Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/R0l7IwKovG84wl18Jl8boQ4twlM.roa
File: R0l7IwKovG84wl18Jl8boQ4twlM.roa (raw, json)
Hash identifier: xD9Pm08PqDEwyEtsIxYIdWH2ve5aezcKVir3Sk6CQ44=
Subject key identifier: 47:49:7B:23:02:A8:BC:6F:38:C2:5D:7C:26:5F:1B:A1:0E:2D:C2:53
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D2D06B8506CB3DEA341F214BB4C2F2915
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/R0l7IwKovG84wl18Jl8boQ4twlM.roa
Signing time: Sun 21 Jan 2024 17:17:11 +0000
ROA not before: Sun 21 Jan 2024 17:17:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2d:06:b8:50:6c:b3:de:a3:41:f2:14:bb:4c:2f:29:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 21 17:17:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47497b2302a8bc6f38c25d7c265f1ba10e2dc253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a4:dc:10:25:d3:6e:c0:2b:cf:65:6d:dd:12:
5c:0c:33:bb:78:6a:cd:cb:db:ee:e4:a8:a7:0a:ce:
cc:6c:bb:b1:a7:bb:9e:1f:d5:09:06:a7:63:86:04:
95:70:be:e5:6b:c8:fb:e3:33:91:e3:0b:0f:bc:53:
5d:a1:9f:39:e0:36:07:73:7a:0b:af:ed:82:12:b3:
93:70:00:f9:d0:38:0e:dc:72:4e:b2:46:56:a5:9d:
3f:03:a3:f9:f5:46:a9:1c:ed:37:5b:0d:e2:7e:dd:
6b:d2:5d:b2:2f:33:ab:ef:ea:40:5f:bc:21:89:64:
11:49:7a:4e:6c:83:8f:47:ea:c2:51:63:18:6d:c3:
e8:4f:76:86:59:11:c6:6a:1c:12:45:c0:34:c2:3b:
98:52:a0:de:91:71:98:d4:3e:18:8a:af:78:ab:60:
0f:a3:02:0e:5d:1b:1c:84:d6:d3:06:a7:44:a5:a6:
b5:e0:88:c0:57:3a:12:8e:bf:00:3b:41:58:44:f0:
6d:bb:76:78:da:99:14:a6:13:f4:55:9e:98:72:ec:
9a:f9:c4:5f:a8:93:b6:c2:1c:d6:d3:5a:e7:b9:7c:
7c:53:c7:6c:7c:07:f8:b6:97:3f:b5:28:46:03:b2:
65:73:25:45:55:1f:36:01:99:38:b7:2d:3a:c5:9e:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:49:7B:23:02:A8:BC:6F:38:C2:5D:7C:26:5F:1B:A1:0E:2D:C2:53
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/R0l7IwKovG84wl18Jl8boQ4twlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:2f:eb:41:c1:f9:d7:9a:ed:79:58:28:83:bd:19:d2:dc:4c:
80:6a:7b:fe:bd:0a:52:bb:13:ab:00:35:58:5a:17:89:f0:15:
c3:11:a3:6f:45:b8:a8:da:d2:86:f2:68:81:44:ea:8a:7f:5b:
d3:de:d7:94:85:24:11:ed:6b:e0:52:51:6c:7c:87:43:aa:cc:
cf:26:26:96:e1:ab:1b:4e:3f:68:bd:ab:f2:2d:a2:64:df:14:
a8:3d:c5:59:f9:db:e9:1f:c9:2b:a2:92:46:5d:66:d3:52:d7:
27:23:36:24:2f:88:ab:0b:5f:5a:cd:5d:83:05:7a:11:48:d2:
9d:59:3b:e7:57:4a:4c:e1:dc:0a:96:2c:6a:09:bc:67:55:8b:
51:ce:2b:16:0b:47:bb:fa:50:b6:8f:51:d4:a7:da:a1:08:30:
2e:17:9e:57:0a:99:78:28:cb:d6:87:d8:2f:85:45:5e:d8:db:
50:f8:ee:03:31:0b:c2:83:27:57:0a:81:82:40:6e:3b:b4:8a:
4d:3f:58:a8:d7:c7:7c:b3:fb:1e:5c:dc:bf:fa:c7:ea:0c:f3:
c3:c5:e3:61:78:d1:e7:b2:d4:9a:32:f7:51:1e:7a:5c:93:c1:
6b:2a:1c:6b:d2:07:3a:90:1f:8d:5d:80:39:b1:18:1b:72:6b:
bf:fd:a6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:01:56 2025 by rpki-client