Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/e6FbWRnnl9QTe150wzR0fbmZt7k.roa
File: e6FbWRnnl9QTe150wzR0fbmZt7k.roa (raw, json)
Hash identifier: gFtYV/24VC88scjvMeAXcd7MqtU0m2o9bkGDABJtSHs=
Subject key identifier: 7B:A1:5B:59:19:E7:97:D4:13:7B:5E:74:C3:34:74:7D:B9:99:B7:B9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018ED5390288AA699E3A8F5FBE3A824715DF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/e6FbWRnnl9QTe150wzR0fbmZt7k.roa
Signing time: Sat 13 Apr 2024 02:11:06 +0000
ROA not before: Sat 13 Apr 2024 02:11:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d5:39:02:88:aa:69:9e:3a:8f:5f:be:3a:82:47:15:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 13 02:11:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ba15b5919e797d4137b5e74c334747db999b7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0a:15:81:50:ae:14:ba:b6:70:69:ad:dd:09:
5c:66:8c:44:07:0f:4b:e1:0c:f1:fd:9e:cf:cb:4e:
15:87:cb:f2:d0:ba:be:87:0e:37:45:5c:87:6e:ee:
10:19:5d:a9:8d:0e:3d:93:d8:8f:e0:62:f2:4b:90:
c4:f7:77:29:9c:ab:b8:10:6a:61:bf:1f:f8:b2:5b:
a7:56:2a:3c:19:30:fb:dc:62:7b:78:d9:62:40:12:
80:67:f0:b7:50:02:68:bb:02:a2:b0:9e:de:b3:19:
bd:f2:c2:91:7e:36:fd:0b:e4:4f:94:17:ef:40:57:
34:75:f8:ab:a1:8d:ad:4f:06:46:4c:ae:7e:c3:14:
a1:4f:3e:45:b9:72:47:8f:8e:ba:ef:51:55:9a:74:
ba:02:25:11:60:0b:bf:94:1c:2a:cd:2d:14:bf:c7:
4d:9b:bd:4b:1a:f4:6c:8b:26:ea:01:5b:7f:4f:f3:
2b:71:d8:36:c3:13:d6:48:b7:7a:69:1e:77:3a:90:
3a:52:93:31:ff:1c:cd:f8:53:4e:bc:40:39:f1:a4:
04:04:08:c2:44:4a:33:bd:80:3b:c1:32:87:58:87:
7b:a6:01:7d:03:39:9c:5e:2c:c0:3a:c5:9e:cb:37:
94:cc:25:6b:61:8b:c8:54:f3:59:3f:e9:36:df:d8:
73:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A1:5B:59:19:E7:97:D4:13:7B:5E:74:C3:34:74:7D:B9:99:B7:B9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/e6FbWRnnl9QTe150wzR0fbmZt7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:a6:18:a7:31:a6:3d:20:e0:15:be:f6:e9:0d:6c:14:83:84:
8e:7d:8d:95:a1:6e:8c:9a:24:97:1e:bb:c9:f9:22:13:15:db:
d1:ca:04:9b:ea:7b:a2:09:f1:c2:64:e4:7d:07:11:04:ba:5a:
1b:98:c8:f0:44:93:fa:69:8e:95:10:29:37:af:86:c3:8f:53:
ed:ae:7f:55:76:f1:6a:5c:f8:38:da:e8:a5:ca:91:3f:47:24:
32:39:7a:f3:64:6e:95:67:da:cf:8f:4a:3b:d4:45:ca:06:33:
e5:7c:0a:57:65:7a:3e:fc:b7:bb:82:60:17:59:0b:1e:5d:61:
ab:11:bf:73:54:36:62:27:95:3f:c8:d5:83:bd:d7:e3:0b:10:
8e:da:ac:eb:25:5c:aa:d0:b8:f5:4e:c8:5f:63:0a:70:e9:1e:
d6:29:ae:fc:c9:1f:77:d6:f3:d0:49:b3:8d:cc:d3:3e:37:78:
9f:17:9c:c7:84:bc:e8:bc:cd:ef:94:66:0e:0e:85:f0:31:1f:
10:1d:f5:26:7e:d7:cf:2c:2d:f5:6c:56:2d:22:de:ba:6d:4c:
42:ab:0d:e2:6a:c6:8a:8f:c2:a2:a3:d2:56:9c:8c:2b:4c:99:
9f:73:68:04:9c:59:5f:cf:68:cc:ed:c6:6c:a6:bd:38:4e:27:
15:02:ae:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:14 2025 by rpki-client