Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SZm_JpL2Po0li0BmYWiuw-kpeiw.roa
File: SZm_JpL2Po0li0BmYWiuw-kpeiw.roa (raw, json)
Hash identifier: rNzzKJo/E3zOp47onTC4tn8hgCdv1hDeGiN2dEXHgI0=
Subject key identifier: 49:99:BF:26:92:F6:3E:8D:25:8B:40:66:61:68:AE:C3:E9:29:7A:2C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CFA576592C4B8D8C58E00CDAF93BCC30C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SZm_JpL2Po0li0BmYWiuw-kpeiw.roa
Signing time: Thu 11 Jan 2024 21:04:40 +0000
ROA not before: Thu 11 Jan 2024 21:04:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:fa57:165b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fa:57:65:92:c4:b8:d8:c5:8e:00:cd:af:93:bc:c3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 11 21:04:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4999bf2692f63e8d258b40666168aec3e9297a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:6f:e8:6e:1c:8f:c8:39:74:72:09:55:4c:
39:0e:eb:05:d1:4a:e9:11:42:1d:35:b5:21:a7:b7:
b4:aa:c0:e5:09:5d:cf:0f:36:5a:30:c0:53:96:b8:
5a:75:c7:57:22:95:14:13:48:76:13:58:1a:01:92:
1c:b8:82:7e:03:f4:e5:59:e6:1a:05:62:64:a5:91:
a7:4a:29:f6:f6:d1:42:06:a0:7b:76:a4:3a:64:f5:
a3:b7:08:63:05:0a:33:05:7a:89:e0:8c:e4:66:17:
b8:6b:19:7d:ad:7d:dd:b8:1f:bf:bf:a3:02:4e:af:
c3:7d:b8:cd:cb:18:4c:4f:b7:a9:1d:ba:f1:4b:5b:
30:e8:da:54:e3:4b:a9:d8:e6:df:43:42:7c:cd:bd:
d6:e6:03:83:05:cf:77:38:b2:b7:f6:44:a8:31:14:
39:43:7c:a1:00:2a:43:21:5b:78:6b:1e:b0:0d:3b:
6a:b1:7c:96:d1:ba:fa:4b:75:f9:e2:de:99:5f:35:
90:12:43:26:35:16:ab:f0:bb:1f:fc:64:28:76:85:
c6:ba:d6:32:4f:ed:29:88:f6:1a:48:80:f1:27:8e:
2c:aa:1f:bd:65:0a:82:89:df:a9:94:40:5b:40:09:
5f:98:8d:37:90:c6:da:ef:77:45:00:42:33:a0:d9:
a6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:99:BF:26:92:F6:3E:8D:25:8B:40:66:61:68:AE:C3:E9:29:7A:2C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SZm_JpL2Po0li0BmYWiuw-kpeiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:e6:c7:4b:22:23:7b:91:2e:92:86:45:34:8e:97:7d:89:60:
dd:86:21:1f:ea:30:e1:ba:58:ed:00:60:aa:16:6b:2b:72:5f:
e9:55:cf:97:e9:02:4d:14:24:e8:4b:b8:c7:68:a2:fb:84:f6:
47:94:c4:1f:ab:bd:3a:d8:ee:30:45:27:0b:15:20:a3:fa:16:
25:f7:25:a3:ca:74:75:d3:a2:74:13:80:16:c2:8d:dc:1f:21:
77:7c:0c:32:e0:6c:5b:1d:ad:8b:55:70:ff:3b:a5:58:89:82:
80:20:81:08:bb:e8:68:09:c1:1c:d1:f2:2d:d5:9c:13:e1:de:
c7:dc:1f:ea:b8:3a:ad:7f:b5:b0:e0:ac:79:88:5a:b7:db:52:
0b:79:36:45:3a:cd:6a:e1:46:3d:ef:c8:a3:59:67:18:81:fc:
f9:4b:e7:4c:91:44:96:14:c1:a6:4a:c1:ac:ad:a2:ce:89:2c:
5a:26:3d:69:b3:a0:f7:15:6e:8b:36:2b:e5:05:d9:e4:1c:2a:
be:74:9d:be:12:aa:c1:09:db:07:8d:c0:63:00:84:9e:dd:68:
b5:2d:a5:14:d3:0b:6b:28:1d:a9:76:03:7c:23:1a:32:53:7c:
6f:c2:d6:aa:02:a7:2c:ce:81:3d:90:17:81:fa:92:c0:f3:86:
4a:06:57:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:00:17 2025 by rpki-client