Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/em5zhqa5wDbt91pUh7zCJVBT74Q.roa
File: em5zhqa5wDbt91pUh7zCJVBT74Q.roa (raw, json)
Hash identifier: RQqFiL/Lrkks9hQkn68L+USJaJMVOUdoMEKgcnEwtMU=
Subject key identifier: 7A:6E:73:86:A6:B9:C0:36:ED:F7:5A:54:87:BC:C2:25:50:53:EF:84
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DE10B43ECE1FE7CF390050A8CDC55FDDB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/em5zhqa5wDbt91pUh7zCJVBT74Q.roa
Signing time: Sun 25 Feb 2024 16:13:48 +0000
ROA not before: Sun 25 Feb 2024 16:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e1:0b:43:ec:e1:fe:7c:f3:90:05:0a:8c:dc:55:fd:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 25 16:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a6e7386a6b9c036edf75a5487bcc2255053ef84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:63:ca:d6:26:55:36:e5:2f:76:12:12:70:
3a:66:68:68:80:64:41:3c:dd:70:0f:79:fb:bb:0c:
7d:69:d2:0e:f2:c7:4d:e7:0a:af:79:fa:71:37:3a:
35:73:c5:f5:ad:58:c4:8e:03:b2:e7:e0:63:9f:c7:
f6:59:8b:4e:cb:55:9a:0e:ba:26:e5:88:80:d5:b6:
c4:e5:e8:58:b8:70:28:f1:be:2c:4d:3c:2b:73:02:
e2:a6:71:01:46:36:36:61:b3:7f:18:a0:dd:e1:23:
c4:da:0e:55:5b:83:64:4b:f0:8f:3c:72:e7:5d:38:
a6:58:03:58:de:b2:58:8e:cf:de:b1:bc:6e:56:7e:
eb:17:cc:68:f7:ed:d0:6b:c8:2d:e9:e0:0a:6f:06:
ee:5b:82:44:76:7f:41:b1:07:30:13:09:37:ee:d9:
4d:f1:ec:a4:04:2d:78:ca:13:b0:be:b1:a2:97:d5:
0f:a4:b7:e4:74:09:a9:c0:75:d9:aa:9c:01:3c:e8:
76:80:31:ed:43:46:df:6b:aa:2d:8d:19:cb:07:3b:
26:6d:88:01:bc:c8:ea:4e:8c:5d:99:e6:4c:ea:20:
30:79:f8:50:9e:f8:51:de:0e:42:e0:bc:3b:4e:24:
9f:a6:5b:cc:79:26:27:95:38:b0:10:32:cf:cb:75:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6E:73:86:A6:B9:C0:36:ED:F7:5A:54:87:BC:C2:25:50:53:EF:84
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/em5zhqa5wDbt91pUh7zCJVBT74Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:d7:42:46:c3:eb:43:c9:7c:f6:fc:f4:71:7d:04:23:c0:5b:
09:12:97:1b:98:73:61:64:3c:35:9a:56:be:ea:a7:3d:00:d1:
98:f8:3f:4a:98:ac:58:82:8a:41:81:b7:28:85:ef:83:14:4b:
30:eb:58:a4:f0:6d:55:96:c8:73:73:fd:c5:46:6b:a9:3b:78:
de:ff:c9:9f:b3:89:c8:83:d7:87:af:71:05:ba:6f:a7:da:c5:
67:69:85:1f:95:6c:94:1e:a7:8a:13:2a:72:e5:e8:2d:52:0f:
d6:16:f3:f5:db:d8:a8:74:25:23:a4:1f:d0:e7:85:a3:f8:18:
0c:53:b6:6f:3c:ad:42:fa:19:83:51:06:f7:c8:f4:cd:13:2e:
23:f7:f5:ca:a0:8a:19:fd:7f:3f:61:62:83:78:cf:9d:b5:0f:
18:5d:a1:90:39:68:85:d7:4d:3b:ef:43:74:a6:2b:fb:b0:ca:
44:52:fc:28:35:9d:ab:a2:b7:39:f3:0f:67:ba:f0:ac:a6:d9:
1b:d4:fb:62:87:3f:f7:f6:62:e8:46:5f:05:f6:39:cb:29:18:
fe:41:d9:07:c3:0b:1c:e5:d6:7b:1d:84:ba:5f:ac:b5:24:97:
64:d8:c6:ba:cc:2d:25:1f:e4:63:46:57:62:c3:32:97:ee:a6:
bc:3c:ba:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:59 2025 by rpki-client