Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EiSbCOT74W9E3_pvmFqMLdUIx_E.roa
File: EiSbCOT74W9E3_pvmFqMLdUIx_E.roa (raw, json)
Hash identifier: QsKlgMgh8gUVhF5aQVdBfVPS2dBgly71rtJkw4/sqF0=
Subject key identifier: 12:24:9B:08:E4:FB:E1:6F:44:DF:FA:6F:98:5A:8C:2D:D5:08:C7:F1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E6D959C433A8A1D938AB14728DDC7E67D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EiSbCOT74W9E3_pvmFqMLdUIx_E.roa
Signing time: Sat 23 Mar 2024 23:11:45 +0000
ROA not before: Sat 23 Mar 2024 23:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6d:95:9c:43:3a:8a:1d:93:8a:b1:47:28:dd:c7:e6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 23 23:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12249b08e4fbe16f44dffa6f985a8c2dd508c7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:63:fd:6c:3b:da:27:eb:14:b7:36:d0:0c:
d1:82:a6:e3:bc:e1:11:ca:30:06:71:cf:56:ef:a6:
8f:c1:95:ce:85:f3:24:46:f0:f6:b1:09:60:66:37:
8a:fc:3b:ff:6b:8b:f4:f3:be:17:e4:db:a5:be:b2:
0e:29:37:1c:3e:cf:69:13:63:0a:d9:b7:5a:90:fa:
a6:1f:0d:d5:4f:2a:d2:7f:09:4c:83:c2:8a:01:56:
ee:b3:04:3f:95:f5:67:01:8d:f8:9e:14:5c:74:c8:
0d:36:3a:07:63:df:23:26:95:76:e1:25:65:a4:13:
37:4c:db:ca:05:47:10:4e:2b:02:40:a9:37:46:6e:
15:34:44:5d:8a:55:d3:f8:f4:a3:eb:4b:e2:1b:f9:
6a:de:4d:7c:96:0a:cc:d8:76:47:8e:b2:35:f6:31:
f4:ba:22:fb:7f:17:d1:65:42:19:d0:c3:f7:8e:e8:
ff:6c:96:e1:e0:b4:07:c4:7d:13:e0:05:51:6c:8b:
4f:b6:45:3d:5e:66:60:6e:55:7d:22:7e:d7:51:74:
ff:cf:af:7e:bb:78:7d:71:fa:1b:c0:1c:a2:ef:70:
74:6c:9b:74:c6:c7:bf:96:a5:a6:e6:d5:f2:30:22:
5e:b2:5a:25:d6:0e:e5:6d:4c:7e:5b:f7:1e:7c:31:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:24:9B:08:E4:FB:E1:6F:44:DF:FA:6F:98:5A:8C:2D:D5:08:C7:F1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EiSbCOT74W9E3_pvmFqMLdUIx_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:e8:b6:8a:7d:b0:da:fa:e8:a5:dd:56:23:f3:89:04:9c:55:
e9:81:83:77:19:56:fe:35:b7:85:a9:3a:61:8d:d2:f2:34:2c:
01:7e:5c:40:af:ad:c4:07:a7:7c:88:9d:18:1a:88:22:e2:42:
47:99:f3:98:56:b9:96:f7:b7:2b:02:f0:95:8a:ec:02:30:6f:
5a:56:eb:ae:4a:f4:cc:74:10:f5:dc:22:e4:c8:8e:a5:6d:24:
96:08:82:7d:03:d4:5e:49:4c:40:f4:49:65:f7:97:50:4e:3f:
d4:5f:ae:a9:ee:de:4b:ee:fd:c5:2b:b9:7c:df:e5:0b:28:87:
b2:42:06:df:dd:0b:3c:6c:34:3c:5b:4e:ad:f0:c8:0b:f5:1c:
d0:82:16:e8:79:8c:c7:0c:4c:20:91:19:2e:48:d2:4a:4c:12:
64:12:5c:5f:5d:0a:04:85:bb:5e:98:aa:f1:2c:1a:61:f1:15:
4e:a7:b3:12:1f:d3:2f:e8:4d:d4:bd:4c:3f:4d:2d:4a:36:13:
75:c4:6f:96:f9:19:75:36:2e:97:62:01:c9:68:e5:3a:7a:05:
15:8e:a8:a4:85:df:95:bb:d0:e6:b2:de:98:fd:e0:56:09:9b:
6d:0e:da:90:ae:2c:32:73:d6:bc:4e:1b:ec:53:38:c6:5b:ae:
f2:d8:7e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:50 2025 by rpki-client