Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YTDqqPpAuS0coWDks1KEnZWHrxQ.roa
File: YTDqqPpAuS0coWDks1KEnZWHrxQ.roa (raw, json)
Hash identifier: 8mgImmWdKqE66mrOxOXPBAupEOBu1aflpb9dgzZNdmg=
Subject key identifier: 61:30:EA:A8:FA:40:B9:2D:1C:A1:60:E4:B3:52:84:9D:95:87:AF:14
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E867345549670F40F988B9BC49C0781C3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YTDqqPpAuS0coWDks1KEnZWHrxQ.roa
Signing time: Thu 28 Mar 2024 19:04:45 +0000
ROA not before: Thu 28 Mar 2024 19:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
2001:67c:64:ffff:0:18e:8672:d29e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:86:73:45:54:96:70:f4:0f:98:8b:9b:c4:9c:07:81:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 28 19:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6130eaa8fa40b92d1ca160e4b352849d9587af14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:84:ab:e7:f6:11:2a:93:d4:6e:06:22:53:83:
45:bd:4f:9a:f0:e4:53:c1:92:ee:a3:72:ce:a7:e5:
a6:d9:ff:17:d3:6f:1a:69:6a:a9:79:92:53:6b:f9:
a1:61:d3:df:aa:8c:f8:ec:14:20:9f:1e:14:38:2e:
86:55:da:90:53:4a:5b:97:10:39:70:f1:e4:2a:c9:
40:2e:09:f3:6c:11:7c:51:f1:4d:7d:58:4f:4a:29:
05:41:fb:15:e4:4f:84:43:a7:ad:de:14:56:ac:2e:
b6:a7:23:84:35:8a:d4:d2:3f:31:5b:7c:6f:5b:e3:
b4:2b:40:81:64:3f:7c:6b:41:89:a4:50:6a:f4:d3:
0f:8d:2b:89:7b:7c:0c:29:bc:26:e5:99:16:9e:15:
ea:4a:b0:64:24:75:e2:8a:e6:0f:b3:a2:59:ff:50:
80:cc:3b:31:09:d5:8b:62:33:6f:1f:4f:a7:94:13:
0f:e7:78:94:96:10:ec:57:d9:2f:da:9a:11:13:9c:
8d:38:93:14:98:60:d3:44:02:7f:01:99:33:38:b0:
84:1f:ba:04:fd:33:89:b2:d6:22:41:42:bc:8a:ea:
e0:d5:3b:4c:69:fd:88:fb:53:93:3f:4d:df:4c:5c:
60:33:18:6e:87:90:2e:95:f6:1e:b1:d2:34:e5:e7:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:30:EA:A8:FA:40:B9:2D:1C:A1:60:E4:B3:52:84:9D:95:87:AF:14
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YTDqqPpAuS0coWDks1KEnZWHrxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:33:0c:0f:bd:e8:e0:44:ae:64:9e:6c:02:f7:2b:ab:dc:75:
87:0c:48:56:3c:53:d3:ce:b4:1e:e8:62:e6:7a:37:bf:7f:ce:
0b:c2:c9:db:72:2b:07:e6:df:65:6d:22:a4:a0:d2:e6:b3:bb:
d7:b2:bc:b1:43:eb:0a:0d:1c:23:b1:6f:e8:9c:1e:eb:95:ee:
e6:e6:a7:44:bd:5f:78:77:a2:ef:f4:87:f3:34:43:73:8c:8d:
f1:a6:e4:54:6a:87:77:75:ab:10:22:0e:76:2e:27:40:41:22:
c7:1e:5b:fc:d3:80:5c:19:44:8c:4c:9d:6e:d2:e6:06:54:8b:
16:cf:81:9c:a8:b7:a7:28:a8:ed:cd:0c:c0:ef:df:5a:90:77:
7c:60:ae:6f:68:05:7f:f5:04:ad:c9:fa:bb:4f:46:26:06:68:
0f:dd:9a:8a:ce:52:f0:f2:7f:02:1d:41:52:70:ab:53:97:4e:
29:9e:4b:00:3f:b2:ae:2b:37:83:01:82:36:63:78:4f:44:2f:
5c:ef:f2:0e:d0:b2:e6:32:e1:be:45:32:f1:f3:9c:31:53:a5:
18:31:7d:08:1f:da:70:94:5a:15:fe:64:71:7f:6c:60:9f:65:
22:27:32:3e:5b:87:78:02:f8:72:51:f2:5d:28:47:ac:07:6d:
d2:4c:c2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:32:01 2025 by rpki-client