Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EJ44Uzbi-Ks0YvzWFl5Z-RU6Wkw.roa
File: EJ44Uzbi-Ks0YvzWFl5Z-RU6Wkw.roa (raw, json)
Hash identifier: rzioopoFPeFekM7uHd6yJmGcGsgAtmg8uncMSY/3DJc=
Subject key identifier: 10:9E:38:53:36:E2:F8:AB:34:62:FC:D6:16:5E:59:F9:15:3A:5A:4C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E9623B019CC86CCF5AD93EFE8663FEFB1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EJ44Uzbi-Ks0YvzWFl5Z-RU6Wkw.roa
Signing time: Sun 31 Mar 2024 20:11:44 +0000
ROA not before: Sun 31 Mar 2024 20:11:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:96:23:b0:19:cc:86:cc:f5:ad:93:ef:e8:66:3f:ef:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 31 20:11:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=109e385336e2f8ab3462fcd6165e59f9153a5a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4f:9c:6e:fb:07:ba:42:cc:bd:b6:1a:d6:23:
8c:bd:75:eb:ac:ea:31:82:f1:ca:ba:88:e7:d0:8e:
a2:6f:94:8d:e7:b0:87:63:72:3b:57:f3:d0:23:9c:
3a:5c:7c:f4:80:33:9b:ff:f4:79:fc:41:22:53:23:
dc:7e:4e:ce:0a:1d:05:4b:5f:8e:94:71:88:51:59:
16:10:cb:62:0f:18:f9:03:3a:59:72:bb:d4:22:6d:
38:1c:6b:87:69:03:a1:a4:11:2d:00:4d:17:93:60:
bd:ac:12:54:94:0c:82:5e:06:bf:84:e6:39:f0:72:
e8:0c:0f:04:d2:0d:ff:5e:20:85:f1:4c:62:53:9c:
4b:a5:03:cd:9b:bf:31:05:bc:fe:05:14:29:0f:57:
d3:9f:ab:fc:19:10:69:a0:ad:a9:62:97:e8:d4:86:
90:4a:72:3b:b9:7f:6d:2d:38:a9:a6:e7:44:21:00:
d0:ee:1b:c2:96:51:64:2b:1e:7c:2a:5a:0a:1c:d4:
28:3e:79:1e:31:8e:c7:69:70:30:cf:e6:4c:5e:c0:
25:6b:c8:30:8e:df:d8:75:42:c4:20:2a:d9:88:21:
cc:20:61:a2:45:bc:d3:bc:88:83:39:a2:38:cb:da:
0a:4e:be:f8:f0:1a:f4:c2:5e:af:b8:a9:27:10:6e:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9E:38:53:36:E2:F8:AB:34:62:FC:D6:16:5E:59:F9:15:3A:5A:4C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EJ44Uzbi-Ks0YvzWFl5Z-RU6Wkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:aa:1d:c6:87:81:2b:0c:bc:1a:d5:ce:be:a3:b2:b7:14:c4:
61:e1:23:3b:b8:f5:ae:0a:f9:ed:e4:bc:06:0e:45:a9:a6:0e:
6e:ee:13:0e:21:e5:37:4e:35:51:9c:7b:07:4a:76:93:7c:0f:
40:d9:57:57:14:af:d4:76:13:57:ab:6e:18:e6:7b:b7:3d:2a:
cf:79:e1:a4:ac:2a:11:90:02:c6:98:d4:a7:af:e7:a7:c8:a2:
a3:f0:08:e6:e5:a7:5c:40:fe:d3:3c:1e:64:bd:fd:ed:e1:13:
ee:b5:a8:59:7c:cd:3b:31:5b:a8:92:b7:be:2a:56:ac:76:9c:
d1:56:36:49:b3:3a:9b:fe:53:d7:a2:d5:c1:aa:11:6b:ca:44:
3d:56:8b:36:ff:c2:0f:5c:e0:f1:f7:cd:b3:7d:7e:da:5b:03:
97:88:ed:4f:3a:b8:cf:66:ad:c4:d2:a0:cb:9e:a9:fb:22:dc:
d8:04:69:77:6c:ac:6a:85:ad:5d:75:cf:61:18:c9:cf:de:ee:
fb:12:e5:ae:90:67:f4:a9:e6:8c:6e:5e:bf:d0:41:78:0f:86:
26:f4:f7:14:e4:bb:22:87:65:77:95:63:9a:ac:c0:be:fe:1a:
7a:f4:7c:2e:44:22:a1:7d:45:39:92:1d:f9:ff:38:4e:78:59:
9d:29:1b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:51:47 2025 by rpki-client