Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/REcthnKMLO_oX24XFgDafeOqofU.roa
File: REcthnKMLO_oX24XFgDafeOqofU.roa (raw, json)
Hash identifier: s8fO9wacqRCn9vLyozOa71ZRI9kUgi7oHnoVzJTUx94=
Subject key identifier: 44:47:2D:86:72:8C:2C:EF:E8:5F:6E:17:16:00:DA:7D:E3:AA:A1:F5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D8C4170CE42DA4D569E437D6D1A29C336
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/REcthnKMLO_oX24XFgDafeOqofU.roa
Signing time: Fri 09 Feb 2024 05:05:15 +0000
ROA not before: Fri 09 Feb 2024 05:05:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:8c40:8ce4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8c:41:70:ce:42:da:4d:56:9e:43:7d:6d:1a:29:c3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 9 05:05:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44472d86728c2cefe85f6e171600da7de3aaa1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bc:96:78:4c:d5:b1:42:70:27:12:04:9b:47:
a8:94:d2:9f:71:22:79:8d:d5:77:b8:4d:9a:79:9f:
03:01:91:4c:22:19:a8:2d:ad:c9:cd:fb:c6:64:d9:
58:e1:9d:a8:ce:24:d8:48:e9:6f:15:46:3e:cb:b6:
24:25:5c:69:f1:a3:11:0f:09:98:77:80:38:04:23:
ba:e7:6c:11:f4:3d:eb:72:0f:ec:17:70:ca:0d:6c:
4d:eb:e4:34:cf:51:08:b6:5b:a7:b8:f1:f8:d0:14:
e5:04:51:c3:13:0c:c5:49:27:d6:0a:34:af:03:43:
42:be:72:32:ed:49:d2:1a:a4:5d:6e:cd:bf:0d:4e:
35:c2:fa:27:a9:22:a4:93:43:f4:70:1d:03:ac:de:
2a:b3:91:42:12:de:50:01:ab:cb:a0:24:19:07:65:
26:de:38:5d:08:00:55:8f:de:01:06:f0:2c:8a:02:
79:bb:8a:b4:61:ec:d4:8d:57:8c:b8:cc:bc:d9:a6:
ee:6e:d3:a0:9c:8b:35:7d:85:5b:d4:8d:11:5e:a9:
aa:ce:66:01:56:ca:8a:84:e1:3c:49:83:41:81:e7:
7a:07:82:d2:2e:34:61:9a:04:1a:49:c5:1b:24:c4:
8c:85:06:77:06:12:f9:af:47:86:bc:48:46:a3:94:
16:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:47:2D:86:72:8C:2C:EF:E8:5F:6E:17:16:00:DA:7D:E3:AA:A1:F5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/REcthnKMLO_oX24XFgDafeOqofU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:42:34:50:d4:81:45:fc:2b:8b:0c:44:ca:fa:4c:7b:63:71:
6b:66:c2:70:5d:e1:d8:9f:a6:fc:2e:03:af:b2:37:8b:f2:33:
cc:97:d8:6d:c7:d4:3d:eb:08:f0:2f:26:76:85:93:42:5e:a9:
75:e2:ec:7e:e0:6f:bb:e9:f0:f1:e3:ad:db:c2:40:f2:eb:18:
ae:ea:85:f9:18:31:88:11:7e:23:29:b7:3f:17:3a:38:f5:bc:
c0:d3:26:79:db:53:34:07:69:6d:d0:0b:ea:d8:e2:9f:cb:2a:
26:4d:2b:c0:63:db:5f:1b:c1:85:f8:91:1f:7b:e1:11:56:ea:
08:40:ed:a7:51:89:2e:92:aa:f7:0f:f5:6c:90:52:57:53:b7:
db:af:51:4a:71:70:de:51:7f:8f:c7:23:03:2a:ff:62:2b:f0:
bd:5d:b1:d9:ad:01:63:f3:05:da:1b:c2:52:81:b8:65:0a:7a:
f2:fb:13:bb:b4:34:a8:7c:e3:b4:1d:bd:20:f2:1a:e4:61:bd:
55:05:db:ac:3d:c9:13:fe:82:ac:73:20:6b:a6:02:4a:c3:ea:
b4:3e:db:ff:f6:ef:f7:db:53:ff:cb:0b:69:97:51:2b:a6:ca:
b2:44:0e:88:33:e9:4a:82:47:0b:27:65:06:b0:12:75:a6:dd:
fb:52:e9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:43 2025 by rpki-client