Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Eu07fuFo-gbktD8dsSHb4HAJtVo.roa
File: Eu07fuFo-gbktD8dsSHb4HAJtVo.roa (raw, json)
Hash identifier: 4sjQAlC5fuvHnA1XSxeEK+/FtDJZcw3QZ2xJ3fdQCTE=
Subject key identifier: 12:ED:3B:7E:E1:68:FA:06:E4:B4:3F:1D:B1:21:DB:E0:70:09:B5:5A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E7BBE2E01B8633AE662F733B157DB6A90
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Eu07fuFo-gbktD8dsSHb4HAJtVo.roa
Signing time: Tue 26 Mar 2024 17:10:44 +0000
ROA not before: Tue 26 Mar 2024 17:10:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7b:be:2e:01:b8:63:3a:e6:62:f7:33:b1:57:db:6a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 26 17:10:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12ed3b7ee168fa06e4b43f1db121dbe07009b55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f2:41:6c:5f:c1:ab:99:2d:35:e7:6d:f7:c3:
36:c1:c9:5c:d9:86:ce:19:35:05:e7:32:d6:a8:f6:
f7:51:8a:8f:50:c5:22:9a:b7:d7:97:f9:c2:8a:e2:
6a:e8:32:d7:f9:bf:e4:ff:2b:5a:51:78:bf:6a:08:
d7:3b:35:39:ef:b7:dd:c3:e8:83:cc:a6:f6:7f:0c:
58:37:ec:39:82:f0:ec:e9:31:d3:62:7f:80:c2:e5:
19:3b:ed:df:c6:3a:ba:59:2b:c5:2d:0d:d7:ad:20:
6e:65:81:1d:b6:2d:ff:93:14:fb:5c:02:bf:ab:13:
26:4c:1a:d7:a2:00:6c:4b:e0:6c:70:b3:59:20:c2:
ee:38:80:8f:9c:71:f6:ad:2b:82:51:57:03:a4:a0:
88:57:6f:0c:1a:cb:65:59:18:f4:e3:a6:ba:76:a0:
ad:71:50:67:75:18:62:46:78:2e:8c:ac:3f:9a:1c:
53:2a:4a:7c:d6:b8:b6:3f:05:e6:bb:06:f9:d7:c6:
b2:d4:37:19:87:d4:c9:96:a3:8c:98:84:51:dd:08:
e7:2c:45:f3:40:20:51:1b:52:2d:ef:f5:b7:69:6a:
21:78:63:07:6f:de:1f:19:f3:4b:98:2e:b8:30:3e:
6f:2e:22:0b:aa:1f:ff:3d:dc:f3:c6:15:83:0a:c4:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:ED:3B:7E:E1:68:FA:06:E4:B4:3F:1D:B1:21:DB:E0:70:09:B5:5A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Eu07fuFo-gbktD8dsSHb4HAJtVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:dc:79:2b:e9:77:de:b2:ff:f3:53:6e:1c:1f:3e:13:6b:d0:
86:b1:b0:11:1a:f3:f7:20:28:6c:d7:f2:1e:74:a6:fb:d3:b7:
04:5e:6a:8a:15:fb:ca:65:0b:82:1f:f7:5b:42:0e:65:15:58:
c2:2f:d9:13:13:b0:32:2e:2a:07:43:58:05:83:c8:b0:f2:0d:
d8:cf:68:fb:32:e2:91:0e:57:f9:95:4e:d6:58:b6:4a:5f:74:
68:6b:c3:d6:51:81:43:96:04:9d:4d:ec:22:78:fb:1e:b1:5b:
f2:4f:9d:75:e4:c3:6d:40:23:c6:cd:ff:36:c0:75:1b:1b:ce:
f8:a6:33:72:bd:78:dd:0c:96:2e:74:43:ee:e6:f5:43:e7:06:
63:61:52:57:6f:38:a7:ae:c9:b3:0f:33:74:a2:cf:16:fa:26:
9e:ff:41:59:de:dd:00:c2:aa:73:ee:a2:3a:d9:52:c8:ca:04:
4c:52:2a:d8:9f:c9:89:7b:42:9c:a3:54:21:31:56:a9:f3:ad:
6b:2b:7e:81:1a:fd:b1:ed:b0:5b:0f:f0:68:c6:4b:25:93:df:
8e:24:d6:a3:f1:a6:08:5c:db:ad:4b:f1:fc:58:15:8b:0c:9a:
4a:18:6e:69:f8:a2:a0:3c:b4:e6:00:21:34:c3:e5:7c:64:80:
06:82:2d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:58:57 2025 by rpki-client