Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EgB99J9h0AU42xVj3L-RUsP8iEo.roa
File: EgB99J9h0AU42xVj3L-RUsP8iEo.roa (raw, json)
Hash identifier: GSYZ6yLfHdlOewSRQJOCN6tpTteop5Q1atva4C/Kc/s=
Subject key identifier: 12:00:7D:F4:9F:61:D0:05:38:DB:15:63:DC:BF:91:52:C3:FC:88:4A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8FB2A35B4908368B3CF50C2A2EE1C191
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EgB99J9h0AU42xVj3L-RUsP8iEo.roa
Signing time: Fri 22 Dec 2023 04:04:58 +0000
ROA not before: Fri 22 Dec 2023 04:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:8fb2:29b6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8f:b2:a3:5b:49:08:36:8b:3c:f5:0c:2a:2e:e1:c1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 22 04:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12007df49f61d00538db1563dcbf9152c3fc884a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:8b:5d:f0:eb:cb:c2:5c:56:f2:ff:ef:f8:
d9:41:b5:69:91:28:34:87:23:3b:96:de:36:ec:93:
44:0e:49:d7:da:bc:37:70:9a:5d:01:23:e6:21:12:
c0:56:d1:c9:a7:67:37:58:56:c9:8f:8f:84:97:b1:
28:80:ce:5a:29:31:63:66:8d:3e:48:0e:50:27:f5:
bd:63:ba:c1:22:0d:0d:8e:e8:40:cc:de:42:1d:d4:
3a:0e:ed:59:9b:79:fd:88:f3:4a:8c:9f:b5:32:aa:
ab:7a:5f:c4:39:41:32:66:62:13:27:75:2d:8e:34:
e3:7a:f4:af:93:96:0c:65:71:23:6e:6c:70:c8:cc:
c8:1d:ce:82:ec:b9:32:8b:32:b2:1b:df:98:ce:59:
df:5d:54:6f:2b:59:17:0a:fd:bc:3e:0d:e0:0d:11:
48:7c:01:38:d1:1b:ce:99:fe:39:2f:8e:4d:57:1b:
46:e6:4f:55:35:fe:e3:50:95:4a:67:3a:f2:33:5d:
0f:d9:84:25:77:88:ec:cc:d2:c8:71:6b:2e:5e:4f:
ad:ed:7a:fa:f0:41:4a:2f:df:62:95:b1:c0:a0:c2:
4d:91:d7:64:cb:1a:8f:76:37:8f:3a:b5:93:37:52:
32:3f:9a:83:43:ad:d6:b6:bb:ba:5d:37:ab:c1:bb:
f6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:00:7D:F4:9F:61:D0:05:38:DB:15:63:DC:BF:91:52:C3:FC:88:4A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EgB99J9h0AU42xVj3L-RUsP8iEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:33:bd:61:94:a9:cc:d9:6c:18:3b:3c:9e:a6:c9:04:b9:e6:
1f:45:89:a9:f3:b0:76:4f:74:30:a7:36:37:5c:62:2b:fe:f5:
68:21:e3:1d:0a:d9:69:10:23:74:6f:70:ba:19:e9:ee:7e:8a:
42:de:22:18:31:b4:8c:53:b8:d5:27:d5:50:76:44:80:24:00:
96:37:ca:3a:06:93:94:aa:1d:de:a0:7b:2b:b8:db:a2:ee:3a:
e8:00:eb:0f:f9:30:91:c3:42:19:35:bf:77:e8:13:f8:07:4a:
95:9e:69:2b:b1:d1:6c:62:c2:3c:2b:fc:da:a5:9b:50:bf:cd:
0e:cf:80:8f:32:fa:b5:36:ee:ee:2d:86:11:89:eb:b0:c7:6a:
cd:d1:c0:bf:ac:17:df:99:54:0d:a2:0b:2e:9d:c5:e3:3c:6f:
53:9b:9a:40:c0:25:8c:c9:94:92:42:f6:e3:1d:05:f9:19:49:
78:ea:c1:54:ea:93:42:80:a0:e3:23:cf:b5:3b:59:52:76:c0:
5c:e2:cd:6c:5e:26:3c:95:cd:72:3b:5b:c3:cf:d6:f4:4d:42:
d8:96:e6:72:83:0b:4e:a9:d8:e3:a7:e8:57:97:15:e5:43:b4:
28:0b:51:3c:78:41:03:58:48:ec:a6:a4:cf:6c:3b:7c:7d:86:
ef:87:3c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:33:08 2025 by rpki-client