Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CRupPY_rtgqWHKk9bZXkpa0VT_U.roa
File: CRupPY_rtgqWHKk9bZXkpa0VT_U.roa (raw, json)
Hash identifier: OYs14eW0jSgdZhyU34u4tGZ3zVeG1Sm4GEDTTN5OR5w=
Subject key identifier: 09:1B:A9:3D:8F:EB:B6:0A:96:1C:A9:3D:6D:95:E4:A5:AD:15:4F:F5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D93FA107937859C1D54B66833EECFF9BF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CRupPY_rtgqWHKk9bZXkpa0VT_U.roa
Signing time: Sat 10 Feb 2024 17:04:15 +0000
ROA not before: Sat 10 Feb 2024 17:04:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:93f9:f744/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:93:fa:10:79:37:85:9c:1d:54:b6:68:33:ee:cf:f9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 10 17:04:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=091ba93d8febb60a961ca93d6d95e4a5ad154ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:32:e5:a0:fa:2e:62:fa:78:b2:e7:b4:d0:
1c:64:d1:63:85:d4:9f:15:1f:61:61:94:bf:8f:3d:
c1:ee:53:95:b5:2e:fb:d7:23:99:27:45:18:82:bc:
24:f0:a9:7e:b2:b2:ca:3b:ee:ba:00:e7:28:55:e4:
c7:8a:4e:51:41:3f:e2:40:f0:51:d5:48:70:5e:60:
1a:54:20:88:26:62:c4:2b:43:b4:0e:2b:a7:5b:2e:
e2:89:bc:73:dd:a7:25:c6:f9:d9:b3:39:b3:b3:13:
2e:58:09:b9:ce:f8:2f:2a:a0:87:78:0a:09:b2:3f:
49:1a:5e:00:94:a7:02:8e:89:36:76:f8:38:46:af:
02:1b:82:30:16:92:4a:d1:a3:da:b3:28:8f:06:c3:
9a:39:c2:79:4f:a4:aa:fe:28:45:08:ad:97:66:e4:
df:59:dd:c8:da:1f:2c:b3:7d:13:24:41:27:aa:db:
68:f7:26:6b:36:ee:3c:c4:b5:64:45:67:b7:4a:63:
2b:af:b2:36:d1:75:0a:cc:48:8e:f9:02:b4:c0:25:
1c:14:9a:18:b9:df:88:5c:bc:83:ef:60:17:9a:96:
39:04:39:94:35:7d:64:6e:f6:d4:f5:58:96:ee:58:
83:a5:9f:fd:36:fe:f0:8f:5e:55:dc:56:49:85:65:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1B:A9:3D:8F:EB:B6:0A:96:1C:A9:3D:6D:95:E4:A5:AD:15:4F:F5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CRupPY_rtgqWHKk9bZXkpa0VT_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:fa:f0:44:ad:e4:60:03:9d:fb:72:94:f6:4f:f8:31:60:1b:
1d:35:60:f4:60:0e:47:09:df:b9:da:ec:d1:db:4a:d5:ea:9c:
2f:d2:5a:4f:81:e9:1a:3c:b5:a7:49:35:d1:8f:67:3a:54:85:
f7:14:90:75:67:2b:97:5a:c2:13:aa:76:1e:7f:ed:07:fc:ff:
e2:6d:9b:01:2a:a8:41:bd:f0:6c:cd:90:87:b1:06:15:12:5b:
ef:48:e3:b7:bb:8b:d1:53:b5:20:6f:04:c6:8a:d6:7f:eb:ca:
ff:4b:6d:5f:6d:44:2d:5f:08:d2:99:eb:5e:7b:8f:2c:7c:6a:
3b:66:fc:b7:69:be:76:33:e0:48:ef:20:74:84:e1:51:67:65:
3d:ca:0d:6f:a2:12:27:45:91:ee:7d:c2:6f:99:27:af:a4:b4:
f4:d9:bb:03:fa:c7:55:d5:d5:6b:81:02:66:17:b9:a5:e8:b9:
a3:24:38:c7:59:13:27:ea:60:43:bc:aa:cb:f9:e1:05:bc:3f:
de:20:1e:df:b9:62:25:70:f0:5d:88:61:4f:58:83:38:15:80:
0b:47:0b:31:80:7c:c1:86:1b:cf:4d:56:ab:57:5e:cb:c8:a0:
85:11:c0:53:96:75:cd:32:b0:62:46:5f:d2:27:57:81:28:92:
05:75:bb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:12 2025 by rpki-client