Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_D3CsBuF6pGcGmJOmJdDVcgK6wA.roa
File: _D3CsBuF6pGcGmJOmJdDVcgK6wA.roa (raw, json)
Hash identifier: GGtq2eKQ8zmRGfCyKMrf40OsfPdSZNhiLswlseYOZ9Y=
Subject key identifier: FC:3D:C2:B0:1B:85:EA:91:9C:1A:62:4E:98:97:43:55:C8:0A:EB:00
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DF8DCAD8052EF93D972F967F9A7024F01
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_D3CsBuF6pGcGmJOmJdDVcgK6wA.roa
Signing time: Fri 01 Mar 2024 07:13:48 +0000
ROA not before: Fri 01 Mar 2024 07:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f8:dc:ad:80:52:ef:93:d9:72:f9:67:f9:a7:02:4f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 1 07:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc3dc2b01b85ea919c1a624e98974355c80aeb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:33:43:f3:b2:89:26:86:1a:84:24:53:49:
43:11:ed:8e:88:e4:45:cb:3b:62:cb:90:94:ef:97:
d2:15:df:5f:d0:07:a6:5f:ff:a4:eb:2c:32:62:68:
64:c3:ed:aa:2d:78:52:81:43:97:14:6e:7b:78:b8:
c7:7e:8d:7a:3c:81:23:33:ef:7c:44:9e:f9:e6:ee:
13:72:f9:93:07:01:7c:42:10:e1:84:28:ea:04:6f:
3d:5b:f1:e1:92:cd:c7:ec:dc:20:00:51:0c:53:19:
fd:d2:50:90:c4:65:b3:65:78:e9:7a:0a:0c:ab:c0:
c3:15:55:fb:e3:c4:b4:7f:3c:52:e5:08:6d:ee:ab:
49:94:73:55:ac:a4:36:af:8a:b3:bc:32:54:44:ae:
52:36:a8:5b:b4:c9:03:dc:af:b5:50:52:e2:2f:a2:
ea:fa:87:fb:dc:9f:f1:8e:50:11:e9:8b:4c:ec:36:
84:63:9b:74:ee:dd:83:10:ed:a5:de:ef:c9:24:77:
11:df:54:f7:da:62:50:3d:6f:95:55:fe:67:3a:8e:
d6:12:c0:8f:cb:78:88:9c:b3:9c:da:ed:06:e4:a7:
13:75:94:d5:b1:e2:0a:ec:89:8a:0b:e4:7c:07:18:
1c:10:79:e6:7c:5b:c3:4b:f3:91:0f:16:7b:15:74:
29:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3D:C2:B0:1B:85:EA:91:9C:1A:62:4E:98:97:43:55:C8:0A:EB:00
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_D3CsBuF6pGcGmJOmJdDVcgK6wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:2b:4e:da:5b:0d:00:2f:12:62:99:6a:57:2a:66:0f:39:a7:
91:90:0b:66:73:58:ae:a5:2c:d3:6c:77:58:24:32:92:40:c8:
f2:d5:71:31:28:f5:b0:8e:08:5a:58:2a:b6:a0:25:51:8b:6e:
68:30:ed:77:41:05:7f:25:c4:c2:87:b9:36:d6:7b:cc:ba:22:
15:6d:de:4c:38:75:9f:f7:5e:02:84:98:ee:24:4c:9f:5c:72:
68:25:20:67:3f:1f:fa:d2:6e:1f:db:f3:0f:55:24:df:86:6b:
f0:7c:e0:32:f6:43:7f:9c:23:bb:76:1d:c9:a6:69:97:9d:76:
ca:ba:cd:33:ee:c2:6e:9b:6a:4e:4f:2f:a9:c9:73:d5:da:3c:
0e:b3:2e:60:a2:b6:f5:76:0c:17:5c:a4:0b:fe:49:5c:20:94:
c6:27:bd:86:3b:d8:1f:c5:99:d5:31:7b:b3:16:07:3c:da:70:
2e:b2:29:13:2c:5c:10:cf:73:17:b0:68:00:7c:b8:69:68:8f:
71:a3:79:3d:7a:75:b8:f8:71:67:cc:87:11:50:78:94:f6:37:
e3:b8:65:fd:28:29:c8:26:b1:c1:63:f6:bd:68:46:c8:2a:85:
b3:01:8e:95:11:27:f7:43:66:13:b1:6c:43:f1:02:26:56:d8:
db:f8:da:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:25:21 2025 by rpki-client