Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eeg6KJ5y_CVsq2sF_1oK831cnQs.roa
File: eeg6KJ5y_CVsq2sF_1oK831cnQs.roa (raw, json)
Hash identifier: XGtgKnAy/KjDYnhhJ4LGOVhnIP/aw1IGZgpRnRc5hzc=
Subject key identifier: 79:E8:3A:28:9E:72:FC:25:6C:AB:6B:05:FF:5A:0A:F3:7D:5C:9D:0B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CC415483EDFCD192128BC1DBC7208EFB5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eeg6KJ5y_CVsq2sF_1oK831cnQs.roa
Signing time: Mon 01 Jan 2024 08:12:58 +0000
ROA not before: Mon 01 Jan 2024 08:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:15:48:3e:df:cd:19:21:28:bc:1d:bc:72:08:ef:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 1 08:12:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79e83a289e72fc256cab6b05ff5a0af37d5c9d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:57:f5:ff:38:0c:5e:6a:b9:0c:11:14:41:
e7:be:e6:6d:8e:c1:64:a4:66:e7:1c:34:5c:07:ac:
c8:d0:f0:1a:ed:31:01:87:8d:d3:92:4c:8f:46:91:
4b:ab:82:50:33:33:0f:6b:0f:85:15:b0:be:dc:3b:
29:3a:09:b0:1c:99:7e:c2:8c:c3:8f:88:7d:40:07:
b6:be:28:3e:49:2a:30:92:f3:b1:f0:ce:13:bc:82:
2f:42:a5:b7:51:20:91:26:f8:3b:68:7e:e0:81:f0:
27:70:8f:d1:c4:e9:3c:0e:d3:39:6e:25:88:51:a1:
00:c6:6f:dd:a8:e6:43:56:a8:63:e3:98:6f:19:5c:
ca:83:71:06:be:7a:84:14:e5:90:cf:96:f9:e0:ac:
44:bc:27:d4:9e:cd:c2:ab:5f:54:30:5a:cd:05:7d:
c5:1d:b3:cc:37:dd:d0:61:39:03:0c:19:54:04:ea:
d4:a1:34:a3:e3:fb:75:79:b3:bc:ba:b5:c1:a4:c8:
8b:6a:cb:43:73:19:d3:26:8e:c1:f8:7d:e2:a8:52:
01:04:97:19:ab:e5:74:66:39:01:21:71:9b:b9:46:
0b:35:85:80:b9:7e:24:e0:6c:0c:a7:34:48:75:d8:
dc:6a:28:c4:bb:62:28:e4:05:99:36:f7:51:43:b9:
f6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E8:3A:28:9E:72:FC:25:6C:AB:6B:05:FF:5A:0A:F3:7D:5C:9D:0B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/eeg6KJ5y_CVsq2sF_1oK831cnQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:f9:c0:ec:02:66:0b:e5:ea:6c:a3:13:8c:51:8c:cf:3a:76:
03:ea:de:0b:89:78:86:0f:66:9e:9b:8f:9f:63:71:af:13:04:
ed:28:2a:6b:35:59:90:8d:43:dd:84:e0:84:45:5d:6d:f6:c4:
01:62:1d:55:22:ed:60:51:62:26:70:4b:f2:46:54:65:8c:29:
4f:8f:5b:85:91:89:5a:2b:4f:28:e0:cf:33:f5:44:be:7c:e4:
b8:22:f0:b5:f6:4c:61:05:6d:7b:eb:d0:ad:00:44:15:b6:bd:
09:44:1d:6f:67:0c:69:e5:95:ed:87:0d:3a:89:16:60:6b:a3:
c3:8a:09:67:ed:d9:c0:cc:cf:1a:90:bb:0d:4a:a2:97:c0:f0:
59:f1:bc:64:e7:1b:d9:8c:07:f4:93:26:38:dc:64:22:11:e5:
4c:66:10:2a:41:be:4b:bc:b7:24:60:9e:45:84:53:fd:7b:66:
4f:02:ad:31:2d:50:0c:38:8c:1f:73:65:df:91:7a:69:b4:3e:
15:24:85:8e:7f:66:bf:24:d4:c5:87:4d:25:89:71:19:d3:7d:
bc:f9:66:bf:f5:33:57:f5:49:9f:8a:ac:77:62:00:92:76:1d:
c0:14:f3:97:00:d1:7c:00:ec:b9:5f:2d:61:35:8b:60:17:d5:
cb:c8:58:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:14:33 2025 by rpki-client