Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Is7lj0j5kGrcNDmSY7eEP7REu0A.roa
File: Is7lj0j5kGrcNDmSY7eEP7REu0A.roa (raw, json)
Hash identifier: AzMCqXgaqmU1mQiJsBWkm0/HpEA84mwk86t5FcTucWs=
Subject key identifier: 22:CE:E5:8F:48:F9:90:6A:DC:34:39:92:63:B7:84:3F:B4:44:BB:40
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DEA7B583B57C4253FF85ED6CBB00C63C0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Is7lj0j5kGrcNDmSY7eEP7REu0A.roa
Signing time: Tue 27 Feb 2024 12:12:48 +0000
ROA not before: Tue 27 Feb 2024 12:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ea:7b:58:3b:57:c4:25:3f:f8:5e:d6:cb:b0:0c:63:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 27 12:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22cee58f48f9906adc34399263b7843fb444bb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a2:3d:14:b6:aa:6f:b3:7e:f6:1d:2f:68:76:
ad:33:65:1d:7f:38:f0:70:f0:2a:b1:9f:6a:87:8d:
d8:0a:f0:b4:b6:65:fe:f3:fa:c8:49:98:2c:da:9a:
fa:90:91:36:5e:52:d8:99:c2:c0:f7:f0:51:b3:10:
dc:eb:7d:d3:29:0e:04:59:e2:30:a1:2e:e1:2f:d7:
3a:5c:c1:3f:46:5a:af:ed:90:29:04:ef:25:08:48:
18:a5:d1:a4:80:00:c1:65:a9:da:6a:58:a2:87:61:
01:8e:16:a5:39:05:fc:41:4d:a9:ec:fe:1a:d1:81:
b5:1d:2f:93:76:bc:87:95:66:ea:29:5f:7c:af:90:
6f:ac:a6:4e:f5:4a:23:79:bd:b2:08:fb:bf:08:08:
17:32:d6:ee:72:ca:d3:83:6a:dd:b3:27:8e:e4:da:
f8:61:45:ba:6e:a6:a9:ee:07:a3:0c:8c:11:6a:b3:
d9:ad:9a:fb:ab:50:23:17:29:60:9c:c7:ae:c5:7b:
47:25:9b:dc:77:a4:36:f0:c1:f4:12:b7:e6:ed:c3:
6a:cd:99:d3:88:1c:99:d8:d6:88:7d:43:b9:31:35:
a6:18:e2:1a:5c:92:22:4a:a9:b2:f4:57:ee:ae:82:
de:fc:dd:12:77:11:f8:51:ae:61:47:23:3b:2b:76:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CE:E5:8F:48:F9:90:6A:DC:34:39:92:63:B7:84:3F:B4:44:BB:40
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Is7lj0j5kGrcNDmSY7eEP7REu0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:93:00:6e:a3:34:62:ef:85:69:43:b8:0c:d1:a3:37:85:2c:
f8:a7:7e:03:a4:d2:79:96:03:87:15:79:8f:f0:84:18:72:39:
9e:9e:90:a9:79:dc:8e:0d:01:b9:5a:dc:c6:6a:06:3e:67:2b:
31:2f:88:81:d7:f0:4c:f9:d0:65:14:3b:9a:f8:4c:fe:4e:b9:
3a:fa:9e:96:de:e1:8a:54:77:87:a9:a1:94:45:62:fc:98:fd:
d2:f3:6c:39:06:2e:22:5b:2a:66:38:d4:ac:2c:3e:64:e5:4b:
f5:ee:fb:09:17:21:8a:cf:0d:99:07:ff:c4:9f:b6:aa:d3:73:
85:b4:b3:c0:13:8d:e9:f6:bd:b7:c9:60:bc:93:bf:9f:4f:c8:
75:15:b2:7a:cd:d4:e1:05:c8:37:f6:67:45:a1:85:f9:c7:51:
fe:51:7e:b9:d3:d5:0b:3b:b5:7c:f6:05:e4:9c:12:4c:f3:4c:
9e:3f:0c:29:55:bc:0c:20:38:97:27:ac:8b:9b:66:b0:90:bb:
2e:ba:da:79:8b:e7:ca:52:14:80:30:1d:28:cc:29:6e:8c:5c:
41:01:fd:8b:e0:9a:cd:a9:60:e1:12:f6:84:2b:23:b9:8d:d3:
70:ea:89:c1:5c:8f:5f:af:69:d8:1c:8d:b1:20:22:9d:2e:fb:
38:10:42:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:45 2025 by rpki-client