Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UFzcoK7bfAdWqEfwkW8JQB5WhF4.roa
File: UFzcoK7bfAdWqEfwkW8JQB5WhF4.roa (raw, json)
Hash identifier: l6YfXPgD2HerxmtXVr+XkxofFukOCpj6z8t5W3u9Spc=
Subject key identifier: 50:5C:DC:A0:AE:DB:7C:07:56:A8:47:F0:91:6F:09:40:1E:56:84:5E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E920FFCB6A88EE64FB304A1D28215D7F9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UFzcoK7bfAdWqEfwkW8JQB5WhF4.roa
Signing time: Sun 31 Mar 2024 01:11:44 +0000
ROA not before: Sun 31 Mar 2024 01:11:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:92:0f:fc:b6:a8:8e:e6:4f:b3:04:a1:d2:82:15:d7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 31 01:11:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=505cdca0aedb7c0756a847f0916f09401e56845e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:ae:df:b3:93:2b:60:62:96:a9:dc:fc:f2:
be:df:3b:99:63:cf:dd:52:2e:2c:18:20:32:ad:22:
32:c2:6f:ba:5e:eb:77:a6:60:f0:44:4e:05:f6:1b:
76:d1:c2:b1:43:b1:28:8b:56:3d:fe:23:3f:e1:74:
7d:06:2a:f8:0a:2e:42:58:1e:54:e1:d1:c2:d1:be:
f3:73:b9:ef:b4:67:51:f9:47:cc:c1:7a:86:ff:b2:
6d:fc:59:23:07:e9:6d:45:02:c4:3f:c2:32:50:d6:
3c:f3:0d:85:e3:68:3b:5b:d2:c3:9b:ba:a1:d1:10:
83:da:4b:4b:ae:c4:89:ef:66:f0:f1:f5:89:84:65:
70:b2:7b:80:5d:e4:ba:9d:32:b7:b2:90:4b:a4:ab:
a2:d7:b1:e3:22:92:10:79:c0:fd:d2:7e:3f:42:32:
eb:4a:d7:1e:ab:07:f9:ef:88:1b:2b:66:32:f6:72:
12:35:bd:6f:ae:80:a0:4a:64:c5:6a:0f:c4:99:bb:
5d:f9:cf:1b:e8:4d:39:a6:c8:bf:fc:23:13:73:67:
ec:94:1e:d2:b9:78:01:02:48:77:ed:23:05:f2:4a:
e3:d6:e8:b2:a2:f3:61:b2:3c:f7:dc:d6:6d:b0:08:
9f:35:e3:1c:8a:e2:c7:bd:ce:0a:96:b5:d6:20:54:
87:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5C:DC:A0:AE:DB:7C:07:56:A8:47:F0:91:6F:09:40:1E:56:84:5E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UFzcoK7bfAdWqEfwkW8JQB5WhF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:03:9e:64:eb:cb:65:08:50:69:91:17:f9:cb:25:e5:bf:c6:
96:f0:3b:bb:a2:9f:81:49:69:d9:be:a9:d2:c5:d4:dd:16:9e:
ce:35:e0:1e:59:c4:7f:b5:b0:6e:2e:0f:14:e2:fd:01:50:f6:
51:95:16:c9:c3:99:28:70:2e:f1:2b:88:f5:8e:20:56:8f:d4:
ce:6f:0c:93:ca:5a:f2:52:de:ab:cb:2d:ee:bb:32:d9:62:0b:
ca:e6:30:42:35:38:01:72:64:3e:32:a8:a2:39:43:1b:c1:ac:
01:e8:f3:5c:28:ee:1f:06:e6:5b:14:18:be:b3:44:4a:df:1c:
58:a6:c0:4d:a8:28:13:06:b8:f2:87:08:d1:b1:02:6c:5d:75:
46:08:a9:d1:9d:96:13:24:fa:f7:2a:32:b0:1e:cc:51:c4:5d:
6a:32:10:33:95:85:37:99:95:42:d6:62:79:4e:20:df:d5:cc:
bc:94:33:f6:33:56:b0:6a:52:f3:b4:56:5d:4d:25:28:e6:c4:
08:95:8e:65:3c:50:a9:2b:ed:4b:f1:2f:54:29:df:fc:21:5e:
5f:18:64:dd:fd:7e:38:e0:d3:f1:15:48:96:4b:14:6b:7c:51:
28:b2:5c:5b:8c:f9:6a:87:55:90:c2:90:f9:fe:c3:05:fe:c7:
33:cb:31:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:25 2025 by rpki-client