Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bLdCyj8A3-q9wimSkDMYjlTtCRg.roa
File: bLdCyj8A3-q9wimSkDMYjlTtCRg.roa (raw, json)
Hash identifier: LT/fLBioF1PQSJ/b0xHMQ5uSnVkTisO/qIfu4Dw8sdA=
Subject key identifier: 6C:B7:42:CA:3F:00:DF:EA:BD:C2:29:92:90:33:18:8E:54:ED:09:18
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E9EB71FC7436730233970D87490839481
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bLdCyj8A3-q9wimSkDMYjlTtCRg.roa
Signing time: Tue 02 Apr 2024 12:09:45 +0000
ROA not before: Tue 02 Apr 2024 12:09:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:b7:1f:c7:43:67:30:23:39:70:d8:74:90:83:94:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 2 12:09:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cb742ca3f00dfeabdc229929033188e54ed0918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:41:55:fa:dd:e0:0c:6f:13:f1:67:fc:a4:
20:a4:c2:36:20:e3:1f:9f:2f:5e:2b:59:df:21:a0:
e7:e7:8a:80:37:17:a9:d5:80:26:e3:ac:9b:7d:e0:
12:eb:47:c7:75:52:cd:9d:42:cc:3c:db:77:12:1b:
31:9d:4b:ab:c7:f4:9b:76:2d:ef:45:52:9f:5d:14:
11:7f:44:cc:16:b6:43:93:e2:f6:3e:fa:5b:02:5f:
e0:a5:63:23:b2:67:a7:ee:34:c1:23:d4:46:fe:39:
97:34:c2:78:f3:57:7b:3a:97:11:f6:80:5b:91:dc:
c7:50:49:f4:5f:99:7e:6a:85:63:d1:4f:6e:ed:cd:
90:8e:8d:bb:75:a1:c2:f0:49:21:76:0d:ca:bc:9e:
dd:8d:27:41:29:d9:ad:57:83:c3:98:e3:26:bc:55:
a4:05:79:51:89:41:97:16:c9:63:c9:db:29:e0:1b:
6f:99:e4:b5:f5:83:dd:c9:e4:4d:fe:6b:44:ea:75:
d5:47:93:1b:ad:95:19:74:02:eb:2a:70:0f:95:53:
4b:4f:a7:94:59:bc:05:48:46:98:5a:d1:ac:f9:d0:
b6:6f:16:70:2f:21:5c:b0:f3:ed:ac:15:3b:57:98:
67:0f:95:7d:6c:1e:cb:15:8d:68:45:ff:2e:6c:4d:
aa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B7:42:CA:3F:00:DF:EA:BD:C2:29:92:90:33:18:8E:54:ED:09:18
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bLdCyj8A3-q9wimSkDMYjlTtCRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:7e:9d:33:c6:f6:ed:f2:f1:89:f0:83:60:ed:84:f8:38:1f:
9e:a6:23:ba:38:0e:b6:d2:48:9a:2b:22:2c:ea:16:49:cb:d3:
ff:26:44:e4:a4:21:13:24:dc:1a:9b:00:35:e2:ea:90:76:98:
9e:5c:94:7e:a4:3a:72:4a:67:b5:7b:e0:ed:e4:36:d8:af:e7:
3d:6a:38:54:a4:29:bb:61:55:a2:98:6f:d0:15:b3:06:7c:35:
4f:3c:55:a9:8f:24:3a:bc:fe:f5:b1:6b:c6:86:b5:40:b2:64:
3d:c7:86:ee:e6:e6:13:f0:3a:87:12:2e:c1:53:46:40:d9:2b:
72:f2:3f:84:be:cd:f7:41:bd:76:44:f7:e4:81:09:d0:44:70:
c5:5c:4e:d5:6f:b5:37:36:8e:85:77:98:4e:aa:c8:e7:28:df:
07:6d:5b:ff:0f:ba:8e:8f:99:f0:65:41:74:a2:70:b9:af:ff:
96:85:6e:88:8d:23:e5:ff:85:3d:40:f0:a9:35:24:25:28:ac:
ac:bb:f2:6e:9c:a0:12:27:99:35:b6:6b:7a:b5:18:88:72:11:
56:a9:4b:50:55:53:ff:92:0e:2b:50:73:25:01:34:30:af:75:
e2:3b:5e:a4:2c:1d:a2:07:65:4a:09:b0:4b:7b:98:bd:b8:4b:
f2:cf:8c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:37 2025 by rpki-client