Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/btPnUDeci2dClvbSUffaHtJtzUo.roa
File: btPnUDeci2dClvbSUffaHtJtzUo.roa (raw, json)
Hash identifier: fH8Z1aipbohqNxxetpJXj9mh6KGk2Q62m8TCpj4wd2E=
Subject key identifier: 6E:D3:E7:50:37:9C:8B:67:42:96:F6:D2:51:F7:DA:1E:D2:6D:CD:4A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E5141B7563A4A12BD01A61756543D7DF1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/btPnUDeci2dClvbSUffaHtJtzUo.roa
Signing time: Mon 18 Mar 2024 11:10:45 +0000
ROA not before: Mon 18 Mar 2024 11:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:51:41:b7:56:3a:4a:12:bd:01:a6:17:56:54:3d:7d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 18 11:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ed3e750379c8b674296f6d251f7da1ed26dcd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:79:de:eb:8b:45:88:5e:e5:23:6f:30:70:
76:2e:d4:62:6d:a4:86:15:f7:c4:76:96:92:59:c9:
f4:39:73:53:14:5a:5a:0c:80:05:be:ba:e9:9d:52:
66:68:80:6a:77:54:1a:a2:76:b6:d8:b7:35:88:d9:
50:e6:1a:d2:86:cd:aa:96:95:b7:be:d0:f8:bf:76:
ce:93:38:d8:f0:72:3e:e4:40:82:11:b2:da:6a:09:
70:ff:d3:a6:4e:4c:45:15:fa:ca:86:26:35:23:4c:
bc:b2:eb:b4:d8:20:3d:0a:eb:0e:fe:62:2b:22:6a:
07:d5:30:8f:d6:b5:a8:41:1d:a8:a1:b7:94:a9:e4:
0b:3a:65:d0:b5:69:bf:11:0a:b9:b9:ae:9a:65:56:
ae:2c:5a:46:71:79:19:2b:bd:ff:20:27:e3:66:1b:
d3:8c:cb:b5:fe:74:df:b3:48:8c:88:50:08:21:e9:
6a:db:c4:27:a5:75:d2:f9:ae:9f:e5:ad:1d:aa:00:
d3:91:14:30:c3:b5:bb:fe:23:b2:03:b5:00:44:60:
34:c2:48:9b:fc:30:1a:b2:a3:70:d2:c9:fc:f3:db:
3b:e8:ac:69:84:93:fc:35:4f:0c:e6:fe:c9:93:84:
64:52:e7:f1:c0:61:fb:92:10:b4:17:a1:85:07:e7:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D3:E7:50:37:9C:8B:67:42:96:F6:D2:51:F7:DA:1E:D2:6D:CD:4A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/btPnUDeci2dClvbSUffaHtJtzUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:17:69:3e:27:f7:bb:6b:9b:45:24:8e:54:af:7b:f0:50:e6:
3f:86:0d:a7:f5:9a:0a:f3:34:01:f9:49:aa:ab:dc:41:53:0c:
45:02:f9:5c:fa:15:8d:e1:b3:ce:dd:25:d8:76:f8:88:c7:46:
45:1c:2a:4d:ba:92:28:e6:37:24:4b:3a:c8:dd:56:3f:56:8d:
2c:c1:ec:d0:b9:9c:a6:db:4b:e2:05:c5:1e:ac:b0:02:9b:6b:
51:a8:ce:e4:99:2d:94:d2:44:53:cb:f3:b5:f9:9a:df:e1:d0:
30:8a:33:26:72:cd:e8:8e:bb:21:aa:03:61:c8:1c:77:59:3d:
ee:f6:b1:ab:2a:8f:1c:16:e8:7d:c4:4e:4e:e7:49:5d:8d:13:
b7:4f:dd:ee:2a:e0:64:de:24:06:c1:06:20:56:1a:50:4e:e7:
bd:d3:50:29:d6:48:f6:3e:50:b6:40:7b:c7:78:79:4a:2c:71:
4f:51:5f:14:65:ca:b2:72:8e:3d:ad:1a:77:21:5f:e6:c9:3a:
f7:39:61:34:ad:3b:09:ff:dd:54:8c:c1:0a:14:91:50:b8:04:
8a:03:d9:4f:27:5c:d4:d1:e0:5e:20:62:18:1d:2a:29:f6:c7:
d7:b1:56:af:fe:ad:43:02:9b:d0:97:f1:20:cb:4e:a6:44:0f:
74:13:00:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:43 2025 by rpki-client