Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SfNnEpqS0xXLqE50xiVldxRb_Y8.roa
File: SfNnEpqS0xXLqE50xiVldxRb_Y8.roa (raw, json)
Hash identifier: LRq39lxr8h+FOYP8Xx+9e+UUCKpZWpjnrKoroXPVi9A=
Subject key identifier: 49:F3:67:12:9A:92:D3:15:CB:A8:4E:74:C6:25:65:77:14:5B:FD:8F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D6686A3A07EC4E866FD96195A96384AFA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SfNnEpqS0xXLqE50xiVldxRb_Y8.roa
Signing time: Thu 01 Feb 2024 21:15:16 +0000
ROA not before: Thu 01 Feb 2024 21:15:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:66:86:a3:a0:7e:c4:e8:66:fd:96:19:5a:96:38:4a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 1 21:15:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49f367129a92d315cba84e74c6256577145bfd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:88:f6:ae:2c:ea:c3:23:bc:b6:57:c4:c9:
55:bc:7a:d1:f6:58:81:90:75:f2:b6:07:90:04:f8:
b9:95:75:2f:67:d4:30:8b:1b:a2:c6:cd:5a:63:2d:
e1:7d:48:8d:6d:3f:92:22:cc:2c:80:74:11:5e:1f:
a3:1d:ab:3e:8b:f4:dd:29:d5:a7:03:86:c9:d3:68:
61:4e:d0:41:94:26:e7:71:05:a6:c5:76:44:7c:7f:
15:e6:04:c7:b6:77:67:f2:57:67:19:11:e4:bd:01:
52:78:d4:df:d2:ec:11:90:52:e4:93:f3:6e:7d:77:
4f:4d:3a:84:80:fb:c4:d4:6d:e0:5d:06:5b:2a:e6:
27:55:1e:2f:41:dc:1b:73:9c:55:7b:5d:45:45:40:
87:50:21:38:39:94:53:db:53:b4:62:6e:fe:96:c6:
aa:22:8a:12:c7:c9:cd:fa:fc:70:7d:25:c9:aa:a1:
2c:88:bb:0c:58:cd:84:d5:25:06:12:0a:20:e1:b0:
28:ad:c8:17:9c:e0:79:94:d0:99:b7:ac:3c:2f:42:
af:a5:f3:39:94:60:08:8d:2d:ff:a9:ac:ca:75:a2:
e3:29:1e:37:62:57:b8:79:80:b2:a8:c5:4b:01:f5:
81:51:6d:44:8a:5d:5c:51:d0:3b:28:ab:69:19:5a:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F3:67:12:9A:92:D3:15:CB:A8:4E:74:C6:25:65:77:14:5B:FD:8F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SfNnEpqS0xXLqE50xiVldxRb_Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:43:00:88:06:cd:28:d9:4d:45:0a:70:48:cd:c8:69:76:38:
d1:b5:0b:b1:30:2a:d1:af:20:52:db:15:44:a2:19:4d:80:ca:
27:42:12:0f:b4:ca:a6:af:b5:41:8e:86:36:c8:5e:a3:6b:6d:
06:d1:46:32:42:7e:c4:96:01:a5:3d:5c:e8:6d:87:85:8e:23:
5e:9e:5c:5b:84:02:10:d6:87:5b:87:76:63:6c:7c:bc:ef:7a:
de:ec:86:d7:e1:72:78:9c:f2:aa:01:33:8a:b1:96:61:29:23:
20:4a:db:75:28:5c:ce:c1:62:a6:3b:13:5b:ae:05:4a:cf:55:
a0:48:a9:c4:8b:be:ae:f8:5d:f8:1c:d3:06:6e:96:5a:3e:93:
3a:8a:e7:b3:a8:b4:f8:ea:f8:31:f3:1a:e1:b2:b3:28:df:d8:
6e:07:84:08:ac:fa:0a:1a:a2:a2:e6:6a:f0:2b:9a:b0:36:e4:
bc:06:25:0d:1f:1b:f4:26:09:95:93:ce:5e:83:c0:12:eb:8e:
58:98:a5:de:2f:d0:c4:e5:ae:a2:e5:f7:93:39:58:68:6b:a9:
01:61:92:52:18:a8:f9:3d:ac:64:9f:45:53:06:04:f1:28:07:
2d:ae:6c:34:97:6b:58:d9:3c:dc:38:26:21:6f:8d:0f:f4:c8:
c7:9b:2f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:36:49 2025 by rpki-client