Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LRFfM1oRlS3cWRjdbr6hezdRtnA.roa
File: LRFfM1oRlS3cWRjdbr6hezdRtnA.roa (raw, json)
Hash identifier: bGxmrw9j2Qk1AnVc7ILc66C9upVjqQ7DXOD4vrqh+r0=
Subject key identifier: 2D:11:5F:33:5A:11:95:2D:DC:59:18:DD:6E:BE:A1:7B:37:51:B6:70
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D45DF51B666E71CA6B93A1E5A8036129E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LRFfM1oRlS3cWRjdbr6hezdRtnA.roa
Signing time: Fri 26 Jan 2024 13:04:39 +0000
ROA not before: Fri 26 Jan 2024 13:04:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:45df:15cf/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:df:51:b6:66:e7:1c:a6:b9:3a:1e:5a:80:36:12:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 26 13:04:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d115f335a11952ddc5918dd6ebea17b3751b670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:dc:b8:5f:41:44:f5:a8:9a:11:b1:95:79:
7c:a9:87:7a:67:0b:67:80:74:f0:ae:f5:5a:dc:a5:
9c:aa:05:99:e7:07:eb:b0:b5:8d:ee:c7:25:3d:67:
34:78:80:f9:95:4a:87:bf:75:41:5a:bd:ad:97:c2:
9b:d3:b2:3d:1f:ab:62:72:cb:b9:f3:cf:af:40:e5:
9f:d7:ac:99:2b:0b:a3:d3:b8:10:d5:c1:93:a7:16:
22:78:c0:e6:32:da:67:13:3c:4a:76:c8:e7:ee:b9:
95:df:f0:9d:ba:6f:70:8a:7b:02:b9:8e:80:b2:0a:
b7:24:ff:f0:8d:7c:5a:a0:39:c5:47:58:cb:1c:39:
f2:75:f1:f3:93:3c:2b:25:ae:5c:08:16:e2:8b:2f:
b9:b4:65:9a:ba:1b:c8:12:f8:11:8b:33:ca:87:e7:
ee:be:36:0f:f8:62:cb:73:39:34:13:3b:19:48:d1:
f6:be:0d:17:69:92:21:87:b3:ed:28:8c:d6:0e:f8:
c0:a2:80:05:7c:83:cd:36:22:64:00:2d:f4:ef:eb:
32:94:b2:a3:c7:ae:e8:b6:cf:75:9b:c1:a1:72:4b:
41:f6:56:66:5e:93:1e:4b:89:b1:50:8e:46:1b:ce:
c5:a3:c2:0c:d5:82:9f:7a:04:2e:9d:cd:35:46:0c:
94:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:11:5F:33:5A:11:95:2D:DC:59:18:DD:6E:BE:A1:7B:37:51:B6:70
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LRFfM1oRlS3cWRjdbr6hezdRtnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:64:c9:27:b3:77:11:31:3e:9f:ca:ea:2c:75:a5:10:23:83:
95:70:50:fd:30:51:28:04:33:ec:f1:66:16:78:3c:b5:1a:e7:
a5:57:6f:29:9f:47:56:8c:b2:12:2e:6e:23:d8:0e:50:ac:72:
5d:82:4d:59:1a:31:28:10:41:1c:17:bb:76:5b:15:d8:cf:f6:
41:e8:56:68:cf:d9:a4:03:dd:ff:dd:08:6c:6e:a0:a9:77:9c:
ee:2e:da:d9:ba:d5:d8:a8:9e:8e:dc:34:2e:ce:7c:0b:9a:00:
06:c9:6f:00:6f:04:bc:13:62:5f:2d:7a:7e:89:a2:af:bf:00:
09:92:e2:6e:bc:55:6c:9a:88:15:9a:70:7b:f2:5d:59:84:9a:
77:43:8a:34:3e:d8:cd:c3:3f:ab:8e:34:1b:46:cb:62:36:da:
eb:8a:dc:57:b7:1f:21:d3:9a:43:26:d0:eb:10:97:a1:38:5b:
00:dc:b8:5e:60:ff:aa:ad:06:36:b4:7b:c2:98:20:19:43:18:
2d:93:b5:41:bf:89:90:61:6d:09:0d:0f:9d:69:c3:bb:54:a2:
07:c0:d7:b2:2a:5e:fe:64:27:8e:39:9b:88:4e:7a:01:fc:65:
2e:47:8f:28:4f:99:b6:09:cb:67:52:a5:eb:59:c8:48:f8:e5:
10:29:d6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:50 2025 by rpki-client