:E9:9F:17:77:30
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C93C6572C2F0739E255DE7F244AD68AD5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BGVq6jB6UMqhaaaTJA426Z8XdzA.roa
Signing time: Fri 22 Dec 2023 23:04:58 +0000
ROA not before: Fri 22 Dec 2023 23:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:93c5:b0c1/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:93:c6:57:2c:2f:07:39:e2:55:de:7f:24:4a:d6:8a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 22 23:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04656aea307a50caa169a693240e36e99f177730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:57:4c:2c:8f:cb:a0:af:e4:d7:3e:8b:2c:c8:
bf:c0:b2:9c:e3:ae:cc:26:d0:dc:3c:37:8f:b8:ef:
a1:e0:f6:5b:5d:1d:91:91:90:19:8a:4b:1b:b5:92:
61:ae:74:bb:53:87:ec:0f:fb:69:11:4d:e1:57:ca:
55:94:2e:b9:22:e9:c4:a7:89:5b:47:76:03:fc:55:
c7:e2:76:5c:3b:99:fc:08:a1:1a:03:1b:cc:cf:f2:
0c:2e:7f:42:33:51:39:dc:6a:f6:0c:d2:d6:d4:25:
c1:44:9e:1c:b2:85:b9:38:0f:c4:bc:46:02:d1:9b:
72:8f:0c:d0:74:fb:1c:bd:1d:19:1d:7c:ce:6f:d0:
f3:8d:83:07:e8:0a:9a:cd:c3:45:19:73:39:12:cd:
69:3d:1c:1e:0e:e5:46:03:db:3f:eb:18:c4:ac:c2:
68:c9:7a:ac:91:e5:80:8d:11:b0:56:b2:df:a9:b1:
76:19:74:44:16:e7:3e:4c:d8:c7:08:6a:e2:fc:2c:
79:4a:12:1e:54:e8:e2:d7:88:ab:42:13:2e:5e:4b:
4b:ee:52:95:2b:bb:ef:e6:ae:b2:35:92:2f:bb:5a:
72:ac:ce:47:3d:5a:27:45:9b:29:11:78:b2:89:62:
ca:ff:73:86:34:e4:14:95:f1:a0:4a:ad:73:03:30:
11:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:65:6A:EA:30:7A:50:CA:A1:69:A6:93:24:0E:36:E9:9F:17:77:30
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BGVq6jB6UMqhaaaTJA426Z8XdzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:fa:b9:21:3e:08:05:ca:10:1c:a0:52:ab:8e:4f:ac:0f:32:
dd:7a:87:2e:21:3b:74:df:f0:93:10:5e:95:a4:4b:4d:36:b0:
ed:86:ff:bc:2c:ad:5d:d2:9d:34:ca:a6:f5:dc:67:89:8e:15:
db:95:2c:d8:73:06:53:ea:c4:2b:be:73:93:4f:17:2d:fa:64:
53:e8:24:86:a3:45:74:98:3f:7d:ba:31:4a:15:6d:86:87:bc:
7f:8e:de:b4:e7:1a:ce:70:ed:46:ba:8d:06:2e:35:24:01:8f:
b3:d9:9a:07:68:4b:ef:c2:a3:b5:ea:a5:77:96:26:5f:cf:1b:
89:5e:20:63:08:96:7f:6a:32:33:14:6f:62:85:c7:4b:f4:61:
37:73:27:fb:d4:53:57:e1:c8:5b:ba:32:e4:38:d6:fb:c5:7c:
06:e0:55:63:43:45:c8:81:88:8c:a4:16:c1:16:80:7e:6b:fa:
20:84:5f:54:e8:92:e7:74:ce:7e:bf:9a:13:94:88:97:df:ba:
3b:62:e3:13:dc:fd:2d:3f:ac:3b:62:59:fe:dc:86:7c:65:c7:
ae:51:3e:33:8f:e1:00:74:d1:ef:3b:ed:0a:6d:ba:b3:bc:f7:
5d:c9:62:07:90:87:23:38:c2:49:53:90:1d:c2:7c:d3:15:17:
a5:77:06:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:35 2025 by rpki-client