Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/G5e74HfOhf0WUR1IZrSvqPWZ_94.roa
File: G5e74HfOhf0WUR1IZrSvqPWZ_94.roa (raw, json)
Hash identifier: F+We+LyhN2YRfEf+w8dzp0ynuRneY4kDXuL3DamRk5Q=
Subject key identifier: 1B:97:BB:E0:77:CE:85:FD:16:51:1D:48:66:B4:AF:A8:F5:99:FF:DE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DAA57799639F4D77A8FC72ECBBF8936E1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/G5e74HfOhf0WUR1IZrSvqPWZ_94.roa
Signing time: Thu 15 Feb 2024 01:17:55 +0000
ROA not before: Thu 15 Feb 2024 01:17:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:aa:57:79:96:39:f4:d7:7a:8f:c7:2e:cb:bf:89:36:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 15 01:17:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b97bbe077ce85fd16511d4866b4afa8f599ffde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b7:3e:02:10:82:52:fd:07:9b:97:24:46:93:
83:11:cd:b5:6f:2d:62:a7:a7:fa:e8:06:f6:a1:99:
a1:fd:2e:29:11:64:53:63:e1:18:2b:7f:97:07:b9:
aa:88:4b:b0:87:c9:80:7f:fb:8d:34:f7:76:a9:15:
df:e2:10:1a:87:e7:cb:1e:46:4e:f0:18:3d:75:08:
45:1a:7f:0f:c7:32:28:b5:8f:05:98:7e:65:f2:cc:
4f:53:09:12:33:83:8d:3c:db:84:b4:b8:0e:09:44:
a8:e5:1a:a4:4d:1c:4c:fa:62:60:06:79:56:c6:67:
00:3a:8f:76:74:6c:58:a5:f0:87:59:1b:e6:d7:ec:
7c:10:16:52:4f:7b:86:8b:0d:05:53:6e:d8:1a:c8:
09:72:2d:ff:ae:fa:b5:30:b3:24:36:fb:ad:f8:3f:
22:fb:4f:91:ff:f0:af:3c:b8:71:40:3b:ba:b5:1a:
a5:2a:30:8d:cd:c5:fe:81:68:c4:9f:9f:bf:b3:14:
15:30:00:5f:74:c6:70:49:b9:65:3c:7a:1b:7e:59:
e2:c2:6f:8a:d4:6e:38:68:24:77:19:00:7c:a9:27:
d9:c0:fc:53:8e:24:ce:07:fd:ab:70:cf:e0:22:f1:
b0:9e:ae:2a:9d:b2:3c:b7:d0:36:f7:e7:8c:76:bb:
e0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:97:BB:E0:77:CE:85:FD:16:51:1D:48:66:B4:AF:A8:F5:99:FF:DE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/G5e74HfOhf0WUR1IZrSvqPWZ_94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:ee:d2:57:54:ff:43:8b:25:6f:85:33:34:b7:ae:29:8b:f5:
be:34:bf:26:dd:29:48:b6:68:e9:21:e4:39:73:36:c4:b4:90:
e5:a0:79:bc:f0:0f:68:92:48:22:30:d6:9b:a4:32:44:11:41:
aa:0a:1c:4f:bb:26:3a:75:f1:43:ab:c2:3f:65:ce:41:61:54:
74:82:92:46:28:6d:a1:36:b3:c5:fe:3b:d8:74:11:00:ba:4a:
32:ed:30:d5:40:2b:39:5e:7d:f2:d8:86:63:e9:01:29:5d:7a:
e8:a2:c6:2f:9b:ef:e6:9e:ef:0a:a5:d5:fc:7a:7a:ed:26:d6:
b7:fa:b2:cd:b8:59:ac:ea:de:a8:be:b6:14:b7:61:f2:47:7c:
11:fc:25:17:1f:7b:e8:21:c4:38:e2:ef:bf:72:0a:69:1c:00:
93:c2:dd:23:9e:e1:f6:11:3c:3b:4e:8e:db:30:c2:be:79:18:
46:34:6d:3c:ea:72:71:2a:cb:8b:09:d2:0c:51:ac:2b:52:3f:
6a:e4:25:5a:58:74:db:5d:e5:36:cb:b4:b5:06:a6:56:35:81:
7d:48:ca:96:24:3a:39:78:de:aa:1b:95:7e:89:69:68:52:df:
1c:0e:6d:36:b2:c7:cf:8b:a9:49:a0:b1:c8:cc:b5:1a:4a:73:
40:79:66:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:02 2025 by rpki-client