Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NEyMyhxZlYL5MLGiCd47z7xE5ck.roa
File: NEyMyhxZlYL5MLGiCd47z7xE5ck.roa (raw, json)
Hash identifier: hQh/p1UP1LFbgWcR4Wi0tJNeoQrW7L9zESlWXlrDS7E=
Subject key identifier: 34:4C:8C:CA:1C:59:95:82:F9:30:B1:A2:09:DE:3B:CF:BC:44:E5:C9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D424409FE47512BCBFB43DF04427ECF87
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NEyMyhxZlYL5MLGiCd47z7xE5ck.roa
Signing time: Thu 25 Jan 2024 20:16:11 +0000
ROA not before: Thu 25 Jan 2024 20:16:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:42:44:09:fe:47:51:2b:cb:fb:43:df:04:42:7e:cf:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 25 20:16:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=344c8cca1c599582f930b1a209de3bcfbc44e5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:16:63:4b:0c:cb:7a:99:dd:16:c4:01:f2:
e6:82:38:09:33:4a:4f:88:5c:8f:c3:4a:a4:87:13:
c3:0f:02:c7:5b:d9:7f:c2:92:e5:e1:59:ed:48:c2:
ff:32:28:3f:69:89:c4:63:ce:69:18:8f:93:da:58:
62:78:18:80:1a:e9:a2:d8:e9:c8:01:2c:1b:c1:bf:
2e:b5:f2:34:de:4a:17:dd:70:e2:e5:03:f5:09:f0:
68:22:5d:b4:2b:39:a2:39:9d:b0:80:b2:6f:1d:ad:
0b:e3:8d:a6:bc:09:20:09:82:a8:e3:cf:fb:a0:59:
8f:50:58:dd:d9:64:00:80:02:50:5a:5b:e0:5a:55:
fc:b5:bb:d9:ad:c9:77:c2:bf:41:c5:09:d3:e8:07:
a5:f4:a1:69:c5:f8:bb:c5:5f:d4:58:55:7c:17:30:
29:87:ec:84:09:ba:cc:31:8d:bc:6e:97:48:3a:10:
2e:12:d8:cd:a4:8f:99:16:d2:77:2c:22:89:a6:7d:
8f:a5:4d:88:c8:5a:05:37:88:59:7d:87:37:9f:9a:
e8:f3:b2:10:db:56:c5:42:61:b1:1b:56:0a:09:b5:
d4:a9:5f:8a:c6:e9:e0:af:b1:aa:04:af:cc:99:90:
e0:5c:b2:4a:3b:25:c8:e6:be:62:e3:37:b8:64:c9:
e6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4C:8C:CA:1C:59:95:82:F9:30:B1:A2:09:DE:3B:CF:BC:44:E5:C9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NEyMyhxZlYL5MLGiCd47z7xE5ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:8e:fd:0f:a8:5e:90:8d:e4:f2:a8:72:09:49:33:cd:1a:05:
d1:d3:38:dc:55:0a:67:43:c8:92:68:72:ab:c0:4c:5d:3e:09:
b1:f6:53:bc:3d:25:db:1a:cc:ac:95:ab:e0:27:7c:d8:4d:9a:
cd:a5:04:35:79:7d:45:c1:d9:94:e6:3f:29:8f:5f:67:b4:05:
3a:a7:a6:ef:70:c6:f8:b2:4f:2d:67:34:5e:d7:4c:7a:6c:00:
ee:ad:1e:36:81:8e:34:75:d8:08:20:52:0d:6b:3a:e1:54:80:
ca:89:53:ea:a9:16:a5:29:22:b8:32:33:c1:34:4e:1f:99:83:
b7:f5:8a:48:dd:f0:a1:19:8f:fe:d1:6e:da:a9:3f:b6:df:4d:
ef:48:d9:e0:7e:11:ab:16:b1:7b:87:5d:95:02:e3:87:46:01:
27:37:b4:d2:a2:73:6d:0c:7f:bd:4b:6e:f8:64:0b:02:77:e1:
5d:1e:5b:8f:45:01:5e:21:86:17:b1:0d:44:a7:47:67:94:3f:
63:6e:ce:9e:2f:05:17:ba:d9:25:73:bf:3f:08:b9:51:aa:3e:
ca:8a:10:f1:ee:7c:f4:e6:31:b3:dd:6d:18:43:21:cd:29:37:
cc:14:2e:fc:fc:6d:bf:fb:23:70:3a:9c:e1:36:66:7d:3c:c4:
6b:a5:b8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:45:41 2025 by rpki-client