Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/F1ITH37_852m-vNGLOfScT8flVQ.roa
File: F1ITH37_852m-vNGLOfScT8flVQ.roa (raw, json)
Hash identifier: epPLU6alf+yfCErG7G4K4zJ7ATYkaE6LWPnvoVvj8Ao=
Subject key identifier: 17:52:13:1F:7E:FF:F3:9D:A6:FA:F3:46:2C:E7:D2:71:3F:1F:95:54
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DF7CA04E697F8B4CFF2A61632C40C8C8A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/F1ITH37_852m-vNGLOfScT8flVQ.roa
Signing time: Fri 01 Mar 2024 02:13:48 +0000
ROA not before: Fri 01 Mar 2024 02:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f7:ca:04:e6:97:f8:b4:cf:f2:a6:16:32:c4:0c:8c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 1 02:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1752131f7efff39da6faf3462ce7d2713f1f9554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:16:e3:fe:30:17:cc:66:df:6c:dd:9a:b2:
40:8f:c1:55:e8:58:a6:16:24:d4:f0:35:bc:6b:49:
bf:ae:d3:5b:f3:0e:a4:b3:e7:bd:5e:c0:9b:40:39:
14:0c:9c:e5:ba:84:e0:ad:f5:30:8e:7f:d4:2a:b9:
22:6e:42:b1:f6:51:f3:d0:0d:67:db:d0:a1:51:a8:
57:b3:bf:38:94:5b:a4:7c:f3:1e:7d:14:61:b5:39:
8c:e9:5d:61:a1:4f:68:af:d5:ab:29:3a:e1:48:10:
de:14:db:f1:e8:a4:ce:6a:4c:52:6c:3c:e9:4d:76:
87:36:6a:a1:ac:c4:d8:1c:9e:98:14:d6:d0:c1:d0:
73:de:ec:ff:68:68:23:cc:6e:99:e9:37:ce:25:fc:
85:34:d4:fe:5f:8a:68:dc:99:d3:42:98:d9:b8:6a:
b7:fd:9c:f2:2f:f2:0e:c9:a3:ec:c6:d5:f2:27:3f:
76:57:53:2c:27:7b:91:f0:15:16:87:f8:01:d6:50:
24:d7:d3:64:2a:a4:86:2c:23:72:36:36:36:cb:d3:
e4:f7:d6:13:e3:29:51:e6:5f:e8:7b:43:c0:81:40:
89:14:a8:d9:e2:95:b0:1f:51:a3:f7:f8:5f:0a:87:
64:77:16:cc:e1:c6:62:48:db:6b:95:26:65:55:85:
34:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:52:13:1F:7E:FF:F3:9D:A6:FA:F3:46:2C:E7:D2:71:3F:1F:95:54
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/F1ITH37_852m-vNGLOfScT8flVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:b9:6b:4f:ad:da:26:20:d2:9c:41:c8:d7:78:a9:bd:93:ef:
4f:02:c8:4c:98:5b:ba:46:f5:32:08:aa:85:69:af:9d:2b:0b:
2a:76:8f:34:88:84:f3:df:86:c9:b1:fd:ad:36:5b:30:98:fb:
80:4b:ce:87:31:01:ce:2b:8e:69:6f:97:e2:6d:af:f3:2a:29:
48:55:43:f6:fe:ff:00:d1:ce:13:74:a3:2f:0b:dc:65:af:2d:
36:26:e5:f2:47:67:c8:97:ed:b2:63:67:d3:c9:e5:f2:2c:91:
0e:b3:33:fe:0c:b0:fb:04:88:df:f6:79:4c:1f:8c:c2:f2:30:
93:7e:d3:c2:a2:fb:e2:27:6c:6c:e2:67:8a:38:08:d8:59:29:
99:6f:89:7a:1c:5e:95:06:b5:50:c1:04:29:0e:c8:e8:a6:82:
13:45:d3:8d:39:53:91:24:39:8b:89:59:5d:38:32:11:e3:d3:
5d:51:0e:ef:89:6a:77:ec:51:c0:f7:da:f5:db:25:e7:ba:9c:
32:da:6c:d9:33:e4:e2:96:48:02:91:40:3c:e7:ec:f9:0a:d9:
8d:41:7e:2d:3b:69:19:e1:86:58:c5:46:b2:88:9e:4f:1a:10:
88:90:ac:d6:5c:8a:c5:6b:c9:df:1e:36:b9:17:bc:3d:6c:59:
01:6c:7f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:59 2025 by rpki-client