Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aX7nO0kK3eyOyR45JGN4HN2YTaM.roa
File: aX7nO0kK3eyOyR45JGN4HN2YTaM.roa (raw, json)
Hash identifier: gYJmON9FasPvOyO9+vjYDN4f8JIJM7GxnPyuD43xbfI=
Subject key identifier: 69:7E:E7:3B:49:0A:DD:EC:8E:C9:1E:39:24:63:78:1C:DD:98:4D:A3
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DB1D5E683BC323C1470EA0F5CC119DE47
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aX7nO0kK3eyOyR45JGN4HN2YTaM.roa
Signing time: Fri 16 Feb 2024 12:13:21 +0000
ROA not before: Fri 16 Feb 2024 12:13:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b1:d5:e6:83:bc:32:3c:14:70:ea:0f:5c:c1:19:de:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 16 12:13:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=697ee73b490addec8ec91e392463781cdd984da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:a1:c5:a0:e2:0d:b8:58:c6:ad:a7:ef:6b:
79:85:f3:a8:d3:78:9a:04:75:9e:6b:ff:b0:26:8a:
49:e3:ed:86:bc:de:ef:d9:10:d5:c1:8f:a7:96:11:
66:88:16:6f:9b:76:fa:6f:89:ed:a4:cc:4c:c0:59:
84:fc:cc:49:37:2d:39:00:1f:e1:6c:5e:37:65:e3:
5a:8c:7a:3b:9a:33:18:65:d9:ca:aa:d4:9b:06:65:
88:16:8d:63:b7:93:c0:06:2a:77:6d:0d:de:32:8c:
8c:b3:4e:8d:6c:29:12:91:27:1e:8f:1a:e8:f3:95:
60:47:1d:da:54:ca:ff:40:95:3d:92:af:a1:fd:c1:
82:a2:dd:35:28:43:fc:26:54:64:50:e0:70:97:c1:
99:21:16:84:ed:5b:45:d9:51:5d:db:ce:22:31:2d:
f1:97:49:e3:88:de:c1:90:9f:3c:26:0f:dc:9e:a5:
d0:dd:34:7f:f2:2a:d6:0a:cc:19:e9:7f:2a:ae:63:
93:82:15:82:8e:1f:ef:65:5a:69:b7:e9:c3:b5:67:
b6:db:19:33:66:26:76:fc:54:6f:75:78:09:09:d9:
e6:68:15:44:31:99:b9:ba:05:ce:4e:3e:7a:fe:42:
0a:80:84:97:32:7f:c1:18:1c:0e:d1:2c:ae:7c:28:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7E:E7:3B:49:0A:DD:EC:8E:C9:1E:39:24:63:78:1C:DD:98:4D:A3
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aX7nO0kK3eyOyR45JGN4HN2YTaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:c6:3a:f1:f4:9d:e9:2c:1c:fe:40:5a:65:a3:1a:26:b2:1e:
8f:e2:97:58:fc:56:62:87:be:73:ff:42:a3:fd:c5:41:5a:b5:
35:15:d9:ca:b5:42:45:65:77:2f:c0:de:7e:27:66:51:04:bd:
39:89:ba:4a:75:fd:ba:7e:f8:e6:50:ec:eb:32:ef:ec:b4:19:
57:98:43:69:67:76:8f:5b:0f:fc:f5:29:25:b2:29:53:6a:04:
5f:54:f5:0f:07:e6:b2:2c:24:0d:3f:f2:69:ac:88:4c:22:1e:
14:b9:b0:83:c6:65:c3:a5:02:38:52:42:d1:3c:06:ee:89:76:
6b:ad:c9:f9:da:be:43:36:60:80:6d:a9:33:32:ab:8a:04:97:
16:a7:74:9c:d5:56:77:fe:30:fe:21:25:cc:47:b8:2e:5c:81:
7c:cd:43:f9:2b:a4:25:6c:58:a0:94:d5:df:0d:c9:b2:26:ef:
b2:3c:6b:16:d3:a4:cc:e0:9d:64:71:86:51:30:72:b9:3e:a1:
d7:25:31:ce:15:37:48:8c:ac:0d:9d:05:81:d9:15:45:1e:23:
9b:51:5f:5d:6e:9a:a2:65:a0:45:89:8e:5d:4b:1e:ef:6a:42:
9c:23:56:37:93:b6:53:20:b5:8d:9d:2e:07:6d:db:42:fc:f1:
58:f1:bc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:00:09 2025 by rpki-client