Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dEsTTEGpBEpesttJ0BbHk4VtO9w.roa
File: dEsTTEGpBEpesttJ0BbHk4VtO9w.roa (raw, json)
Hash identifier: 5KgH4DIZksx4hvq7uZUJrqCiqSPRzffNVq4YsgJRfKE=
Subject key identifier: 74:4B:13:4C:41:A9:04:4A:5E:B2:DB:49:D0:16:C7:93:85:6D:3B:DC
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9BF510FF3E322DB6ED44BF81C1F749CE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dEsTTEGpBEpesttJ0BbHk4VtO9w.roa
Signing time: Sun 24 Dec 2023 13:12:58 +0000
ROA not before: Sun 24 Dec 2023 13:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9b:f5:10:ff:3e:32:2d:b6:ed:44:bf:81:c1:f7:49:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 24 13:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=744b134c41a9044a5eb2db49d016c793856d3bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:41:54:d2:4b:6b:6c:68:5d:b8:94:7b:20:a7:
d3:56:78:0d:63:71:5c:53:6b:86:ba:9a:dd:7b:6b:
87:84:e8:5e:df:97:9c:1e:f0:67:47:92:00:bf:10:
63:72:6f:30:44:51:72:db:cf:e2:89:58:4a:82:6a:
95:6d:58:5c:60:7c:ab:2c:ae:f3:92:10:c5:76:44:
ad:56:d8:45:8f:24:f3:aa:63:40:e9:2e:a8:e5:d9:
5b:ef:53:5f:f5:85:3b:4d:c8:fc:42:9b:a8:b1:2b:
21:fa:e8:1f:3a:09:75:d8:5a:4f:8e:27:d9:21:90:
42:4e:7d:96:57:dd:c3:6f:91:d6:1b:81:08:1b:98:
cf:55:ee:3a:36:93:7e:c7:86:88:0f:03:ea:f7:e5:
28:97:3b:bc:17:05:47:c8:61:38:c1:39:62:b0:70:
07:1d:05:1e:92:a3:34:36:d5:f2:21:c1:66:39:b1:
eb:e6:b6:21:98:1e:9f:5e:35:06:08:a1:bd:d6:87:
ef:a3:13:66:4d:c3:d5:46:23:dc:a4:ce:61:71:ed:
cf:cc:4b:94:4a:37:ef:2f:08:ab:d6:e1:a4:88:6e:
34:aa:c2:82:b7:c2:93:b2:96:02:3d:12:8b:42:1c:
7b:9d:8c:70:99:e2:a4:26:92:87:75:32:06:df:0b:
bb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4B:13:4C:41:A9:04:4A:5E:B2:DB:49:D0:16:C7:93:85:6D:3B:DC
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dEsTTEGpBEpesttJ0BbHk4VtO9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:7b:b0:f2:c6:6a:2d:27:bd:9a:64:47:c7:01:7c:cd:fa:45:
95:3d:98:b2:7d:21:28:c5:0d:fa:dd:3b:b0:43:67:54:3f:60:
6c:ef:b0:77:54:d7:98:75:c7:9b:ef:6b:10:e1:6e:94:da:33:
83:8a:c8:39:d9:c7:72:4c:5d:38:05:a3:70:e5:61:21:03:82:
12:67:2d:e1:2d:08:6b:a7:22:04:fe:b4:5a:06:9a:ee:78:1d:
3d:9e:2b:6e:bf:0a:29:9f:c1:4f:55:04:76:91:6f:b5:9c:a3:
21:05:9f:c9:d9:50:ad:f1:d9:87:51:44:89:58:09:d5:f6:8e:
c1:5b:86:f4:f9:4f:89:7b:71:71:66:ad:51:8c:2c:4a:b2:98:
fa:1d:7e:a0:2d:21:dd:46:b4:41:65:63:d2:af:88:b7:51:2b:
2c:b0:43:9a:0e:fc:e1:62:5e:31:d1:86:26:4d:77:db:8b:e1:
f3:15:29:ef:fb:e7:5c:96:4b:34:43:d9:3c:da:07:29:1b:ea:
11:24:69:84:52:56:99:2c:33:03:6d:3d:ae:e0:1b:0d:a1:c1:
f6:d2:d3:58:32:db:66:c4:1b:77:ba:a3:03:46:91:da:58:9a:
55:c2:48:dc:d4:52:9f:51:bd:ec:5b:0e:f6:a3:a5:2e:8c:ae:
ee:ac:42:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:36:47 2025 by rpki-client