Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Eupr2L8D_1W_WUv55f-kGFR7t0Q.roa
File: Eupr2L8D_1W_WUv55f-kGFR7t0Q.roa (raw, json)
Hash identifier: t8rlCKIYEgzpmk/c7GQ+aI9DTEa0pfZMMTk7bNDsgac=
Subject key identifier: 12:EA:6B:D8:BF:03:FF:55:BF:59:4B:F9:E5:FF:A4:18:54:7B:B7:44
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E9E1428D06E06934C09153FD8848A8C3E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Eupr2L8D_1W_WUv55f-kGFR7t0Q.roa
Signing time: Tue 02 Apr 2024 09:11:45 +0000
ROA not before: Tue 02 Apr 2024 09:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:14:28:d0:6e:06:93:4c:09:15:3f:d8:84:8a:8c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 2 09:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12ea6bd8bf03ff55bf594bf9e5ffa418547bb744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:2f:a3:5c:2a:fb:ed:57:97:b3:ac:7f:81:
9e:d8:e0:18:54:a0:d5:ff:3b:f6:a8:cb:fd:95:3e:
9b:92:0d:c7:0d:42:4f:ae:20:df:37:b8:94:be:f0:
6c:d4:72:90:8b:c0:10:77:8e:b0:1c:1a:07:3f:b9:
d8:ac:98:ce:91:49:77:3e:e0:f3:59:a1:a9:23:36:
06:26:e5:00:ab:3b:6c:ed:4c:8c:2b:0d:ac:09:a4:
89:4e:e1:f5:e7:d3:4e:c9:75:25:da:46:fa:8b:54:
28:7d:5e:c2:71:b9:28:e9:78:1d:22:10:73:9e:d5:
44:16:93:de:09:b5:e7:b5:17:f0:e4:7c:80:e7:c2:
b4:46:0e:d7:fe:75:b7:2d:a0:4d:df:7f:ef:31:a9:
51:a1:c7:74:70:87:4d:9a:5f:72:83:72:75:e1:16:
30:7a:80:e5:dd:d3:5f:3b:01:5f:c1:2e:97:95:be:
75:4c:98:94:fe:38:78:1a:30:ec:1d:af:66:e1:8a:
c7:17:ed:f9:34:56:76:e2:41:8a:82:5e:d7:73:d5:
89:e2:61:06:0b:f8:23:00:c9:b7:2b:46:03:cc:cc:
44:81:c6:c7:26:19:8f:13:e2:b6:a8:a2:51:f0:0c:
ba:f7:66:fa:91:64:85:0b:f5:c3:d5:bb:a1:59:55:
a3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EA:6B:D8:BF:03:FF:55:BF:59:4B:F9:E5:FF:A4:18:54:7B:B7:44
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Eupr2L8D_1W_WUv55f-kGFR7t0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:c2:a0:95:00:45:2a:2a:cc:ef:d1:09:88:56:7a:ad:cf:40:
7b:aa:ed:a1:c0:51:5c:19:46:24:40:a2:54:8d:cc:01:00:61:
a3:39:96:3c:26:10:8c:01:a0:da:42:80:13:06:c1:1a:32:d0:
fd:72:e7:ce:0c:d2:6f:49:1b:6b:9f:71:4f:45:93:53:b8:3a:
5c:e3:56:44:72:a9:1f:ad:8a:a8:69:34:26:d1:76:36:fc:ce:
c4:0b:7f:8c:9d:c3:51:da:ef:53:e8:91:45:92:5e:87:e6:2a:
db:13:93:3b:da:8a:b5:9a:dc:a0:76:9d:3e:5e:0c:40:ab:cc:
ca:36:02:0b:28:60:c6:7c:1a:0d:6d:f5:5b:3d:e6:01:14:1d:
54:fa:ef:60:4d:f8:bb:a4:70:1e:08:b0:16:6b:2d:14:d2:ff:
ae:9d:44:c8:55:63:1f:54:9c:b3:71:0a:6a:88:a9:12:b4:dc:
27:78:28:5e:93:71:aa:53:28:f9:91:62:e9:b8:a7:ed:e7:ac:
0e:49:1c:f0:d6:53:c9:ed:18:96:f2:c9:93:fa:10:14:b4:f5:
5c:c5:ef:cf:46:85:62:5a:e8:b1:fe:8b:30:97:30:73:79:e2:
80:23:8c:95:ff:6e:7e:cd:a1:4a:c0:23:e4:b2:e6:eb:42:10:
46:49:75:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:17 2025 by rpki-client