Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/b1-FYK5QheLYUVWTh1Ur0fo28Cg.roa
File: b1-FYK5QheLYUVWTh1Ur0fo28Cg.roa (raw, json)
Hash identifier: 6MG+fqpxIgLxshFUa/91iNQHJRYI7JQ98bgAHJvOtss=
Subject key identifier: 6F:5F:85:60:AE:50:85:E2:D8:51:55:93:87:55:2B:D1:FA:36:F0:28
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB508BE628FAD673FB8A9FF2EF93DA69D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/b1-FYK5QheLYUVWTh1Ur0fo28Cg.roa
Signing time: Fri 29 Dec 2023 10:04:58 +0000
ROA not before: Fri 29 Dec 2023 10:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:b508:1e0a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b5:08:be:62:8f:ad:67:3f:b8:a9:ff:2e:f9:3d:a6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 29 10:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f5f8560ae5085e2d851559387552bd1fa36f028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:f8:1f:ba:53:3e:9a:21:1b:3c:c7:d6:1d:
4b:2d:39:29:59:bb:bb:fa:cd:28:57:0f:e7:f1:8b:
8f:9b:71:8b:10:64:17:6f:a8:e3:d6:dd:dc:b5:a7:
1a:d8:07:a4:e5:dc:cd:2d:5e:2a:30:0d:65:b9:a0:
71:dd:0a:c8:40:70:99:dd:8b:f8:a7:70:e9:5d:c5:
21:09:5a:58:ab:aa:7f:35:77:a1:e9:55:20:44:ab:
c5:3e:f7:8c:66:c7:90:e7:1f:be:d9:f7:55:e3:b4:
41:f3:d4:72:e1:de:ed:7d:d5:b8:a6:35:90:0a:f6:
0b:46:3f:1e:2c:63:81:b0:05:c9:08:50:32:2d:77:
62:16:69:ac:51:dd:19:c3:ad:fe:29:76:d5:23:45:
05:a3:f3:7a:81:15:3f:8e:f9:02:30:91:03:8e:9f:
66:f8:0e:75:58:ec:6e:00:c2:0e:91:92:97:a2:16:
51:31:5a:79:a9:4f:a2:58:6a:ed:38:f3:4f:f9:28:
c2:a8:10:09:d3:b0:49:dc:05:13:ab:41:70:44:b9:
01:e3:41:e4:1f:1e:d1:56:98:dd:5d:cb:2d:ef:f3:
7f:28:ae:8d:e0:1e:5d:30:a3:d6:a1:31:1b:e4:c3:
ae:56:a7:a1:d7:84:26:bb:b6:9d:18:de:7d:a0:43:
65:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5F:85:60:AE:50:85:E2:D8:51:55:93:87:55:2B:D1:FA:36:F0:28
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/b1-FYK5QheLYUVWTh1Ur0fo28Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:3c:b4:b8:d1:a8:0b:9a:54:4e:dc:01:7e:06:9f:2d:ef:25:
45:f6:dd:47:af:e6:ab:e4:eb:ed:67:fc:f2:4f:93:8f:e0:a2:
ab:48:35:37:76:72:79:4d:ff:7b:bb:4d:12:ec:fc:e2:cc:c9:
9e:1a:22:03:d3:69:10:f4:3a:34:45:57:ed:58:53:98:5a:fa:
18:ec:52:40:91:98:5e:dd:60:92:9f:4f:5c:94:3a:17:8a:8e:
06:c3:aa:1f:67:b8:51:2f:e8:8e:11:92:cd:d3:f7:73:29:fd:
b6:1d:f0:b9:0e:41:40:f1:40:54:a3:93:52:6a:ab:3f:6b:d3:
75:7a:b4:71:5d:55:a8:3b:a7:85:32:8f:a9:3d:8d:2a:52:0f:
d3:bf:c2:0a:54:8e:4a:17:31:ad:3c:6f:2f:07:06:52:3f:88:
03:b0:53:85:29:b4:b0:75:aa:46:13:11:35:f3:d1:f6:2e:95:
af:60:b5:05:b3:41:55:33:2f:66:bd:a0:ec:47:46:9b:32:69:
5c:9d:ad:00:ac:79:30:23:d5:5e:3d:78:d5:9a:5e:7a:b4:08:
ad:a2:e5:69:5f:1a:b1:e9:05:64:04:bd:29:32:e1:07:64:8e:
50:52:82:b2:d6:35:de:91:cc:1e:c6:62:06:94:de:98:ab:52:
17:08:87:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:34:21 2025 by rpki-client