Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/en3gtmZXHxAuChXNYrZhs810nGs.roa
File: en3gtmZXHxAuChXNYrZhs810nGs.roa (raw, json)
Hash identifier: joTPjTJWwKxk9/4xSAuthF4hs9/3YFk1YsO6ID7Dj9s=
Subject key identifier: 7A:7D:E0:B6:66:57:1F:10:2E:0A:15:CD:62:B6:61:B3:CD:74:9C:6B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E96918D1707F2CFB7338E9624DD34F544
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/en3gtmZXHxAuChXNYrZhs810nGs.roa
Signing time: Sun 31 Mar 2024 22:11:45 +0000
ROA not before: Sun 31 Mar 2024 22:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:96:91:8d:17:07:f2:cf:b7:33:8e:96:24:dd:34:f5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 31 22:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a7de0b666571f102e0a15cd62b661b3cd749c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:29:74:29:af:67:51:b9:5d:32:79:59:3d:
af:33:71:70:36:17:b4:a0:dc:33:24:5b:d7:d0:7e:
97:9b:63:9e:9a:77:21:bd:1b:d6:42:c8:8f:af:89:
58:1b:5d:93:f7:45:7a:0c:9f:6e:70:7a:86:af:ac:
de:07:fe:ca:dc:c0:63:9a:53:ea:5e:84:6c:79:a5:
70:68:a0:ae:b8:10:8c:c6:37:e4:73:ed:63:9c:6d:
59:4d:58:11:4a:a9:24:65:b0:7c:7a:18:43:f5:f4:
e6:8b:51:00:ba:f8:6b:d3:77:fb:07:b5:47:f4:04:
8d:14:4a:13:9d:d2:46:d6:4e:bb:4e:38:b8:c5:5d:
e5:ea:23:af:3e:8b:c9:db:21:05:9f:97:b3:03:8c:
f0:43:ec:25:33:f3:4c:e3:ec:f0:86:8d:9e:e7:0b:
b0:36:da:ae:23:0d:43:c5:8e:92:ce:42:28:e1:fa:
93:8b:6d:90:84:97:c6:e1:28:35:93:e3:8d:2c:73:
17:ba:83:46:5c:de:ac:f1:20:42:32:ce:60:c0:d3:
03:ac:06:4e:e9:c7:ed:7f:27:79:c4:5d:55:97:37:
49:cb:2d:5e:3c:94:93:b4:30:25:70:7a:66:7e:eb:
3f:7e:16:29:2a:9d:c2:a9:7e:e4:18:51:34:40:38:
f1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7D:E0:B6:66:57:1F:10:2E:0A:15:CD:62:B6:61:B3:CD:74:9C:6B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/en3gtmZXHxAuChXNYrZhs810nGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:ef:24:ae:16:a9:60:8d:4e:75:9b:b4:85:81:eb:b6:62:77:
19:80:0c:f3:98:18:ff:70:4a:5b:31:78:ad:cf:15:2b:e8:33:
69:11:8e:81:12:7a:e3:64:f2:c1:83:10:a0:88:1c:a1:e8:70:
0c:56:fa:5a:c4:57:c1:5d:59:fd:19:4a:03:02:e4:ee:01:f7:
8b:a1:7c:c7:86:dd:a3:96:bf:d0:5e:a4:67:af:f5:09:4a:58:
a4:cc:74:9f:bf:75:c0:61:d9:af:b5:89:9d:dd:35:91:6b:2e:
07:2e:86:3e:4d:75:97:a3:18:16:be:03:89:26:78:b2:f3:56:
30:cd:bc:65:92:e1:6a:bc:a0:86:3d:64:9d:39:66:30:76:22:
1e:8e:3e:02:bf:ec:d8:a7:7d:4f:27:6a:45:68:a5:15:c3:09:
9b:8e:ef:c3:d4:5b:12:19:32:59:90:dc:a1:74:08:17:b4:a2:
7f:b5:09:c6:2e:18:44:a2:74:9a:b0:6f:17:0b:2d:13:20:7d:
21:7f:32:64:e9:e7:f4:e0:cc:f0:58:5c:99:07:94:95:98:94:
a6:42:6e:25:11:e7:00:27:02:eb:d9:cc:23:ad:1f:2d:3f:86:
92:8f:9d:7c:ee:a1:e7:7b:e7:dd:d8:11:e2:81:eb:64:e9:d6:
fd:0d:f1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:09 2025 by rpki-client