Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YvUsi7vARf-VzbBnkey5UtBR_gY.roa
File: YvUsi7vARf-VzbBnkey5UtBR_gY.roa (raw, json)
Hash identifier: czPUm1JtIuwjQnA+6Bl75b9MB4VhrDz9RQcahIgkB2A=
Subject key identifier: 62:F5:2C:8B:BB:C0:45:FF:95:CD:B0:67:91:EC:B9:52:D0:51:FE:06
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E5FA2240653FCCBB977A248B00D35DCC8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YvUsi7vARf-VzbBnkey5UtBR_gY.roa
Signing time: Thu 21 Mar 2024 06:10:45 +0000
ROA not before: Thu 21 Mar 2024 06:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5f:a2:24:06:53:fc:cb:b9:77:a2:48:b0:0d:35:dc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 21 06:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62f52c8bbbc045ff95cdb06791ecb952d051fe06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:16:ac:19:23:24:78:34:8f:b0:4d:0d:e3:b3:
27:b7:d6:87:55:da:d0:8f:7e:9e:a7:3b:30:24:24:
9a:e8:e1:d8:c2:e2:c3:bf:46:0c:13:f9:43:5b:9b:
fa:0c:6a:7c:77:b8:2a:04:52:36:56:3d:47:2e:b2:
39:34:c9:16:a7:14:06:0a:71:c4:7c:d0:fb:84:b1:
78:94:25:db:75:7f:10:59:3c:e4:ba:c1:22:59:c8:
68:64:36:eb:ad:61:bb:40:5b:06:f7:68:df:66:1c:
32:18:8c:fc:0a:d9:a9:9e:b4:58:14:75:70:15:9b:
3a:85:77:40:5a:b2:78:72:ca:d4:33:66:f3:2e:41:
c3:5a:01:5b:fb:e8:03:b3:a1:9e:1b:82:c0:26:30:
37:f0:81:84:bb:91:d2:2a:78:03:fa:07:88:c6:3f:
7a:2b:74:72:2f:c3:4e:b1:33:34:52:9c:d1:96:78:
f3:59:b6:07:4a:48:ac:10:cb:dc:8d:ba:3f:59:4d:
43:bf:b0:f1:e8:ce:81:89:35:de:5a:11:fb:b0:ad:
25:0d:dd:2a:ec:1d:9c:89:a6:9f:81:7d:78:e1:97:
fb:c6:da:78:b2:02:9a:89:25:a5:c9:fa:3f:7f:f1:
bb:84:82:a5:27:c3:27:9f:87:66:2e:57:fb:8f:f5:
62:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F5:2C:8B:BB:C0:45:FF:95:CD:B0:67:91:EC:B9:52:D0:51:FE:06
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YvUsi7vARf-VzbBnkey5UtBR_gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:3d:de:fa:69:16:03:95:1a:05:f4:06:b8:b5:b0:88:9b:e6:
b2:70:50:d6:42:b5:fe:ed:1d:6a:d2:72:29:5a:df:e1:32:77:
c2:c9:d3:5d:2d:aa:40:ee:39:81:18:2c:d1:a1:d2:de:6c:35:
8d:49:6f:82:3d:63:ee:39:57:fc:5a:7a:74:48:48:7f:db:d6:
b0:c4:d0:ce:39:31:a7:b4:f1:90:c6:49:dd:2c:83:e3:c4:20:
92:ff:9b:39:9a:3a:49:0d:ba:60:92:41:b5:d5:ab:90:70:2d:
67:e4:c6:77:4f:51:b2:40:e4:8e:af:79:81:ee:99:9e:f3:d9:
1d:af:ae:f3:d9:40:03:f8:39:e5:74:68:66:bf:d8:62:54:8b:
d2:e4:3d:2c:6d:75:a5:08:0c:91:18:bd:2d:83:fc:31:db:fe:
8f:19:f8:98:73:cf:1c:03:16:03:9b:22:22:3c:fb:ea:3f:f5:
f5:a7:3b:5c:fa:44:ba:ba:2a:9b:47:50:65:37:8e:c2:25:c2:
62:64:99:f6:76:7d:14:4b:12:31:df:8e:64:d5:b0:ea:60:cb:
eb:ac:b3:14:09:08:e2:78:b4:59:21:36:96:8b:47:ff:ad:9a:
ba:bd:f3:e8:85:f0:ba:25:03:dc:00:82:f3:54:dc:25:5f:bc:
36:d6:b1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:08:06 2025 by rpki-client