Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EeO_UFROqR1ApaodCIcAgFQ5qbo.roa
File: EeO_UFROqR1ApaodCIcAgFQ5qbo.roa (raw, json)
Hash identifier: zhVpFgvAQE5mlSawWUeBls5Pevfb3BZdKhBLENQKNUg=
Subject key identifier: 11:E3:BF:50:54:4E:A9:1D:40:A5:AA:1D:08:87:00:80:54:39:A9:BA
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E2FF9D31E00DAA8DC63EA243DBF3C7723
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EeO_UFROqR1ApaodCIcAgFQ5qbo.roa
Signing time: Tue 12 Mar 2024 00:04:45 +0000
ROA not before: Tue 12 Mar 2024 00:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:2ff9:9341/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2f:f9:d3:1e:00:da:a8:dc:63:ea:24:3d:bf:3c:77:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 12 00:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11e3bf50544ea91d40a5aa1d088700805439a9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:9e:c3:b0:ac:ed:b8:09:05:f7:8a:d0:8f:
24:cc:89:66:5f:9e:58:20:30:e6:57:c3:64:72:dd:
1b:3d:87:eb:db:ab:ba:ad:e8:77:18:75:88:64:31:
17:e3:f3:b4:b3:aa:5c:2a:4c:a4:ea:dc:c7:7c:ff:
4f:a9:0b:9a:7e:10:46:b2:0e:4e:20:0b:4e:62:84:
42:c0:ce:83:6b:6c:49:e6:fb:56:2d:6c:65:35:91:
ae:cb:4d:75:5c:c8:f4:7a:dd:94:09:bb:84:bc:07:
4f:3c:19:54:c3:b4:1a:b9:3b:c5:fa:5c:a7:8b:f3:
d9:0f:c1:9f:a7:20:cb:b8:05:5e:8e:ad:54:9b:15:
df:92:b4:0d:d1:6a:5e:bd:a1:bf:c5:42:55:0b:0f:
68:cb:97:2c:e8:fa:29:22:9c:2c:72:f4:32:7b:03:
4b:3a:48:87:67:02:45:3a:c4:89:85:c5:9b:66:b2:
67:77:3c:79:1a:55:39:de:a6:7c:f7:fa:e0:8e:d0:
61:f5:ca:4a:33:8d:09:42:ee:2b:74:97:96:cb:b5:
8d:02:9f:32:be:c9:43:6f:d0:11:e6:cf:bb:e9:d3:
b1:80:17:d2:27:01:79:20:7d:4e:ab:90:45:80:92:
11:a0:99:27:2c:45:7c:00:93:d4:37:04:f4:a3:a8:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E3:BF:50:54:4E:A9:1D:40:A5:AA:1D:08:87:00:80:54:39:A9:BA
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EeO_UFROqR1ApaodCIcAgFQ5qbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:86:68:0d:72:5e:14:52:ed:7a:cd:b7:ef:fe:a6:60:de:91:
bf:7a:81:00:24:18:db:9a:b9:9a:62:45:a7:b5:b9:9a:91:9e:
4d:2b:4d:6c:01:6c:4d:36:d8:04:4e:b7:94:c6:d5:cc:a9:cb:
d1:da:f2:8e:ca:9b:e8:d1:8c:23:eb:9e:f2:9a:d3:48:55:f3:
80:66:25:1f:b0:85:53:13:40:1c:cc:6f:e1:9c:f0:ad:35:cc:
f2:35:c8:82:09:df:f5:09:95:e3:d5:98:59:18:a3:02:76:49:
87:96:44:91:ba:8e:10:37:6b:d1:24:29:87:c9:6a:20:25:6d:
a6:40:31:b8:05:57:89:6e:f2:37:c3:cd:59:35:4c:7f:54:9a:
63:d8:d5:a3:70:e7:85:b6:18:ca:c7:fb:6c:e1:58:47:e6:9e:
ce:b9:c8:54:17:21:09:4a:e5:75:f5:34:77:56:dd:71:f5:1a:
e8:2b:03:61:6f:9d:d5:2f:f5:5a:43:26:9a:de:64:95:8e:59:
c8:a1:79:94:b6:45:cf:94:25:dd:74:d5:0d:72:0b:d8:e7:9a:
f1:a8:2e:f0:39:f4:aa:b7:6d:30:ca:b0:82:02:be:f4:fa:bf:
c5:ce:f9:6e:20:3a:6d:f7:22:8e:b8:81:1f:32:79:5e:c0:6e:
d4:e7:ec:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:35 2025 by rpki-client