Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/D0ESLTGQz7zb1qDmGj1TZkH3gkI.roa
File: D0ESLTGQz7zb1qDmGj1TZkH3gkI.roa (raw, json)
Hash identifier: OyH2KR58uR1KT6LCfydowgqI0xLIJpItonpsTOgec68=
Subject key identifier: 0F:41:12:2D:31:90:CF:BC:DB:D6:A0:E6:1A:3D:53:66:41:F7:82:42
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DA4195BD2AED682880CC00F146EB43646
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/D0ESLTGQz7zb1qDmGj1TZkH3gkI.roa
Signing time: Tue 13 Feb 2024 20:12:21 +0000
ROA not before: Tue 13 Feb 2024 20:12:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a4:19:5b:d2:ae:d6:82:88:0c:c0:0f:14:6e:b4:36:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 13 20:12:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f41122d3190cfbcdbd6a0e61a3d536641f78242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d5:fa:de:08:15:d2:01:63:ee:36:4d:d6:05:
a3:98:aa:a7:4d:d0:e1:82:e2:7d:27:39:bb:e9:33:
b4:0e:46:b9:24:c6:c0:37:6c:b3:3e:ad:e5:d7:1d:
6e:8d:5d:61:09:d5:65:03:f3:9e:08:5e:a6:d2:78:
41:2c:4f:b3:67:de:cd:00:fc:5e:5a:ab:9f:ce:f7:
1a:23:75:4a:6d:4c:e5:5e:9b:36:8f:1f:63:87:9b:
76:1e:9c:aa:22:dc:03:05:e5:db:62:a5:ae:76:e6:
a3:0d:11:50:cc:45:0d:6e:76:c2:6c:bd:e5:11:78:
71:09:3d:7e:19:7c:94:81:a2:5d:25:e7:ff:5a:e7:
2f:1b:80:1a:80:cf:ee:86:8e:12:b3:9e:bd:74:1a:
4b:48:ba:5b:29:65:b1:f6:8e:24:0a:70:da:d4:12:
48:db:d4:ee:7f:23:2d:ed:86:a3:89:08:89:6f:b3:
bb:ba:59:6f:68:96:a9:eb:58:00:41:29:d4:b5:b2:
49:d5:2d:fe:5c:05:f2:c0:93:be:2e:1f:80:62:15:
64:b8:2d:28:cb:64:e5:db:80:8c:bd:45:5f:f2:9d:
81:08:e2:cb:12:ad:dd:65:00:01:8f:56:3c:04:a6:
50:bf:3d:d1:ad:65:61:f7:54:21:d8:2b:d6:91:14:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:41:12:2D:31:90:CF:BC:DB:D6:A0:E6:1A:3D:53:66:41:F7:82:42
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/D0ESLTGQz7zb1qDmGj1TZkH3gkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:85:9d:d3:5b:10:40:7c:48:6c:1c:fd:0d:40:59:0f:23:39:
d6:95:14:59:4c:3d:de:50:f1:f1:49:48:79:c3:41:9e:fa:81:
70:32:b1:3f:72:92:d4:fe:a4:d0:12:27:fe:8f:39:ad:7d:31:
da:0a:14:32:64:d7:e6:23:e1:f7:8b:9a:86:82:bc:57:7e:06:
8d:59:66:82:f4:47:2b:b6:03:56:05:57:88:a9:52:f0:5a:e3:
6b:57:d4:52:05:15:89:51:8e:36:96:6f:84:8a:37:ae:9d:16:
1f:ef:e4:92:3c:42:94:35:c6:af:aa:b1:63:b9:53:c5:f7:bf:
d6:d1:98:9c:d0:f3:cc:93:53:5d:87:b1:40:5d:27:db:0c:8f:
1b:d5:85:94:4b:0b:eb:d1:a9:b9:0e:9f:d1:18:46:d5:e5:0f:
c4:25:39:ff:d5:9a:7b:1d:70:ba:81:ad:b1:90:f8:be:01:b3:
c8:46:fd:cc:bc:51:70:c3:71:87:f0:d4:e0:74:86:55:e0:74:
c0:64:0b:df:9c:b8:8d:c3:d5:c0:75:c4:e9:2f:34:4e:d8:1f:
b1:27:1a:b4:93:21:ab:41:d3:ae:47:0e:68:a9:a3:12:b8:9f:
d4:98:2b:0d:d5:bd:94:a0:5f:00:d9:e8:d4:17:da:63:0e:86:
13:1e:6b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:10 2025 by rpki-client