Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Vm1niCLEU7KzyZOsRl3EQdk3RRo.roa
File: Vm1niCLEU7KzyZOsRl3EQdk3RRo.roa (raw, json)
Hash identifier: ax/KGQU9/6U0QeSaGgm/17cSyYM7g1QnDpO7GX9a7J0=
Subject key identifier: 56:6D:67:88:22:C4:53:B2:B3:C9:93:AC:46:5D:C4:41:D9:37:45:1A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D50A2236E946199A85AB8081EA9FD1D18
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Vm1niCLEU7KzyZOsRl3EQdk3RRo.roa
Signing time: Sun 28 Jan 2024 15:13:39 +0000
ROA not before: Sun 28 Jan 2024 15:13:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:50:a2:23:6e:94:61:99:a8:5a:b8:08:1e:a9:fd:1d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 28 15:13:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=566d678822c453b2b3c993ac465dc441d937451a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cb:65:6c:09:e7:be:79:80:88:81:ec:ef:fb:
7d:30:74:bd:a1:80:96:28:33:cb:94:f2:20:f8:ec:
41:ab:a0:93:bd:95:43:83:d1:6f:7c:ce:30:6f:ee:
25:06:57:d5:0d:12:08:0d:1d:f4:ef:66:2f:19:bc:
a3:9c:37:58:e0:ea:16:59:bf:90:cb:1e:ae:3e:5f:
3f:98:e6:59:48:33:75:20:c7:5e:b1:df:34:2b:e3:
b5:74:d0:6e:55:d6:08:2b:fc:ec:4b:87:33:ac:d7:
ba:fa:6c:d3:36:40:52:af:3d:65:fb:ff:64:e8:2b:
7a:e3:a3:62:b8:2a:da:49:a9:ed:ce:4c:e7:3f:a7:
46:60:d4:9f:d8:17:bd:62:48:1f:42:21:8c:5d:1e:
6f:64:0a:93:22:e1:3d:3c:5d:df:af:71:a2:24:c5:
54:36:c3:c3:d2:64:4b:3c:0b:64:43:96:8c:fa:81:
c8:78:47:3b:30:ad:7d:f1:fc:e5:46:15:81:0d:0d:
ac:73:52:eb:47:97:c7:83:94:96:32:ba:cf:e9:e7:
3c:7d:f0:9e:68:8f:b7:79:84:14:94:5f:c9:e1:27:
e3:a9:84:b2:3b:0c:58:59:4b:9a:44:1f:59:f1:05:
c6:6f:43:ab:bb:06:6d:67:d0:b4:1f:4f:54:fa:e2:
69:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6D:67:88:22:C4:53:B2:B3:C9:93:AC:46:5D:C4:41:D9:37:45:1A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Vm1niCLEU7KzyZOsRl3EQdk3RRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:0d:bb:c3:8d:1d:98:66:ff:46:49:c8:38:92:e7:2a:39:64:
da:da:6d:21:17:5e:1f:c3:56:e7:af:8e:43:9f:1b:b8:16:6e:
5b:e9:17:9d:4d:b6:3e:9b:5f:46:c6:31:50:bd:a0:e6:47:16:
ea:cd:21:06:53:0f:ae:b0:71:93:37:99:a9:bb:2a:0b:38:d8:
5d:80:ee:67:b8:a5:ba:37:ee:99:72:41:e4:65:70:ba:30:f6:
a0:98:47:da:55:98:c1:f8:d8:88:82:b5:49:26:1a:1f:7e:ef:
9f:3a:7a:49:ab:be:dc:2e:50:18:a6:50:1a:15:4c:50:49:96:
2e:7c:ef:da:da:41:25:84:0a:27:3e:9e:85:a0:91:7c:f1:bf:
6f:1a:38:3e:db:66:e1:16:1f:8f:12:b4:70:84:3a:90:dc:a7:
75:24:19:71:56:4f:b8:2f:f7:97:81:14:31:97:a1:33:35:e0:
d5:66:b8:06:a8:f1:5b:33:f5:17:79:40:55:03:ae:45:fd:af:
d8:53:b8:aa:16:04:6f:ae:63:0b:72:17:ce:87:95:e7:20:b5:
3f:57:39:bb:af:f2:07:8e:be:8e:81:d2:34:26:e5:be:ed:f9:
99:ae:2f:54:5d:ca:79:da:63:a8:30:7a:ff:a8:20:58:6a:08:
72:30:ca:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:39 2025 by rpki-client