Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eSd4kQ65psCwucfJ4NVuEOtmDEg.roa
File: eSd4kQ65psCwucfJ4NVuEOtmDEg.roa (raw, json)
Hash identifier: zk9vuy89wEfBVEdojevX7br/pvQ1/4GLWahxfktBfio=
Subject key identifier: 79:27:78:91:0E:B9:A6:C0:B0:B9:C7:C9:E0:D5:6E:10:EB:66:0C:48
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CC0681EF18BC7821757DCBBF2E32FBD21
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eSd4kQ65psCwucfJ4NVuEOtmDEg.roa
Signing time: Sun 31 Dec 2023 15:04:58 +0000
ROA not before: Sun 31 Dec 2023 15:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:c067:5d7e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c0:68:1e:f1:8b:c7:82:17:57:dc:bb:f2:e3:2f:bd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 31 15:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=792778910eb9a6c0b0b9c7c9e0d56e10eb660c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:62:74:49:a8:db:e5:fd:a3:db:25:f1:21:68:
8b:52:60:44:dc:e2:03:84:9b:ed:f2:e4:a0:fc:ae:
b2:47:29:7f:9e:ec:07:a9:7a:f5:2b:ae:85:e9:a0:
93:8c:e1:ae:c3:17:36:f3:5b:4f:58:ae:1c:73:46:
b4:0c:ca:7f:51:6c:9f:ef:ac:d5:b9:00:43:65:81:
ba:29:57:bf:5e:0b:bf:74:09:ea:e6:13:34:43:84:
00:2d:b5:8d:6f:91:12:24:8c:71:b2:fc:ff:15:32:
f9:4e:e9:84:be:fd:c7:24:c8:bc:96:03:a3:5a:ad:
6b:a7:0d:1d:66:a7:26:a4:61:65:52:26:22:b0:85:
75:49:9e:87:a3:c9:4a:f6:16:a7:3a:6e:dc:72:3d:
d0:b4:d1:a5:42:2d:17:0b:6a:47:b9:cd:0c:9c:b9:
54:75:4f:03:29:27:8e:b4:b8:e2:57:19:db:6c:d4:
3a:03:36:95:2e:f0:50:42:d2:f2:87:46:14:65:46:
d7:df:1c:94:43:1c:84:d5:eb:2a:68:3e:91:11:32:
17:b0:d1:ff:5c:f1:f9:ae:0c:78:85:1a:30:2c:43:
de:67:8c:85:46:48:f1:f9:91:ea:f7:11:07:50:65:
81:8c:53:25:b9:d5:74:e4:62:cc:22:6d:5f:70:10:
3b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:27:78:91:0E:B9:A6:C0:B0:B9:C7:C9:E0:D5:6E:10:EB:66:0C:48
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eSd4kQ65psCwucfJ4NVuEOtmDEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:16:a4:b1:09:76:f2:87:eb:fb:e0:40:7f:d4:93:84:58:37:
fe:cb:24:ea:9a:34:cb:60:8d:84:f2:6e:84:23:ae:ef:69:37:
7d:65:36:8e:07:04:dd:59:0c:9c:56:ec:a6:80:83:46:70:e4:
e6:bc:67:7d:ca:64:36:30:ea:06:bd:74:ea:40:7e:b8:91:a0:
c8:cd:8e:1d:93:ae:1e:ba:81:ba:25:cb:4a:2f:1d:d9:f2:44:
2c:03:b7:aa:eb:7d:96:87:70:53:7a:8a:e3:3b:a2:e2:f5:bd:
48:6b:6a:e8:b5:10:4d:e5:a1:be:af:9f:d9:d7:ec:56:b1:89:
b5:92:cc:25:21:ce:05:eb:20:02:4a:de:53:74:fc:5e:fa:3f:
a0:0a:09:b6:c1:c9:33:f2:69:e3:17:fa:df:2b:0f:2f:f5:71:
24:27:ae:59:4d:0f:2f:9c:58:0c:6f:03:17:ad:22:1a:36:0a:
0b:b0:63:a0:ed:cd:17:3a:82:1a:a1:7c:7b:e2:3a:1d:34:69:
e4:07:6c:42:ca:88:63:f1:f7:86:32:86:53:f2:c9:b9:7a:0c:
54:e4:f4:12:d0:1d:78:ff:5e:db:61:b1:21:62:3a:c5:00:c1:
ee:4c:3a:e5:1d:7a:58:ad:bb:e8:fc:82:2f:7e:b1:fe:fc:dd:
26:67:28:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:44 2025 by rpki-client