Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/T7R7E1DPv4RdbvVQaw28m5_x8CE.roa
File: T7R7E1DPv4RdbvVQaw28m5_x8CE.roa (raw, json)
Hash identifier: Y/n3LfzQQLhmi5dq4vbXdzs1pJiic2M53+TMQSc3Kcc=
Subject key identifier: 4F:B4:7B:13:50:CF:BF:84:5D:6E:F5:50:6B:0D:BC:9B:9F:F1:F0:21
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D62711CEF12F11267FCE7D969E4EA662C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/T7R7E1DPv4RdbvVQaw28m5_x8CE.roa
Signing time: Thu 01 Feb 2024 02:13:16 +0000
ROA not before: Thu 01 Feb 2024 02:13:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:62:71:1c:ef:12:f1:12:67:fc:e7:d9:69:e4:ea:66:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 1 02:13:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fb47b1350cfbf845d6ef5506b0dbc9b9ff1f021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:25:0a:d8:8b:79:f9:16:f1:4a:42:93:24:
cc:6e:ec:8b:9e:c8:13:61:5c:0c:55:3d:eb:ae:f8:
57:6f:90:29:2f:e6:49:57:ab:1c:11:3a:e1:c0:82:
99:98:36:ff:fa:09:14:0e:bb:9e:b7:a7:06:5f:84:
93:b1:19:9f:19:4b:65:c9:78:5c:5c:55:9f:f3:a5:
4c:a3:95:52:d1:42:49:5d:15:94:71:62:b6:03:8e:
19:f8:3e:1b:71:2b:44:2c:5b:6a:30:34:eb:b3:57:
45:58:39:df:b0:3a:85:87:eb:49:3b:c4:78:b4:1a:
5b:3d:57:39:c9:20:b9:10:89:12:f8:68:5d:b8:5a:
99:14:37:66:5d:7b:46:d3:67:3f:f6:d2:80:ee:33:
37:d1:cd:e9:d7:15:96:ed:43:42:3a:b1:d8:94:08:
77:9b:2d:b3:62:5b:c5:c2:f1:58:e3:f0:48:ae:08:
4e:dc:e5:7d:8a:3f:c8:56:24:6b:28:a0:9c:53:84:
ea:b5:6b:cf:4f:68:81:c8:7e:6c:6f:8d:b9:c9:96:
8e:10:af:12:6a:f3:77:b1:8d:bd:a9:db:da:6e:ab:
ab:86:4b:b8:22:b5:10:80:23:8a:78:bb:60:fe:98:
49:3c:8d:9e:a1:b2:68:bc:d0:5c:a0:86:bd:47:d1:
d5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B4:7B:13:50:CF:BF:84:5D:6E:F5:50:6B:0D:BC:9B:9F:F1:F0:21
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/T7R7E1DPv4RdbvVQaw28m5_x8CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:cc:eb:4b:be:f8:48:be:10:14:85:72:eb:79:b2:23:02:21:
d7:19:cb:72:5d:9e:34:9c:c4:d7:9a:dd:37:9a:dd:d9:28:56:
12:0f:87:73:d4:39:ac:7a:5b:ed:9f:6b:f2:8e:e2:50:c3:37:
2b:fe:88:fa:28:a2:33:3b:20:b3:a1:f0:40:84:c9:7a:f4:01:
ea:f4:df:81:ee:54:c7:6d:0e:0a:94:ea:91:0e:bb:b1:46:d1:
a8:7a:97:71:32:1a:05:d6:08:41:b5:42:8c:90:fb:92:9e:29:
d4:17:d0:f7:01:51:3e:9d:20:8a:ed:57:e8:c8:bf:8b:e6:f0:
d9:71:31:68:6f:71:9d:87:17:70:cb:a0:2c:f6:f2:c7:6c:e0:
1a:ed:78:8c:01:03:11:98:68:ab:e1:f0:b6:92:76:41:69:aa:
04:79:ed:fb:74:fe:f5:f6:22:a9:f0:3a:f2:20:ca:1c:5a:34:
2e:23:48:86:e2:5b:a6:8c:ec:a0:a1:f5:33:ee:56:c5:18:fd:
18:01:b3:72:25:04:6c:4f:c8:0d:1d:69:db:17:6d:8f:14:6c:
2b:ff:20:71:b3:2c:f3:41:e0:d0:f8:d7:76:cd:40:17:a0:34:
0c:cd:c7:54:9b:df:7a:81:f3:48:61:0a:44:4b:78:bf:1f:97:
7f:2a:e3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:19 2025 by rpki-client