Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Dc04x1e91zXeF0yBOqlXWRY_Q9o.roa
File: Dc04x1e91zXeF0yBOqlXWRY_Q9o.roa (raw, json)
Hash identifier: YA068hfj//qi16BDA8toNneKfARbpFe9ceKf/GdErLA=
Subject key identifier: 0D:CD:38:C7:57:BD:D7:35:DE:17:4C:81:3A:A9:57:59:16:3F:43:DA
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DCD85665C3A7F4FC79C18ECBF36865CDC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Dc04x1e91zXeF0yBOqlXWRY_Q9o.roa
Signing time: Wed 21 Feb 2024 21:14:48 +0000
ROA not before: Wed 21 Feb 2024 21:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cd:85:66:5c:3a:7f:4f:c7:9c:18:ec:bf:36:86:5c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 21 21:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dcd38c757bdd735de174c813aa95759163f43da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:72:28:5b:9b:d4:e0:9c:a5:c3:80:6a:8f:
1f:f9:46:03:8a:50:15:2f:17:f3:dd:30:c6:08:c8:
60:36:61:4f:8a:d1:44:eb:ba:72:26:9d:fb:72:2c:
f1:44:d1:3c:e9:9b:72:4a:f9:84:6e:4f:57:37:22:
62:5a:35:bc:9a:5b:4d:e2:1e:40:c4:a4:e5:e4:32:
4d:db:66:44:f0:85:50:d5:f2:92:52:a1:8c:11:64:
06:1f:39:dc:51:ea:f1:73:b7:ad:55:39:02:bb:bd:
2e:b1:80:10:3d:ea:73:7e:19:d8:cc:ab:16:a8:4a:
5d:80:ae:5b:c2:4c:aa:00:c7:c9:d1:cd:88:39:16:
09:5c:75:92:5b:76:75:ad:82:e0:e1:1c:9d:68:a7:
ca:65:58:1d:fc:79:2e:33:aa:7c:f6:f8:8d:c2:25:
02:2d:0e:89:d5:6f:61:19:76:3e:1b:25:be:e9:91:
af:00:89:c5:c5:87:b1:89:54:8d:dc:e4:84:93:9a:
59:8b:3e:67:8f:fe:4d:4b:30:1c:e3:d5:32:79:f9:
2d:9d:30:8a:a5:49:19:85:a4:c9:9e:78:7c:0e:03:
79:0b:6c:be:06:23:51:7f:b2:8e:a5:fb:99:02:37:
a5:26:10:04:78:41:62:ce:bb:1d:3d:77:e6:03:5f:
59:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CD:38:C7:57:BD:D7:35:DE:17:4C:81:3A:A9:57:59:16:3F:43:DA
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Dc04x1e91zXeF0yBOqlXWRY_Q9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:0f:25:f4:95:4e:f4:5c:76:02:ed:5e:36:6c:b4:f6:d3:17:
6a:25:50:9c:bf:36:a0:d7:7f:ac:c5:06:2a:27:e6:71:9d:8f:
ec:12:f6:81:fe:0c:2c:33:f2:3b:7f:df:80:5f:59:6d:04:0c:
cb:78:01:7d:99:3c:ac:34:19:10:af:5f:bd:b6:22:64:09:6c:
6f:99:2e:e0:59:29:46:86:78:e5:40:56:7f:db:3c:c4:d5:59:
35:0b:d2:ff:73:39:f0:70:a2:98:75:1c:f4:93:b0:6d:46:ec:
84:cb:97:d1:7c:87:4b:8d:19:21:99:15:1f:79:ff:fb:dd:c6:
e4:e8:d4:f5:fc:b4:68:3c:d1:34:b8:ac:f1:a4:a0:98:55:6b:
ef:35:87:48:3c:75:d7:d0:97:59:39:7d:84:14:af:4d:d8:31:
98:67:30:ea:64:0c:0c:83:80:bc:7b:eb:0f:cf:ef:70:2f:35:
66:7a:d9:bd:2d:70:b9:3c:f6:2b:f7:c5:d4:ab:ed:00:c3:74:
b6:a9:c3:3b:d0:9f:d7:d2:a1:52:2e:fe:69:92:33:92:77:16:
e2:60:ba:a6:52:54:95:36:f8:a7:28:86:30:51:3f:3e:a3:38:
25:95:5b:f4:95:89:94:7d:b9:e8:82:2b:71:cf:22:a7:52:00:
e1:c7:b3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:17:34 2025 by rpki-client