Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bIRRo_ogkxz11HHZy8KRUvVpU3g.roa
File: bIRRo_ogkxz11HHZy8KRUvVpU3g.roa (raw, json)
Hash identifier: quWZ1cyWU7NTHh93hsKhpeufDrf9P/TB9q7QyhAHB5g=
Subject key identifier: 6C:84:51:A3:FA:20:93:1C:F5:D4:71:D9:CB:C2:91:52:F5:69:53:78
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DA8D2C531E4EC1CDCEF967024ABEBDEDA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bIRRo_ogkxz11HHZy8KRUvVpU3g.roa
Signing time: Wed 14 Feb 2024 18:13:21 +0000
ROA not before: Wed 14 Feb 2024 18:13:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a8:d2:c5:31:e4:ec:1c:dc:ef:96:70:24:ab:eb:de:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 14 18:13:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c8451a3fa20931cf5d471d9cbc29152f5695378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f5:34:b4:93:6b:bd:04:cd:f4:95:dc:44:13:
d1:cf:65:8e:0c:81:eb:29:be:55:e5:aa:fa:36:46:
11:53:7a:07:01:72:b2:96:2a:ce:45:c4:8e:b8:b7:
98:4e:de:38:03:2e:db:83:7e:47:8c:3b:f2:3f:6c:
a1:8e:82:dc:64:4a:f7:b1:04:29:6f:89:d3:33:aa:
1f:cf:2f:8b:77:50:77:c0:1a:a0:67:43:c2:87:99:
58:c2:f0:68:c9:38:6c:9f:6b:e3:0c:85:cb:b7:cf:
98:c6:94:bd:ed:33:eb:ef:43:30:d9:b2:20:b0:d2:
7f:fb:65:93:7b:f4:81:97:db:57:3a:85:db:1e:63:
65:e9:02:04:00:7f:83:99:2f:23:14:6d:35:c2:6d:
ff:3d:07:72:a7:3c:61:55:9d:5d:2e:a7:ed:5b:e6:
6f:a5:d7:53:07:62:1f:c7:32:94:3a:6a:95:c5:0a:
f1:95:16:19:08:f9:99:1a:f0:ed:3c:c6:c3:24:27:
67:a1:65:a4:80:2f:b7:0f:6a:d1:4a:f4:88:ea:cb:
19:c4:e3:b8:49:82:a3:f1:4e:52:58:09:f4:34:85:
07:d7:b7:68:58:34:ca:7c:e6:dc:9b:b3:3f:39:66:
30:48:d3:1c:5d:d7:25:a8:cf:70:89:fc:9a:bd:c5:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:84:51:A3:FA:20:93:1C:F5:D4:71:D9:CB:C2:91:52:F5:69:53:78
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bIRRo_ogkxz11HHZy8KRUvVpU3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:6e:0e:5d:b9:3a:cd:e4:c8:48:39:99:6b:87:e2:75:30:3f:
26:ba:94:df:e0:30:d5:08:ab:55:34:0a:9e:da:b9:2f:ad:c4:
a0:4a:c0:e9:1f:94:8c:97:5f:c7:0c:9b:36:eb:cc:57:d2:a3:
74:52:84:76:ec:40:56:9a:34:52:3c:ca:5d:f0:08:1c:ca:eb:
2d:67:bc:1b:c2:29:d4:08:f2:54:8f:95:de:74:12:5d:40:c2:
25:d9:6f:90:2e:6c:0e:38:32:f4:c4:ab:78:b6:01:1e:56:8d:
48:1a:58:aa:1f:95:e4:f0:d3:b7:d4:8d:02:56:e4:a9:61:4b:
d1:ac:8c:6d:cf:92:e3:e5:d1:bb:37:69:01:32:62:22:72:9f:
32:99:ef:f9:0c:d8:40:d6:92:57:c2:cc:e1:44:8a:c8:d6:da:
bb:92:2b:8e:2b:fb:aa:19:14:d6:6a:39:b8:77:9b:6e:4e:e5:
d4:86:7a:53:3c:02:81:e0:4f:84:f4:d3:e8:28:a7:0b:9e:a6:
89:85:65:e6:dc:11:0f:0d:d5:29:9a:d1:f8:14:3b:69:27:5e:
ee:d1:f8:db:0b:69:c7:ff:47:95:2a:1a:27:6a:45:4c:37:cc:
ee:0a:a1:f7:f5:c0:a4:0a:6f:96:bc:15:6d:56:68:06:a9:bb:
a9:33:cd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:00 2025 by rpki-client