Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/S6OOX_XODE3Fy1QLmn5psi3xGXM.roa
File: S6OOX_XODE3Fy1QLmn5psi3xGXM.roa (raw, json)
Hash identifier: CV0jZa72ULGbgMJRcaroqn19hvhf6fUVQ8/wv/kW6NI=
Subject key identifier: 4B:A3:8E:5F:F5:CE:0C:4D:C5:CB:54:0B:9A:7E:69:B2:2D:F1:19:73
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB9C27A998174D278F9A47A9B2DCC6A4D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/S6OOX_XODE3Fy1QLmn5psi3xGXM.roa
Signing time: Sun 07 Apr 2024 18:11:54 +0000
ROA not before: Sun 07 Apr 2024 18:11:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b9:c2:7a:99:81:74:d2:78:f9:a4:7a:9b:2d:cc:6a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 7 18:11:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ba38e5ff5ce0c4dc5cb540b9a7e69b22df11973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:4c:b7:53:29:d7:91:b2:d5:8c:df:f2:17:
a7:f9:9b:28:bc:63:a9:89:6a:46:28:20:e9:58:41:
a4:f7:5a:10:7d:a5:54:42:75:08:98:aa:97:06:61:
18:aa:02:bf:10:37:a8:e5:58:4f:71:cc:54:b8:c1:
d6:b9:05:24:c5:4e:e3:b4:0a:81:8f:d8:e1:17:09:
56:ad:5d:f7:ab:57:af:77:a3:d2:83:5a:16:50:73:
f9:ca:2b:b6:9c:71:59:08:10:9b:38:44:3e:23:fe:
5b:20:4f:a3:eb:9f:00:55:b3:ba:f7:dc:d6:8d:96:
88:7b:3b:0b:19:8c:dc:7f:9e:ac:a8:4c:de:af:fe:
cc:31:39:95:21:2c:bc:cf:a3:60:a7:54:d7:1c:fe:
b9:78:5a:0d:c2:85:2d:e6:f7:8f:7a:3a:bf:7f:f7:
98:ee:83:f8:c8:fc:e6:b3:b4:9e:b6:68:c5:fa:46:
75:6f:17:7a:ef:1a:ed:a7:b4:b9:a8:82:72:4e:e8:
cd:2c:37:e7:bf:64:c3:ee:e3:76:e7:db:08:fc:12:
49:04:98:40:c8:12:0a:d6:6b:b8:f9:6f:be:dc:16:
03:90:4e:3b:bf:2d:97:55:69:42:4f:a1:bb:6f:0f:
12:6d:68:85:4c:b4:20:be:42:5e:50:c1:58:e8:1e:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A3:8E:5F:F5:CE:0C:4D:C5:CB:54:0B:9A:7E:69:B2:2D:F1:19:73
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/S6OOX_XODE3Fy1QLmn5psi3xGXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:94:b3:c7:e6:ad:75:77:ad:b6:3e:5e:aa:9a:16:87:e5:eb:
28:d9:6e:e7:a0:b1:1f:a5:d8:47:bd:ed:4e:79:53:29:bd:04:
ae:81:fb:6a:f5:6b:92:2e:80:7c:f5:b8:48:cd:1d:57:36:de:
73:cb:8e:03:5c:c0:12:b9:2b:a2:be:91:03:50:ca:1c:d5:e3:
96:ef:a8:74:d4:30:67:50:96:94:cb:73:60:03:fd:25:e1:c2:
9e:21:02:0d:c3:50:ab:38:c4:72:79:ab:fc:fe:09:73:36:0c:
42:a1:d7:56:cd:bf:70:37:6b:26:81:c0:4f:83:35:5f:7f:1c:
4b:97:09:b1:2c:9d:24:1e:ca:03:31:27:88:dc:9f:89:f8:b5:
5f:f2:a1:80:cd:33:6e:22:64:f8:ae:68:c8:16:9a:88:d4:a8:
df:2c:87:3f:ac:55:5f:06:85:33:45:9d:eb:19:be:d2:8a:d4:
94:11:8e:91:9f:7f:d3:73:4b:c8:65:be:8e:0c:fe:65:10:c1:
a0:a8:8a:1a:d0:ea:78:62:84:4c:a7:fe:29:7a:4f:bd:56:98:
39:ad:db:dc:ba:e2:9a:91:21:33:78:64:7c:0b:a7:46:d6:5e:
b2:40:42:f1:d3:47:8e:de:f8:19:b6:7e:55:38:0d:50:f4:26:
26:d8:ed:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:44 2025 by rpki-client