Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fXuQNz_ipEyatr2XF_jEW3LrS2k.roa
File: fXuQNz_ipEyatr2XF_jEW3LrS2k.roa (raw, json)
Hash identifier: GP6N6Ym22noelRovAXOmdUao2hRJPftUzcmlXWQi8yc=
Subject key identifier: 7D:7B:90:37:3F:E2:A4:4C:9A:B6:BD:97:17:F8:C4:5B:72:EB:4B:69
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D4EB1EC6559890A69459D035A404A308D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fXuQNz_ipEyatr2XF_jEW3LrS2k.roa
Signing time: Sun 28 Jan 2024 06:11:39 +0000
ROA not before: Sun 28 Jan 2024 06:11:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4e:b1:ec:65:59:89:0a:69:45:9d:03:5a:40:4a:30:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 28 06:11:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d7b90373fe2a44c9ab6bd9717f8c45b72eb4b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:27:67:5a:5e:18:2b:df:bc:9f:d9:27:94:37:
04:f6:c2:81:92:9d:66:33:a9:f8:4e:6e:11:de:e7:
0a:06:ee:ae:f2:e2:5f:4c:0d:41:8d:94:7c:82:08:
0f:af:63:33:cf:d2:bf:f9:d8:a6:2d:6b:55:ee:c4:
59:52:a9:7f:25:fd:27:9b:91:82:50:67:fd:56:ed:
9d:ca:2f:e7:f0:a2:25:89:2a:e5:21:37:eb:e3:8f:
4c:dc:4d:ff:dc:d3:03:80:f4:9a:af:fb:95:57:a8:
fd:ce:73:31:3c:dc:28:8e:f2:60:2c:a7:aa:09:3c:
67:1c:2a:19:e3:c8:a8:2a:41:93:ef:7c:24:26:38:
30:77:20:f4:e2:cf:9b:83:59:68:f9:1d:af:ec:65:
29:c4:61:41:8a:eb:4d:5b:6e:4f:39:89:14:2f:0d:
fb:bc:1f:ff:f1:1d:b8:b3:5f:fe:41:7a:0a:c8:e5:
4b:61:ec:d2:84:17:0f:8f:f4:2e:fd:7a:b5:06:98:
7b:81:4d:29:78:83:6e:68:82:09:c6:b3:09:77:f2:
90:a5:5b:fd:98:0a:4c:c7:1c:4e:29:80:c3:5e:a8:
16:54:9a:8a:bd:4c:aa:02:65:c6:5b:6e:cf:03:65:
57:26:ad:41:7f:ed:6e:79:6f:bd:13:77:2e:1e:6c:
f5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7B:90:37:3F:E2:A4:4C:9A:B6:BD:97:17:F8:C4:5B:72:EB:4B:69
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fXuQNz_ipEyatr2XF_jEW3LrS2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:f7:70:19:3e:df:79:0e:1d:9b:fc:81:e0:38:66:9f:37:d0:
9e:39:c6:f0:35:eb:b8:74:26:cb:38:60:d0:91:42:dc:38:dc:
69:24:7a:25:27:37:b7:82:5f:ab:55:36:c0:16:78:44:63:53:
d0:7d:60:86:73:8f:b8:85:64:d4:c5:b3:00:f8:11:b8:7c:a4:
4e:25:b3:27:35:36:b5:44:ec:c2:f3:2c:1f:a2:59:0a:a5:c7:
5b:de:9c:85:fb:cd:03:96:18:71:91:bd:8f:0b:32:71:de:b0:
21:8f:f6:19:40:5a:1c:ac:08:34:39:bb:5e:5d:d1:05:3d:9e:
f1:0c:c5:a7:c3:1f:f8:5a:65:92:bf:b7:a4:8d:09:e5:d0:e4:
74:b2:81:33:c6:ca:d6:45:36:16:53:47:c5:1b:01:c5:13:8b:
73:1d:c3:9f:89:69:be:37:f2:6e:f3:4b:c6:3a:95:ac:cf:6a:
bf:8d:73:04:60:53:fb:a6:53:55:ce:17:ec:1b:ba:9a:34:43:
89:ae:85:9c:d7:09:1a:1d:45:ee:fd:18:b5:d2:a9:f3:59:99:
3b:39:c6:53:b1:a2:61:be:35:51:15:d0:17:b3:08:40:de:90:
8c:59:68:7e:9a:a4:42:6c:04:2e:53:9c:6a:bd:e4:a4:c2:20:
95:39:ed:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:05 2025 by rpki-client