Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aSVHSbhvUvNSnueQ0WQGyUlNSko.roa
File: aSVHSbhvUvNSnueQ0WQGyUlNSko.roa (raw, json)
Hash identifier: xfQFpeRyzgGGPpqNdJPvX8+J6vDhGb+Od486BgD7ta0=
Subject key identifier: 69:25:47:49:B8:6F:52:F3:52:9E:E7:90:D1:64:06:C9:49:4D:4A:4A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DE70D595F981AAD55485D841A4005E7C3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aSVHSbhvUvNSnueQ0WQGyUlNSko.roa
Signing time: Mon 26 Feb 2024 20:13:48 +0000
ROA not before: Mon 26 Feb 2024 20:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e7:0d:59:5f:98:1a:ad:55:48:5d:84:1a:40:05:e7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 26 20:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69254749b86f52f3529ee790d16406c9494d4a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:90:e3:f1:bb:a2:31:ad:c0:b9:c2:85:18:5a:
60:93:66:80:96:a6:e3:c0:41:73:e9:fc:d5:e8:9f:
7e:da:07:fa:3e:70:18:7b:18:00:4c:86:0e:5b:98:
90:55:9d:a3:02:cc:53:91:73:ba:a6:71:a3:2a:13:
32:8f:2d:61:28:84:75:05:fc:ab:f2:07:fd:ec:b1:
ba:05:5f:4e:7c:cd:37:a8:e7:eb:7b:72:cf:5b:60:
b2:36:23:65:88:ab:88:62:9d:57:b2:7f:4c:2e:cf:
09:eb:3a:35:ee:7f:fb:e8:40:ba:bf:04:76:ed:d1:
ef:ee:bf:6d:fe:3b:de:9a:34:4c:1e:0d:0a:be:ff:
3c:a0:d3:86:cb:29:14:9d:d8:93:98:cf:72:f5:77:
14:1e:b0:66:83:b8:8d:32:66:3d:04:59:5c:0d:6b:
4c:cd:b4:4d:82:52:85:59:fa:93:3c:8e:66:c8:4f:
99:02:32:a3:ec:4d:9e:33:85:df:f3:6e:21:2f:6f:
16:52:6b:4d:82:ca:36:9b:df:91:d2:98:17:93:36:
8a:bf:3c:99:31:5e:ed:bb:1f:47:00:53:8a:dd:0d:
4d:33:0e:aa:23:07:9f:86:31:a8:eb:d4:43:bc:b2:
67:53:e7:31:bf:b1:17:09:12:c6:59:d3:ec:2a:18:
66:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:25:47:49:B8:6F:52:F3:52:9E:E7:90:D1:64:06:C9:49:4D:4A:4A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aSVHSbhvUvNSnueQ0WQGyUlNSko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:b6:e7:51:13:0f:d9:df:c8:01:dd:ef:b6:02:bd:f2:7f:39:
ea:c4:7b:3e:c1:05:ac:11:1a:0d:3e:25:c1:12:ab:e9:5e:ec:
4e:14:e2:85:5a:f4:e0:81:30:d2:be:92:e9:bd:9f:fe:d6:38:
da:62:95:f3:14:ae:fa:65:91:16:a4:09:77:7f:2f:57:f5:e3:
8f:d5:1c:b9:ac:34:16:2d:d5:19:27:d3:26:13:c6:c4:38:d7:
a2:97:11:27:76:1d:6d:98:99:16:d4:c3:98:fb:60:d2:21:72:
28:eb:33:8a:65:4d:18:cd:b5:d3:78:fe:cb:c1:46:88:48:ae:
08:c9:9e:fe:8a:16:79:d8:1f:23:30:3d:bd:14:15:a5:c8:63:
2b:4d:cb:a5:a6:b2:d9:fc:58:38:91:c7:8e:56:2f:1f:b8:4e:
db:f0:72:26:47:99:9a:31:c1:c2:45:f1:e0:7e:6f:7c:1c:05:
cd:67:6d:e1:d7:54:4e:e2:cc:98:ef:64:52:61:34:3a:f5:be:
81:4e:ce:b9:76:bc:8f:bd:a6:57:4b:ce:ee:1a:45:1f:d7:bf:
4e:ca:57:f2:f9:da:73:78:d1:63:bb:01:fb:a2:08:ad:e3:05:
20:79:88:49:4e:f7:dc:1d:ab:37:9b:8c:86:cd:a7:1b:19:40:
92:4f:01:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:18:33 2025 by rpki-client