Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bLio1cw0gE4CpenM0H2DJto5sP4.roa
File: bLio1cw0gE4CpenM0H2DJto5sP4.roa (raw, json)
Hash identifier: 0+N3GvDEjwX5O12/S7bu9efKhrnK8i6cV5bx9Zupcfc=
Subject key identifier: 6C:B8:A8:D5:CC:34:80:4E:02:A5:E9:CC:D0:7D:83:26:DA:39:B0:FE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E295B9029EF2FF0DCF9382E7F9B9DED7A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bLio1cw0gE4CpenM0H2DJto5sP4.roa
Signing time: Sun 10 Mar 2024 17:14:10 +0000
ROA not before: Sun 10 Mar 2024 17:14:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:29:5b:90:29:ef:2f:f0:dc:f9:38:2e:7f:9b:9d:ed:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 10 17:14:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cb8a8d5cc34804e02a5e9ccd07d8326da39b0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:97:be:ec:df:d8:2f:41:a3:63:b5:dd:00:
49:65:41:ce:ec:10:56:eb:6c:f8:1a:70:9b:e1:77:
c5:c2:55:91:7b:08:d6:39:12:54:98:a6:2b:e8:a3:
e6:09:7c:36:5c:a0:c4:ae:ff:b1:b9:90:08:20:e4:
10:1d:78:f8:e8:1c:8b:83:06:19:61:5a:b5:66:86:
37:f9:f5:da:d8:6e:8a:7c:c0:8e:18:93:1b:86:98:
c1:45:85:fe:e6:22:6f:a2:67:30:39:0b:94:f3:70:
2b:3f:8f:9c:87:ac:8a:af:5b:10:7f:1d:98:0f:4e:
39:17:7d:c5:53:a6:81:1d:fe:96:1a:12:2c:7f:a5:
c5:84:ab:cd:15:be:a0:1e:39:88:83:73:65:15:ba:
e5:95:e2:c6:b9:3e:f4:07:bd:f8:32:40:61:8e:5c:
ec:0b:41:1a:57:a7:2f:9d:38:42:78:69:a3:2e:ac:
55:74:c1:84:b3:7d:c8:25:44:69:9b:71:cc:4c:8c:
8b:e3:72:34:fb:6f:9e:9e:4c:36:6b:ce:10:9c:3b:
d7:9c:6e:55:e1:33:05:00:56:62:c5:28:91:e8:95:
86:77:4f:e1:1f:1d:97:99:74:47:45:b8:97:3f:a5:
0a:17:5a:72:0e:5e:64:10:75:36:5d:ad:2c:10:cb:
dd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B8:A8:D5:CC:34:80:4E:02:A5:E9:CC:D0:7D:83:26:DA:39:B0:FE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bLio1cw0gE4CpenM0H2DJto5sP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:f3:5a:c1:fb:cc:2d:47:77:bc:74:9e:a0:43:0c:b6:3d:c5:
7a:66:83:ca:59:d4:ea:2a:92:da:90:d7:cf:d6:ef:a4:c6:8b:
10:d5:6f:0e:a2:05:bc:da:d9:f9:5b:8a:63:45:74:0f:f6:1d:
08:17:93:9d:ab:e4:8c:59:08:ce:ec:8a:10:90:be:f7:f1:ba:
15:23:f4:d5:d0:08:0a:f7:38:9a:5a:0c:eb:81:cd:41:7f:3d:
d3:91:3b:4c:2b:47:19:74:d0:2a:c5:36:58:1f:78:3a:90:58:
2b:41:a6:72:7a:65:77:08:1d:9e:c7:b2:5a:e1:3e:2e:d4:93:
72:7c:1a:41:2b:ee:d2:25:77:d8:5d:6e:55:9f:31:70:70:bb:
18:47:56:ab:e6:35:7e:05:d0:89:7b:82:bd:54:e3:5b:f1:e3:
75:9c:20:bf:a7:f9:e8:71:c2:f3:c7:5e:11:a6:4b:8f:41:0e:
f7:cd:02:fd:29:84:91:0e:3a:ee:1b:b7:42:d1:3c:21:0b:8a:
40:7b:5e:1b:3f:05:77:fc:06:69:a4:3c:bc:5d:70:d6:57:0c:
8a:cc:4b:97:49:9a:07:4e:56:18:a4:c6:e3:99:36:d3:80:45:
2e:c9:e3:43:a4:f5:88:33:b0:9f:39:85:e4:a7:56:c1:bb:da:
26:fb:57:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:39 2025 by rpki-client