Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/R-I_uRV-3C78IEJruKXCgRT9SNc.roa
File: R-I_uRV-3C78IEJruKXCgRT9SNc.roa (raw, json)
Hash identifier: A+FfNedeK7bT9ADBTM7r0Ml5DA/pE06lqjbgmDzsbxg=
Subject key identifier: 47:E2:3F:B9:15:7E:DC:2E:FC:20:42:6B:B8:A5:C2:81:14:FD:48:D7
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E78F4FC7922BE590475D48E6059FD88F4
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/R-I_uRV-3C78IEJruKXCgRT9SNc.roa
Signing time: Tue 26 Mar 2024 04:11:45 +0000
ROA not before: Tue 26 Mar 2024 04:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:78:f4:fc:79:22:be:59:04:75:d4:8e:60:59:fd:88:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 26 04:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47e23fb9157edc2efc20426bb8a5c28114fd48d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:13:f5:1a:3d:82:d9:75:55:42:5c:0c:ef:
04:88:ac:d8:45:9c:a7:e4:20:79:db:75:50:dc:10:
05:78:8b:3f:88:12:6b:52:ea:c2:e9:62:bf:3e:d9:
3b:3f:35:cc:2a:a9:5f:80:4b:85:f6:ae:ac:5e:87:
2c:ab:49:c3:8c:6c:90:d9:9f:a2:fc:78:77:3f:43:
a5:f2:7c:d4:9b:c9:9b:15:af:76:7f:be:43:d8:cb:
51:d5:f5:e7:56:19:35:76:d7:c4:6e:f3:a8:fa:8b:
83:12:7b:bb:45:57:90:25:d3:f5:8f:09:e9:82:dc:
c7:ec:84:4d:27:2e:b0:51:b8:9a:9d:2c:2d:cc:45:
c1:49:ac:9a:ea:28:9c:79:0d:be:75:81:a3:66:a0:
fe:60:f1:74:6f:cf:41:e9:82:a0:cb:f7:f3:8a:5d:
19:78:b4:9a:90:91:2b:14:26:47:4b:17:39:15:ab:
54:99:29:52:12:2c:90:68:3d:dd:d5:1d:39:6f:24:
b8:e3:b9:d2:44:f9:4f:b6:ca:88:f3:66:1c:b6:e9:
fb:3b:5b:d2:b5:0a:fa:61:e8:ed:2a:ce:20:07:20:
07:e9:e4:4a:4a:8f:b7:a4:99:d2:91:93:65:6c:b3:
28:d5:0f:d8:5a:3c:1d:13:bc:3f:9a:47:af:ed:31:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E2:3F:B9:15:7E:DC:2E:FC:20:42:6B:B8:A5:C2:81:14:FD:48:D7
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/R-I_uRV-3C78IEJruKXCgRT9SNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:aa:2a:47:56:72:b2:df:4a:94:ba:e4:74:ee:7f:d8:d0:f0:
18:bc:a8:c5:09:33:95:45:75:d9:6e:44:74:f2:fe:33:4e:22:
dd:92:45:e6:ad:ac:76:a9:4f:b8:48:5c:e4:d4:f8:ab:9b:7e:
b4:cd:d9:23:b6:94:30:1c:4b:4a:4b:e8:91:36:3e:90:7f:c5:
de:a1:55:93:ef:b2:77:89:a0:d6:89:f2:fc:b6:da:cd:17:96:
7f:ef:ed:1b:8b:0c:c5:db:06:a3:9c:0b:ef:b3:87:0b:8c:06:
4d:63:07:d7:02:3a:7d:0d:43:2b:63:3c:bc:b3:0b:66:a1:74:
98:9c:1f:2d:22:34:d7:9c:5f:a0:fb:e0:2b:ca:19:c9:90:9b:
9d:0a:85:7e:12:2e:db:65:07:c6:e0:a3:8b:0d:48:44:b7:76:
90:82:ed:12:3e:d4:98:4f:71:5d:11:45:2c:14:bf:57:45:aa:
e7:b0:cf:60:3d:a3:ca:47:9c:d0:ac:70:42:94:3d:0a:3e:1c:
8e:93:1d:5d:53:26:0d:e6:e7:87:ac:fa:5b:23:8d:17:cc:20:
3e:e3:f6:19:e1:5d:b5:c2:69:1f:1f:f6:0d:04:5b:bf:50:12:
b7:97:8f:77:2e:86:39:43:c2:ab:e4:bf:13:b9:92:00:c7:bd:
9b:47:54:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:19 2025 by rpki-client