Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_XRl10WnjpG7xU0NHjLQDE7vEsk.roa
File: _XRl10WnjpG7xU0NHjLQDE7vEsk.roa (raw, json)
Hash identifier: KX83fj2+yTWEqB+oiaodew9ojEV5Wi/ilI3wsM5QEro=
Subject key identifier: FD:74:65:D7:45:A7:8E:91:BB:C5:4D:0D:1E:32:D0:0C:4E:EF:12:C9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E33A526421EFBFC91B4C6B6A66A598894
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_XRl10WnjpG7xU0NHjLQDE7vEsk.roa
Signing time: Tue 12 Mar 2024 17:10:45 +0000
ROA not before: Tue 12 Mar 2024 17:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:33:a5:26:42:1e:fb:fc:91:b4:c6:b6:a6:6a:59:88:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 12 17:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd7465d745a78e91bbc54d0d1e32d00c4eef12c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:c9:67:34:aa:b8:20:c0:af:6b:89:d4:85:
b3:65:13:d9:a0:03:8e:50:22:55:78:71:85:7f:bf:
d6:81:50:dc:49:e9:3c:ec:17:86:ae:96:63:23:92:
0e:8e:99:0e:25:3d:91:8c:a2:d0:71:f0:ff:8d:2d:
d9:a5:a8:d4:43:bc:1c:ba:9f:67:af:57:c8:0e:6b:
e1:a5:d4:c6:98:2d:00:e5:a5:cb:3c:ef:81:d9:23:
77:92:2b:b8:78:36:fa:9f:de:ca:c3:13:04:e8:71:
39:80:40:25:ad:21:0f:99:25:64:34:25:07:e0:1f:
4f:91:75:bb:ae:4b:92:2e:d8:5e:b3:62:3f:7a:d6:
76:7a:d1:a2:be:28:9d:e2:26:88:2f:76:6f:c9:9b:
fd:13:b2:80:06:20:8f:92:78:9c:1b:fb:7f:cd:f7:
2a:62:6e:35:6c:77:2d:89:ee:f4:35:f2:a3:e7:e5:
9b:9c:2c:18:e5:c5:17:28:ab:3a:85:54:52:9a:65:
da:b3:72:9b:43:4b:75:cd:f4:70:b6:1a:4d:0c:6b:
26:a4:7e:fa:2e:dd:e0:bb:65:9b:1b:18:87:6a:3d:
a3:14:a4:7f:9e:27:3f:26:60:ac:a4:f6:e5:e7:54:
70:0d:29:12:60:e3:34:df:8a:f5:ab:9e:de:74:17:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:74:65:D7:45:A7:8E:91:BB:C5:4D:0D:1E:32:D0:0C:4E:EF:12:C9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_XRl10WnjpG7xU0NHjLQDE7vEsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:68:e0:d0:2b:ea:b0:3b:7e:26:12:41:17:11:52:26:66:6d:
b4:7f:aa:92:9b:a5:2b:9f:01:c6:08:d4:a6:34:9b:d0:cd:2d:
f9:6b:da:c2:49:c8:99:32:1d:85:b1:49:37:fb:72:e1:5c:8e:
74:44:d5:a0:92:99:66:77:8f:0d:e5:f1:c5:9c:e4:d4:26:ad:
11:6d:4b:41:cb:d5:95:79:f5:22:1b:e9:ba:c3:74:14:a3:d1:
47:05:04:db:cf:96:ec:31:bc:a5:26:70:ac:e3:7e:8e:df:75:
61:0f:a8:b3:ce:7f:28:6e:51:36:4d:ac:c1:49:2e:0c:21:09:
0f:49:2e:d5:0a:dc:1e:c2:34:a8:20:d6:10:55:ea:07:38:79:
2e:02:e6:88:a7:f9:c6:f0:71:df:23:05:93:aa:9f:dc:85:86:
f3:19:f2:f2:24:cf:64:78:b0:b1:88:28:31:c4:f9:42:5d:9b:
84:aa:e5:a7:ea:c7:24:9d:5e:c0:aa:0f:6e:9d:ed:d9:76:13:
a6:f4:33:5c:14:59:62:99:c1:3e:13:04:9d:0f:62:3c:b5:14:
a8:ae:a1:fe:68:4c:07:24:e1:d1:92:fe:8a:fd:5c:42:a8:f7:
9a:67:80:6e:36:c9:04:b7:e0:42:ae:e5:91:9a:6f:69:54:7d:
08:4e:04:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:26:11 2025 by rpki-client