Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RVu2vlB_kGqJmwXEgSbsk0gb4jU.roa
File: RVu2vlB_kGqJmwXEgSbsk0gb4jU.roa (raw, json)
Hash identifier: 7IkowROM8qcVC9UC9j9aPpGtLv0RTCFlMGlU3g8H0U4=
Subject key identifier: 45:5B:B6:BE:50:7F:90:6A:89:9B:05:C4:81:26:EC:93:48:1B:E2:35
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E7EC023DAC1E13BA9FB0C7980AEBD4BF1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RVu2vlB_kGqJmwXEgSbsk0gb4jU.roa
Signing time: Wed 27 Mar 2024 07:11:45 +0000
ROA not before: Wed 27 Mar 2024 07:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7e:c0:23:da:c1:e1:3b:a9:fb:0c:79:80:ae:bd:4b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 27 07:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=455bb6be507f906a899b05c48126ec93481be235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:5a:19:4f:cc:48:6b:1f:62:ff:2c:65:7e:
07:1e:0c:92:e3:d7:a3:a2:4a:b7:e8:65:08:90:0d:
d2:c4:ab:13:05:f0:26:f6:9a:39:10:24:7b:4f:0d:
c3:4f:5d:fa:fc:b0:9d:71:d1:3d:95:78:0c:5c:06:
7f:ee:ad:87:eb:48:1e:ae:22:63:e3:c4:f8:db:a5:
40:43:fa:29:3b:d0:e5:20:5c:14:34:e4:f4:79:ac:
47:eb:9d:05:0f:f9:be:60:09:0b:70:91:b9:5e:52:
ad:bf:e0:80:e1:bd:b0:1c:a7:05:36:67:ce:34:78:
b0:d9:f1:14:73:df:f5:53:9d:8e:6d:b2:77:1b:1e:
a6:66:3d:2f:14:75:4b:4b:cb:8c:e5:96:ae:62:04:
49:73:f4:b0:e2:56:e6:bf:f2:66:81:60:60:06:53:
ee:02:3d:5a:51:70:81:f3:07:ff:56:a6:7c:85:5c:
19:0a:8e:fd:0c:04:9d:66:9d:e1:0c:7e:b5:0a:59:
25:9a:2c:4b:60:ed:5f:a9:cd:78:9e:34:11:75:4d:
f1:77:0f:1a:4d:aa:36:f3:12:1b:a1:f7:6f:cd:e5:
a8:4e:6a:07:2b:f1:52:f2:2b:07:16:f0:78:eb:3b:
d4:7c:07:aa:4a:22:32:ab:82:97:ac:5d:09:91:81:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5B:B6:BE:50:7F:90:6A:89:9B:05:C4:81:26:EC:93:48:1B:E2:35
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RVu2vlB_kGqJmwXEgSbsk0gb4jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:f9:f5:06:c7:95:09:ee:62:75:12:17:91:f9:a8:c3:9b:2a:
52:6e:c5:78:ea:16:c5:b8:7b:00:22:26:e2:bd:7b:93:19:e3:
f6:f6:a7:cb:aa:21:e9:36:26:ad:33:ed:ee:d1:ed:ee:a6:fe:
22:0f:c1:c6:21:1a:25:a3:9f:79:b4:54:e9:ee:5d:01:38:3a:
f7:84:b4:01:f7:aa:e1:76:4a:4a:1f:84:16:f8:ff:b2:15:13:
bd:24:67:78:2e:8e:66:b6:32:2f:65:88:4e:22:cc:54:77:e3:
aa:2e:05:0c:2c:ec:12:9e:05:57:f3:9c:0d:89:75:09:db:7b:
da:24:47:fa:fc:1b:fd:d1:31:3d:d3:7f:79:cf:81:60:a5:0b:
e6:e8:1b:65:e8:fd:af:31:2a:95:d9:6c:45:00:97:0c:e8:81:
ae:a4:5a:9e:7a:9e:25:c1:3b:3e:51:11:8d:9c:cc:2e:e2:69:
04:62:2f:c5:ae:f2:02:95:63:65:4c:39:90:00:b1:58:a1:f9:
ab:3c:2d:41:55:ec:d2:62:ac:e1:e5:ad:83:f4:4e:b0:e7:56:
88:b7:19:7c:7f:dd:67:e2:b2:9c:1d:06:4f:76:d1:76:a8:58:
bb:58:bd:21:8c:a5:a2:3b:a5:d3:14:3f:43:ea:16:58:0e:31:
c6:fe:fd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:53:33 2025 by rpki-client