Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CNk1Pflz5GqIuTiAh54nFJcna2M.roa
File: CNk1Pflz5GqIuTiAh54nFJcna2M.roa (raw, json)
Hash identifier: uXsr4bTdc+yNduAbO+63S6cCQzIbk7mDS3HEa/MFX8c=
Subject key identifier: 08:D9:35:3D:F9:73:E4:6A:88:B9:38:80:87:9E:27:14:97:27:6B:63
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DDF4B92DCB0CA856B86D6397AD24B9C55
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CNk1Pflz5GqIuTiAh54nFJcna2M.roa
Signing time: Sun 25 Feb 2024 08:04:48 +0000
ROA not before: Sun 25 Feb 2024 08:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:df4b:2749/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:df:4b:92:dc:b0:ca:85:6b:86:d6:39:7a:d2:4b:9c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 25 08:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08d9353df973e46a88b93880879e271497276b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:23:83:71:6b:1b:34:d5:3f:78:e6:90:24:
c7:1f:4b:79:f9:69:9f:a6:b7:7f:8b:af:e5:aa:35:
44:ad:bf:4f:9d:e9:ff:fc:fd:a6:86:c6:4c:7e:1f:
6c:1b:4e:ca:f5:db:9e:ee:ab:31:9a:43:2e:4d:88:
67:fa:94:1e:60:db:1d:a4:f2:e1:45:51:cd:02:de:
c2:ab:8f:9b:10:77:d0:c3:d9:bc:9b:b2:76:60:db:
d6:73:c3:13:f7:72:df:9e:4a:1d:c8:bf:3f:f2:46:
69:a9:65:c7:1f:9e:c5:98:f4:35:cb:de:ae:f1:16:
9e:a0:12:ff:39:0c:a6:ae:d2:e5:8f:16:84:f8:20:
99:ce:5b:d7:ad:79:14:58:3c:33:b6:79:a2:ca:ab:
45:b9:34:4e:a3:47:fe:af:e1:da:de:5a:01:d9:17:
61:d1:7e:fc:a1:f9:61:33:41:5e:91:11:fb:c9:18:
4b:5e:fd:68:10:61:a4:66:a8:cc:0d:6a:d0:7a:0c:
30:91:5c:2a:55:e3:52:e6:d9:87:27:61:46:06:fc:
80:4f:53:94:96:1c:7d:18:89:88:7f:51:57:28:71:
c3:9e:46:af:23:b3:92:e1:f3:08:bc:58:e6:40:7a:
52:31:3d:79:8d:ff:47:8f:57:db:c3:21:2a:aa:31:
d6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D9:35:3D:F9:73:E4:6A:88:B9:38:80:87:9E:27:14:97:27:6B:63
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CNk1Pflz5GqIuTiAh54nFJcna2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:37:d5:23:d0:6e:17:f8:6c:ca:b1:d0:8d:01:66:8a:57:1c:
5f:db:2d:07:57:3a:3d:2a:26:4f:d2:ee:9d:9f:7b:b6:47:47:
6a:9b:f0:fb:c6:19:ff:dd:b0:67:6d:c6:62:63:61:55:8b:c8:
a7:65:93:8c:d8:50:b9:ca:95:ba:4d:17:ee:83:6e:e7:ef:95:
22:35:3d:df:0c:c2:70:6b:5a:89:56:98:7b:31:c2:3c:b2:76:
9f:d6:e0:47:b1:8d:42:e8:59:46:00:f4:57:e1:76:2b:67:c4:
bd:6d:a6:e4:44:76:6f:a2:ce:70:87:1b:7a:a0:c9:ff:d5:b3:
fd:97:42:09:db:30:f3:00:0c:8b:ca:55:11:ed:2a:0a:eb:94:
83:f6:e9:91:a8:18:78:cf:54:88:d5:af:86:9e:d8:8a:70:e9:
a7:b6:73:83:66:39:00:13:b6:75:a4:8b:28:6f:55:e3:bb:ad:
c1:81:5c:a6:63:6c:f2:cc:68:4b:28:79:e8:7f:f0:13:00:97:
3e:6f:1b:21:69:27:a3:60:9a:73:f8:20:32:87:0c:7b:5d:b3:
b9:49:97:07:cc:2b:0d:00:74:c2:7f:1c:03:67:15:2f:c7:52:
49:2d:a6:e8:86:00:1a:cc:bf:71:bd:07:1a:18:f4:c1:51:3d:
0c:17:40:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:54:53 2025 by rpki-client