Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/a5BTgIITcO8XmZ17GfEVK0ndzBc.roa
File: a5BTgIITcO8XmZ17GfEVK0ndzBc.roa (raw, json)
Hash identifier: 4dY/Iv9o8ICFTDJDQ6B3dNVUcmSykp5B+OHBya0fI20=
Subject key identifier: 6B:90:53:80:82:13:70:EF:17:99:9D:7B:19:F1:15:2B:49:DD:CC:17
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EC2C6319A581B7DD055C112A8C39CEE85
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/a5BTgIITcO8XmZ17GfEVK0ndzBc.roa
Signing time: Tue 09 Apr 2024 12:12:32 +0000
ROA not before: Tue 09 Apr 2024 12:12:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:c6:31:9a:58:1b:7d:d0:55:c1:12:a8:c3:9c:ee:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 9 12:12:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b905380821370ef17999d7b19f1152b49ddcc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:5a:86:9a:b3:f5:6b:80:9e:3f:fd:08:d2:
2a:8a:44:1b:6f:5d:79:e1:93:c5:41:ad:74:b0:a4:
67:88:ff:46:e4:87:0a:ed:7c:cd:24:bc:a6:71:fe:
41:f1:b3:e2:85:12:c7:94:c3:9f:68:5b:07:81:fa:
b9:0f:8d:5f:e2:99:2a:87:dc:53:75:63:fb:ca:7c:
48:e0:98:5f:12:07:8f:65:a9:2d:99:d4:5e:1d:36:
f4:ea:c3:b8:db:9e:e1:0b:b0:1c:28:4b:cc:15:78:
ad:de:63:5e:6e:2d:dc:91:c8:08:71:e2:0a:18:d9:
e1:51:2b:9b:67:86:c6:a9:fc:8b:02:5b:88:07:65:
2d:b7:0b:c5:83:38:1e:d6:83:36:33:f3:f5:31:68:
e8:c9:e3:8b:0a:98:15:af:20:1b:70:5a:20:bd:9c:
34:21:9e:98:d8:eb:1a:8a:05:e5:0f:bb:53:e7:f3:
0d:eb:aa:c9:04:48:6b:82:69:4c:3a:37:3f:1b:d3:
76:d2:a0:c7:5f:f7:ed:10:53:9a:fb:22:38:7b:d5:
c4:fd:9c:4d:11:7d:de:29:b7:ab:dc:a3:b5:d2:41:
32:e5:92:5c:13:1c:5c:d5:90:76:e2:b6:8c:2b:0e:
0c:99:7d:cf:32:b8:a6:b2:5b:e5:b4:96:f6:fa:53:
06:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:90:53:80:82:13:70:EF:17:99:9D:7B:19:F1:15:2B:49:DD:CC:17
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/a5BTgIITcO8XmZ17GfEVK0ndzBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:42:75:58:c5:61:e9:bd:5d:0e:7a:33:fb:7c:63:a6:4f:5f:
c2:4b:a9:b0:18:bc:18:72:0a:f2:80:1a:74:4b:08:83:76:e9:
43:fc:a5:6a:a6:22:0e:77:90:1e:47:d2:b2:f9:8a:eb:e6:7d:
45:f1:75:ae:31:f8:6f:09:d5:b6:9c:40:08:fe:8b:2b:9f:cf:
5b:27:f9:42:dc:ec:7e:d7:1c:74:f0:de:e7:60:d5:cd:24:14:
78:f4:35:2c:55:0a:69:d5:a3:0e:4e:23:76:b3:f7:d2:95:1f:
63:35:1c:b3:9e:f8:56:92:70:4e:eb:1a:2c:2e:d8:8a:01:7b:
e7:f6:76:13:0a:86:a7:c4:ac:2b:14:43:06:ef:5b:ab:70:ea:
e6:fb:9c:51:bc:87:4a:3f:53:4b:50:80:c8:fa:4f:26:d3:64:
7d:74:1b:a3:03:87:bc:51:4e:85:45:64:36:01:92:00:2a:de:
57:3d:6f:a3:b1:33:97:7b:fc:80:d3:6d:60:e0:9f:ee:85:2d:
f4:cb:52:6c:72:70:eb:f3:32:56:f2:ca:ef:bf:f9:04:cc:51:
8e:30:7a:31:e5:e2:59:0c:e6:0d:1a:27:b7:0c:9e:88:b7:86:
75:da:fa:a7:4b:df:ee:fd:12:68:a9:9a:19:57:f3:c5:eb:3c:
31:3d:7f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:02 2025 by rpki-client