Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fz5FvOz0vFdHFvCAgJtJAA7MSH4.roa
File: fz5FvOz0vFdHFvCAgJtJAA7MSH4.roa (raw, json)
Hash identifier: +g40uSV8ytnhC+eGSt6BZKqSaPMJJ5qYuCdHFmc8ANk=
Subject key identifier: 7F:3E:45:BC:EC:F4:BC:57:47:16:F0:80:80:9B:49:00:0E:CC:48:7E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E54E20FD87F1651975E1751F2403CC467
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fz5FvOz0vFdHFvCAgJtJAA7MSH4.roa
Signing time: Tue 19 Mar 2024 04:04:45 +0000
ROA not before: Tue 19 Mar 2024 04:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:54e1:e643/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:54:e2:0f:d8:7f:16:51:97:5e:17:51:f2:40:3c:c4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 19 04:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f3e45bcecf4bc574716f080809b49000ecc487e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:79:01:d8:ba:c3:7c:ae:6d:70:99:13:b4:
e5:2d:e7:61:58:b3:d5:93:dc:e7:a6:15:56:51:88:
df:b3:12:2c:77:46:e3:43:06:81:42:98:ff:a7:7c:
66:ac:64:7c:6e:f0:4d:ae:46:96:65:98:22:44:f0:
a2:5f:6f:f9:90:3c:4b:cf:7a:f0:16:75:c4:49:7c:
8b:e9:c5:63:bd:d6:dd:a0:01:36:56:6e:f3:aa:7b:
c4:39:b2:29:53:5d:ad:83:0e:ef:77:5f:56:4a:56:
f1:cf:d8:93:45:06:2e:6b:14:ed:50:f5:f7:3f:23:
63:b8:eb:f5:d8:a2:21:d7:b2:2b:f5:0a:ff:56:f1:
36:40:68:92:56:39:e6:b0:c4:cd:70:a1:c9:9d:e1:
34:9b:de:1a:ea:41:72:86:5e:cf:d2:24:f2:65:68:
22:ad:7d:a0:fb:d4:be:b5:6c:57:b0:2a:56:e7:d0:
22:d2:92:9c:e4:53:f1:8f:13:7d:2c:00:ec:43:cc:
4d:03:f5:68:75:bc:27:db:44:30:28:14:1f:e0:3d:
f1:67:84:38:ff:dc:80:34:60:a4:36:c8:97:6b:6d:
90:03:33:52:6e:20:e0:aa:c6:fb:0e:8d:9a:e1:47:
97:ce:33:fd:a9:3f:08:4c:46:e6:96:ea:09:67:af:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3E:45:BC:EC:F4:BC:57:47:16:F0:80:80:9B:49:00:0E:CC:48:7E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fz5FvOz0vFdHFvCAgJtJAA7MSH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:63:4c:b6:e3:79:87:32:db:f1:6e:46:94:b3:14:07:e6:8c:
a3:43:53:17:30:85:cd:77:f2:dc:b8:13:af:f5:87:6e:62:8c:
73:5e:b9:b6:8c:48:e0:64:78:5c:b2:e7:9e:f1:c7:8e:82:00:
8c:5e:84:9e:f9:da:ef:15:7a:71:2b:9e:56:dd:66:53:2c:e6:
4c:c8:68:ab:fe:cf:96:50:84:b9:37:49:72:29:6f:bf:50:c8:
25:b9:e7:4a:81:1f:68:10:3e:84:f4:99:b5:19:50:31:11:e6:
16:42:63:11:52:6e:8e:05:76:04:d1:47:02:0d:2c:fb:0c:92:
8d:19:29:51:c8:fc:bf:92:91:3e:d6:e9:98:db:1a:60:90:08:
27:a8:c3:e5:d6:8f:26:6a:d7:e5:01:75:1f:ff:d0:75:47:40:
51:3b:f7:fb:40:c5:1a:49:16:84:3b:30:a5:6d:9b:46:de:77:
f5:35:49:6b:29:94:b2:2e:7b:23:7d:12:2d:17:ed:2b:de:bf:
9b:98:61:dc:49:ce:71:99:19:2e:ec:76:d6:5b:81:33:52:e9:
2e:68:7b:ac:62:a5:cc:35:29:8b:f8:dc:6f:fa:07:f7:41:bb:
06:ac:92:b9:12:35:54:9f:43:d3:c7:0b:a2:a9:04:2a:b7:e6:
6c:92:07:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:52 2025 by rpki-client