Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/R_F9w7BmCC-sHVuF64lF_pIL88w.roa
File: R_F9w7BmCC-sHVuF64lF_pIL88w.roa (raw, json)
Hash identifier: yBst1D2/gXPJvdlV/pelwypxlTsQvALiZsqrLLKJrSI=
Subject key identifier: 47:F1:7D:C3:B0:66:08:2F:AC:1D:5B:85:EB:89:45:FE:92:0B:F3:CC
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D51B3E1C110088B4901DF347918262359
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/R_F9w7BmCC-sHVuF64lF_pIL88w.roa
Signing time: Sun 28 Jan 2024 20:12:39 +0000
ROA not before: Sun 28 Jan 2024 20:12:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:51:b3:e1:c1:10:08:8b:49:01:df:34:79:18:26:23:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 28 20:12:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47f17dc3b066082fac1d5b85eb8945fe920bf3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:ac:d7:f1:93:43:a0:a0:57:7d:6d:81:a3:
fb:95:a7:74:a6:ff:d7:52:77:8b:cb:e6:b9:25:3b:
5c:9b:71:3c:51:a3:d8:4f:21:3f:b4:c8:5d:cf:4a:
9c:eb:5b:c4:70:aa:fb:71:8b:1f:56:57:52:a6:3c:
d6:2e:88:b9:e3:92:0e:a3:cd:4c:28:8d:2c:0a:e1:
9a:23:5d:10:0d:52:65:d5:a7:fa:a1:f3:d8:29:11:
55:5d:33:40:47:aa:2c:e7:a4:05:99:9b:9a:1e:1e:
0b:39:06:f4:d5:55:a9:49:27:f0:7b:56:9c:d8:33:
c1:89:5b:f1:f0:bc:57:a0:aa:76:59:2d:16:48:6f:
b9:ae:e1:67:4e:c6:a7:79:89:06:d7:f9:7b:fd:b1:
37:d9:80:bc:7e:b6:0b:b4:1b:0c:cf:62:5d:c0:a8:
4d:04:06:d0:e3:de:0a:f3:26:3e:84:32:5e:0b:ad:
d7:46:0a:39:6c:02:e1:e5:ad:5a:56:ae:8a:3b:6a:
01:1b:de:6d:c2:5c:18:54:de:03:27:50:4a:7f:a8:
0d:79:27:6c:8d:05:88:40:e7:2e:c3:ba:06:24:c4:
45:a7:ec:8b:a8:ed:21:f8:3e:9d:7e:3a:5d:bf:92:
76:55:e7:4c:ba:39:ce:5a:16:ac:28:eb:ed:5c:4c:
71:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F1:7D:C3:B0:66:08:2F:AC:1D:5B:85:EB:89:45:FE:92:0B:F3:CC
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/R_F9w7BmCC-sHVuF64lF_pIL88w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:d4:d6:e4:f2:b4:f6:fc:a0:f3:40:ad:b9:b1:07:c7:9f:68:
6f:02:ce:b6:b9:ef:9f:33:63:1e:27:c1:db:26:ee:6e:55:de:
25:8a:8f:c4:28:54:94:80:1e:14:68:8f:b9:f2:23:93:97:06:
29:c3:b9:a7:b4:02:0e:2f:b4:63:68:77:be:da:f1:f6:a5:70:
43:15:a2:d1:57:7e:22:4d:ef:86:58:c2:5c:c3:4a:21:75:09:
3b:b1:d9:2f:ec:63:02:24:f8:d2:77:da:03:1e:dd:c5:b8:54:
81:69:a9:08:d0:de:71:e2:33:86:51:fd:a0:c3:e9:b9:03:d4:
6e:5c:d2:42:c5:7f:ba:27:01:17:01:2a:9f:e4:70:47:85:b7:
d1:d4:db:5f:b4:19:55:a0:8d:85:ff:d7:a9:01:be:b4:c1:4f:
87:1d:64:e4:4a:06:7d:9b:72:2a:d2:ff:c0:74:48:99:53:a7:
78:77:4e:dd:c4:50:67:bd:c7:1d:8e:ac:7d:03:d6:be:99:25:
4c:e5:3d:81:69:54:ca:ac:96:f6:c2:2f:85:3f:e8:50:d4:70:
3d:cc:2c:b6:17:92:77:63:e5:3e:eb:2d:f1:b5:38:ff:65:6d:
21:5a:51:7f:6a:d5:75:da:b9:3b:18:88:50:68:5b:23:cc:c1:
6f:b0:ea:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:35 2025 by rpki-client