Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/S1tNeuf-597bw6dapQb1E9DyV6k.roa
File: S1tNeuf-597bw6dapQb1E9DyV6k.roa (raw, json)
Hash identifier: cluSsXgdiILrSQ/LWFsq2DfpBSCwQabkd2ffdOXOwCM=
Subject key identifier: 4B:5B:4D:7A:E7:FE:E7:DE:DB:C3:A7:5A:A5:06:F5:13:D0:F2:57:A9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D68741BB93315F512F070CE2F78B94E26
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/S1tNeuf-597bw6dapQb1E9DyV6k.roa
Signing time: Fri 02 Feb 2024 06:14:16 +0000
ROA not before: Fri 02 Feb 2024 06:14:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:68:74:1b:b9:33:15:f5:12:f0:70:ce:2f:78:b9:4e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 2 06:14:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b5b4d7ae7fee7dedbc3a75aa506f513d0f257a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:a2:0d:e9:30:7d:d6:a1:d5:e2:58:35:e1:
b5:c2:08:30:3c:05:a0:a2:71:6c:39:16:8f:61:20:
f8:21:87:53:33:5f:89:af:ef:a4:a1:40:3f:09:20:
0b:19:fa:ec:45:2d:d5:bd:51:74:52:fd:eb:54:e2:
fa:fb:84:ba:52:22:cf:94:c3:38:86:9a:3e:ea:0e:
e8:11:92:dc:99:83:c3:c3:b2:05:12:3d:dd:29:72:
47:31:10:ff:7a:2c:74:5a:09:41:9d:b6:c1:01:0a:
c4:c8:f7:ba:86:78:5b:a3:e4:2b:75:ff:48:3f:7f:
a4:63:d1:f5:84:c6:90:73:a2:ab:40:e7:8a:bd:b9:
d3:5f:c4:02:60:3e:4f:ad:3d:74:1e:93:dd:89:55:
99:fb:6e:2b:ad:3f:fc:fc:cb:b7:ee:d4:63:47:4a:
9b:5e:1e:b0:65:0d:d6:33:ac:ee:1a:1d:fe:85:6d:
4c:41:9b:80:62:5c:97:6c:f6:b3:56:1d:07:af:dc:
e0:09:9f:0b:5e:53:d3:b3:65:fb:89:04:23:37:f1:
dd:15:98:e1:79:c3:12:d8:20:86:cb:14:65:99:78:
59:73:ce:18:3b:af:31:85:fa:25:a9:4b:60:fa:d5:
3e:b1:ab:55:f0:38:12:28:da:29:b5:1c:72:27:5d:
57:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5B:4D:7A:E7:FE:E7:DE:DB:C3:A7:5A:A5:06:F5:13:D0:F2:57:A9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/S1tNeuf-597bw6dapQb1E9DyV6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:5b:39:9b:0d:c1:a4:da:e1:27:f3:77:4e:d5:e5:1f:3a:61:
33:4f:5e:64:f0:bf:50:40:35:3f:0c:00:4a:8e:2e:62:95:85:
6d:f1:4b:ee:23:95:d8:50:1b:2b:cc:f3:ce:b3:6e:d3:a6:fc:
a7:7d:11:9c:95:23:c8:ba:9b:9f:1b:c6:b0:e5:e1:05:cc:17:
bb:8d:20:84:f6:93:12:34:1d:0e:bb:13:e2:8a:38:71:82:6a:
ab:11:28:c0:d3:66:2b:00:69:cd:be:4b:b8:24:d9:f7:58:d5:
77:70:a0:f8:a3:00:54:d0:9e:c7:41:3e:d7:07:23:d0:4e:34:
98:5c:8a:ff:11:af:da:71:77:b7:a7:8d:9f:5c:4f:0d:68:99:
b0:ac:5e:25:aa:46:4f:0e:17:50:41:6a:13:47:22:eb:18:0a:
96:84:ad:22:76:d8:82:e8:02:53:af:be:bc:32:c8:70:bd:4c:
b5:1c:ae:e5:b7:57:12:85:25:01:cf:77:ff:ea:78:80:62:34:
b1:9c:cd:02:28:87:67:72:7f:50:a0:fb:7a:41:61:ce:9c:d2:
a9:dd:fc:f5:96:30:f7:21:78:3a:4b:dc:97:ff:11:a2:84:b1:
a7:5a:92:04:13:96:ff:8b:a1:cd:2f:56:05:d8:b1:b3:f6:dc:
8a:2a:dd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:47:17 2025 by rpki-client