Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aoogobmghm6R7rbxdJGaqQembIk.roa
File: aoogobmghm6R7rbxdJGaqQembIk.roa (raw, json)
Hash identifier: RcgGhW8sOgIlAaQHAWlB/ejAbV1tQNhmaOlPi6Vtay0=
Subject key identifier: 6A:8A:20:A1:B9:A0:86:6E:91:EE:B6:F1:74:91:9A:A9:07:A6:6C:89
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E1F7DA046CFFB092336BE365CE58B4367
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aoogobmghm6R7rbxdJGaqQembIk.roa
Signing time: Fri 08 Mar 2024 19:15:10 +0000
ROA not before: Fri 08 Mar 2024 19:15:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1f:7d:a0:46:cf:fb:09:23:36:be:36:5c:e5:8b:43:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 8 19:15:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a8a20a1b9a0866e91eeb6f174919aa907a66c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2c:9a:b4:c3:76:07:46:cb:42:78:b2:9e:51:
1c:c3:48:c7:f1:7f:0c:7c:47:a5:8b:8f:02:84:5e:
c0:e8:e1:36:4b:46:5c:0d:1a:66:7a:58:f7:e7:33:
f8:a4:ea:d3:d2:3b:e0:5b:79:4e:82:d4:66:4d:cd:
c4:20:74:09:09:3c:b7:07:2e:42:a1:75:23:43:3c:
09:7c:46:1e:56:df:36:37:c4:a7:6a:32:c7:72:3b:
0e:8a:61:56:ca:bb:41:08:fe:d0:f8:d6:1b:62:b9:
69:bf:4e:b1:ea:20:c7:00:33:16:a9:dd:89:c6:06:
4e:c2:40:1c:58:f3:40:3e:69:58:2c:b9:d7:97:a3:
ad:b6:3b:98:44:47:0f:c0:20:35:59:66:c7:17:cf:
fe:e1:ec:29:8d:e6:6b:67:45:80:ee:67:20:b0:61:
54:44:7f:1a:54:c0:0e:24:09:ae:a8:00:b4:73:77:
f7:a4:f4:e3:59:8c:77:4e:e3:8d:19:1b:02:d9:4b:
07:4c:ad:36:83:2a:68:7a:f8:d9:c2:23:5c:13:b8:
13:49:07:7e:bd:75:fa:f6:75:c7:f6:be:68:9c:b5:
91:4d:28:09:76:dc:c7:9a:67:f0:09:84:6a:c6:8d:
73:2f:56:1d:80:20:79:2e:26:1d:f5:4c:e3:cd:39:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8A:20:A1:B9:A0:86:6E:91:EE:B6:F1:74:91:9A:A9:07:A6:6C:89
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aoogobmghm6R7rbxdJGaqQembIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:fb:85:40:50:12:9a:00:67:35:f7:ae:41:4e:dc:cb:01:df:
fc:db:1d:4f:d9:a2:1c:de:76:64:19:f6:a7:01:b1:2c:88:78:
de:89:80:6a:58:56:e8:e5:bc:25:ed:b8:c9:1e:77:42:3f:55:
35:71:44:71:fd:c5:50:5e:55:b7:0d:24:c4:cb:b4:a8:cf:f2:
cc:36:94:06:8d:e3:95:fc:fc:47:dc:9b:0b:5b:bb:6b:6f:61:
e1:e7:66:f5:b1:b5:8e:74:cb:2b:e0:24:4a:c2:aa:58:b7:87:
2a:49:f3:bf:f3:ae:3d:d3:3b:f3:dc:42:28:2a:c0:9d:7e:aa:
8f:27:98:d0:72:8a:c2:a6:05:77:ed:99:a5:b3:65:44:ed:f5:
0c:02:40:5f:85:e4:64:3b:59:7b:1e:e2:1a:95:d6:68:fc:67:
46:61:b7:30:2c:ab:59:86:a8:83:a8:4e:aa:04:13:16:f6:07:
d1:fb:94:ee:66:27:df:8d:59:e1:f6:83:49:67:cb:59:45:ee:
ef:5e:87:66:26:10:b9:42:49:5e:15:b5:cc:ae:94:ae:d8:86:
76:25:4d:b8:b3:4b:8c:69:47:cd:7d:41:7d:21:92:a4:fe:02:
a3:c8:03:c4:1d:60:ab:95:1d:06:a6:c9:55:99:90:14:8f:2b:
5d:c8:21:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:40 2025 by rpki-client