Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bNifQIau4W1nyYcTiQG8KA7KhYg.roa
File: bNifQIau4W1nyYcTiQG8KA7KhYg.roa (raw, json)
Hash identifier: dRcp7z6qwPW222iT3lDcAu064uFhF16HEZSmng3Jy08=
Subject key identifier: 6C:D8:9F:40:86:AE:E1:6D:67:C9:87:13:89:01:BC:28:0E:CA:85:88
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D7665C0B12A3F2E3A5B5F41BD712E88CA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bNifQIau4W1nyYcTiQG8KA7KhYg.roa
Signing time: Sun 04 Feb 2024 23:13:16 +0000
ROA not before: Sun 04 Feb 2024 23:13:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:76:65:c0:b1:2a:3f:2e:3a:5b:5f:41:bd:71:2e:88:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 4 23:13:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cd89f4086aee16d67c987138901bc280eca8588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:2f:30:f7:bf:67:e7:5a:48:82:c3:14:9b:
a3:d6:36:4b:6b:1d:9f:e8:31:82:c2:78:cb:83:ed:
f5:e6:e7:9c:b5:35:c7:ee:a6:71:c7:21:45:a8:a1:
2b:4e:0a:16:a3:41:17:22:ab:38:50:36:a2:57:36:
12:76:c6:a0:21:5f:52:00:8c:e5:7e:c7:2f:b9:de:
72:15:4d:aa:c6:8a:36:5d:16:2f:99:e2:10:7a:27:
9b:1a:1c:2d:1a:6d:e7:e2:f8:25:9c:a3:05:e4:0b:
d9:18:57:a2:29:54:0e:fc:9d:65:c5:d0:5f:e1:8e:
f8:71:9d:2d:9b:db:3d:1a:5c:a1:c3:87:9e:1e:e8:
fd:a8:bb:49:4b:f4:71:fd:53:e6:b9:30:1a:df:92:
10:2b:b3:6c:37:50:93:3e:31:88:b4:ed:14:66:f9:
99:6b:e6:d6:46:c1:03:3c:08:c1:d6:41:4b:ca:4f:
71:59:96:ed:ce:0f:a8:4e:99:a9:29:e5:0d:ef:2c:
23:27:f8:ce:3a:2f:b7:ec:2a:08:6e:88:ca:94:7d:
bd:c5:19:de:3b:d1:e1:21:f9:bc:93:33:02:70:20:
37:c6:cd:cb:26:8f:3a:de:7b:b7:bf:a9:54:24:bc:
8c:44:98:61:3e:08:4c:8c:40:e2:4d:3f:20:6b:ef:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D8:9F:40:86:AE:E1:6D:67:C9:87:13:89:01:BC:28:0E:CA:85:88
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bNifQIau4W1nyYcTiQG8KA7KhYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:a6:c2:6a:e5:b3:09:0f:ce:d5:9a:d5:ad:88:47:b2:b8:62:
63:fd:a3:b6:0f:6b:93:6d:6a:9c:57:0b:c2:df:9b:5c:b0:51:
34:da:45:e9:ab:de:bf:8f:72:02:c5:00:8a:1c:1f:2a:e9:f4:
58:f8:bf:39:9f:d1:e4:bf:31:2a:97:81:f5:6b:90:3d:ef:57:
b1:5b:68:97:fd:da:be:a6:9f:d8:9d:29:47:90:01:d4:d3:97:
09:4d:df:db:50:d1:b0:c6:3a:45:27:38:b6:ad:21:02:b8:0e:
4d:74:2e:fd:d6:11:57:4d:c4:7a:84:36:0c:ed:0a:03:2f:a3:
f9:bc:8f:87:56:2f:21:1e:ee:94:71:a7:2d:fa:49:cf:08:fd:
54:60:e2:92:35:91:59:64:58:18:36:2c:c7:49:e6:36:2b:35:
45:8b:b6:94:95:ce:c8:75:8f:98:d0:01:28:31:87:50:ba:9e:
65:cb:9a:ee:35:60:89:e5:4e:b1:86:1f:69:7d:8e:6c:ae:7a:
72:c8:38:04:40:7f:ef:d5:78:e6:89:ec:ce:dd:fb:34:6c:a6:
59:72:27:34:e9:b0:4a:e3:03:37:4b:8d:cb:12:61:a2:c6:d4:
26:c5:32:81:3d:1c:ae:52:a5:5e:e8:02:14:93:1e:ab:7f:7a:
6f:2c:2c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:14:00 2025 by rpki-client