Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FX2DcmysEwI-L-iWJkjWJNWAfjE.roa
File: FX2DcmysEwI-L-iWJkjWJNWAfjE.roa (raw, json)
Hash identifier: HvdAdp+WfQqZz3FTMzRA08Cd08lSmfN+Z4woHRIKL0g=
Subject key identifier: 15:7D:83:72:6C:AC:13:02:3E:2F:E8:96:26:48:D6:24:D5:80:7E:31
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DE21B2D66F31582713522EEC201E4F1FE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FX2DcmysEwI-L-iWJkjWJNWAfjE.roa
Signing time: Sun 25 Feb 2024 21:10:48 +0000
ROA not before: Sun 25 Feb 2024 21:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e2:1b:2d:66:f3:15:82:71:35:22:ee:c2:01:e4:f1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 25 21:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=157d83726cac13023e2fe8962648d624d5807e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:62:7c:28:f4:85:08:26:01:34:9e:ea:ca:
f1:90:bf:f1:ec:cf:5d:1b:e3:6c:40:0b:70:50:f4:
a0:95:30:ec:ed:aa:bb:45:09:2a:6d:7e:6d:d2:f5:
67:e9:3d:c5:15:66:39:27:75:89:2b:9b:54:77:fa:
3c:3c:45:64:45:5b:dc:55:89:77:84:a7:e2:e0:2a:
cc:49:61:13:5f:13:98:13:c7:2a:15:a0:e3:27:86:
25:0b:ab:00:1b:e9:2a:4e:bc:f6:0d:25:8a:e4:13:
96:be:d6:0a:11:98:bf:c2:0c:66:90:f0:74:12:82:
76:60:ab:60:5e:ad:24:8d:b5:79:ce:ce:f7:72:7d:
e6:da:d5:e7:82:87:96:4e:75:a2:46:a0:71:d1:ad:
54:90:09:8f:a3:e0:75:13:22:4f:18:34:65:f3:35:
4e:f9:b3:63:00:83:95:5e:dc:6f:3e:3f:9f:4c:90:
ab:29:7c:fc:7e:84:47:7d:ea:87:4a:cf:09:28:ee:
b6:5c:05:cf:2b:2e:90:66:83:48:63:01:c6:0d:54:
49:23:27:62:2f:e1:84:7b:78:d6:50:21:15:65:bd:
2f:53:11:6c:23:d5:14:3c:9d:ed:89:15:04:b2:a6:
d1:1e:dc:02:2e:59:ca:68:6b:7a:c2:93:7b:18:e3:
75:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7D:83:72:6C:AC:13:02:3E:2F:E8:96:26:48:D6:24:D5:80:7E:31
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FX2DcmysEwI-L-iWJkjWJNWAfjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:9b:34:8e:97:61:7f:2c:d1:c0:5a:11:1f:95:11:8e:aa:74:
f9:c6:90:ff:f5:cc:7b:10:9f:59:ab:85:39:9e:9b:0b:56:86:
9f:88:49:2a:f6:8b:86:bf:b7:25:bc:f9:54:bf:36:cb:40:76:
33:01:ca:02:d7:d2:ca:b7:01:a9:54:f9:3b:5d:e1:3e:e4:08:
43:2d:5b:6c:58:48:76:25:ed:65:03:ba:88:86:4c:4d:7b:50:
b6:a8:71:54:54:be:10:c3:f5:c6:27:cb:72:f5:2a:74:4c:9b:
d1:e1:74:65:f0:7e:98:e7:77:b6:3a:a5:60:fe:93:3c:9d:b7:
78:29:ef:39:c9:bd:89:ca:5b:f5:1b:d1:81:7c:35:fa:52:67:
37:be:34:0a:c3:84:86:fb:02:7c:fd:94:65:37:66:31:61:64:
fc:59:a9:86:dc:2b:2a:1f:3a:6e:99:36:27:7c:63:5c:7b:5b:
65:7b:53:a2:19:13:df:15:92:87:10:84:7f:cd:03:13:03:a0:
ab:ce:16:d0:73:0f:45:62:4f:e3:1d:06:70:16:a9:be:2a:ff:
fc:ae:a3:bb:bd:0f:5c:86:68:d5:3e:0a:59:85:66:e7:1c:04:
7c:94:10:59:60:bd:12:af:0c:7c:3d:a1:50:b4:c2:27:77:77:
2b:0d:29:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:38 2025 by rpki-client