Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IPVIj2FUsAdKemMg6DvUfHuJrjw.roa
File: IPVIj2FUsAdKemMg6DvUfHuJrjw.roa (raw, json)
Hash identifier: wxnmpROYCjTto+yNpjv8wHgqvzsBaRtODTVejEUwKgU=
Subject key identifier: 20:F5:48:8F:61:54:B0:07:4A:7A:63:20:E8:3B:D4:7C:7B:89:AE:3C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DCF05018365FB2C346D4F2EDFEAF34800
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IPVIj2FUsAdKemMg6DvUfHuJrjw.roa
Signing time: Thu 22 Feb 2024 04:13:48 +0000
ROA not before: Thu 22 Feb 2024 04:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cf:05:01:83:65:fb:2c:34:6d:4f:2e:df:ea:f3:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 22 04:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20f5488f6154b0074a7a6320e83bd47c7b89ae3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:86:7d:1f:6c:1d:e5:55:72:8e:02:00:43:
d9:69:58:6e:f9:91:04:32:ed:f1:c3:fb:9f:e1:fc:
a0:53:d3:7d:a2:82:38:65:53:dc:e4:de:de:0e:68:
30:c5:4c:89:c2:d1:f5:1b:8a:b9:ca:de:01:d1:0c:
bd:ac:3a:b7:09:78:e8:95:e0:fc:79:00:fa:55:dc:
1a:3b:00:cf:c1:9a:61:f0:ff:60:7c:66:6b:c3:a7:
df:d4:5b:8b:86:e5:53:bb:2b:ef:72:1c:f4:2f:ab:
46:4a:39:f8:77:4c:cd:17:60:af:95:4e:1c:d6:58:
4b:6f:f9:04:1e:f3:2c:08:aa:7a:0a:d6:3f:5b:c0:
e7:a1:a0:2f:88:fc:d3:9d:a4:bc:4d:84:71:6f:3a:
8c:7d:c4:bb:c7:92:26:72:4b:1b:7d:c8:4d:2d:a4:
e5:40:db:e9:95:5e:e1:3a:99:3d:81:40:9d:e7:85:
d4:df:ed:0e:6f:7f:1c:5a:17:84:e9:43:f9:40:3b:
80:64:47:bd:13:ab:7e:e8:c8:45:c6:25:3f:26:47:
50:9d:77:46:79:97:30:b5:69:96:5b:42:04:e0:72:
b4:53:34:ce:c0:86:06:27:fc:2e:e7:46:a9:41:14:
20:52:37:48:27:bd:75:5a:17:ec:c9:5c:01:c2:47:
b9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F5:48:8F:61:54:B0:07:4A:7A:63:20:E8:3B:D4:7C:7B:89:AE:3C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IPVIj2FUsAdKemMg6DvUfHuJrjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:4d:64:c6:f6:44:b6:16:48:cc:b8:5b:20:ff:c4:15:b9:0f:
1e:ac:20:3b:b9:96:dd:70:44:d8:c7:50:65:3e:55:51:09:53:
9c:3b:2c:ed:f8:e0:dd:b8:87:b5:60:0f:fa:74:c2:31:d4:aa:
64:4f:28:c3:5d:b2:30:12:4f:6d:14:a0:a0:5b:26:8f:9a:1b:
96:e2:27:55:25:32:f9:31:f3:d7:f0:9a:7f:99:ca:68:dd:0b:
73:7b:65:42:4c:77:18:44:89:a4:bd:76:f8:46:e2:e1:27:f9:
93:27:95:40:75:fb:37:de:e4:ef:c3:80:b4:d4:a6:d8:55:4c:
e6:4a:39:81:03:04:6d:22:48:cd:bd:90:36:f2:7a:5a:b2:bd:
85:9a:20:58:44:96:36:9e:f1:a8:1c:67:6c:8b:ec:58:e8:7a:
85:2a:d7:73:c9:91:c0:1a:99:55:ff:d4:1e:43:b4:12:36:fc:
26:b4:64:ef:4d:77:09:6d:cc:ec:38:7a:e1:c0:92:25:b4:91:
d3:0a:c2:2e:d2:62:e9:10:87:93:6e:8f:d6:d0:27:cb:f2:8d:
14:17:32:a9:a7:d4:28:bd:50:a7:70:35:80:ae:8f:4a:cf:9a:
e1:3c:f4:70:02:e9:35:74:d3:c5:49:ec:95:e4:cc:2b:8d:ba:
9f:f0:8a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:30 2025 by rpki-client