Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/g43tVGmtFmdtF6IKdpeb_-QOfj8.roa
File: g43tVGmtFmdtF6IKdpeb_-QOfj8.roa (raw, json)
Hash identifier: pifFk8qhZ1Q0PqkWr7dmmr0V4+FuJ1nefs+W5iWTkGQ=
Subject key identifier: 83:8D:ED:54:69:AD:16:67:6D:17:A2:0A:76:97:9B:FF:E4:0E:7E:3F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DCF701FEED93B4A0E3C28AD8F60ABA2FD
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/g43tVGmtFmdtF6IKdpeb_-QOfj8.roa
Signing time: Thu 22 Feb 2024 06:10:48 +0000
ROA not before: Thu 22 Feb 2024 06:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cf:70:1f:ee:d9:3b:4a:0e:3c:28:ad:8f:60:ab:a2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 22 06:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=838ded5469ad16676d17a20a76979bffe40e7e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b0:0d:b5:b8:94:7f:b1:5b:33:75:85:4d:c0:
92:1f:fe:db:5c:20:29:07:41:4c:6c:17:1f:9f:f0:
eb:df:ec:57:09:cc:a8:55:db:59:1c:81:ad:32:b8:
3f:73:98:e6:94:6b:16:78:0d:41:7f:fa:b4:90:39:
59:da:c1:9c:8d:ac:7e:5e:56:ea:20:d7:f1:60:bb:
e2:fd:8c:75:72:b8:3d:5e:5a:39:a8:05:8a:90:a7:
32:a9:26:f5:03:be:dc:ff:3a:45:70:f5:e6:35:48:
d3:19:7c:14:06:14:fd:d1:a7:55:89:79:f8:1e:9c:
0e:66:ac:71:20:9b:ec:fb:6e:d9:cc:86:1f:40:19:
21:ad:44:7f:ba:92:b2:12:47:8d:94:2c:66:ea:2f:
ee:65:f8:ce:76:90:5f:7c:8f:ff:e8:b8:9f:31:18:
25:0f:61:c1:89:ea:91:79:d0:e2:52:e1:1d:28:13:
53:ae:db:7f:fa:3f:a8:90:2d:67:6d:f2:cf:f9:ca:
48:f9:e3:1a:68:98:51:60:eb:e4:30:31:68:1b:e9:
e3:ae:ee:57:f6:16:31:a3:b1:45:31:87:ca:6e:08:
05:75:05:cd:18:9d:dc:d4:ad:f4:f8:59:88:4c:ba:
2a:0a:92:dc:9c:f5:28:ea:cb:c7:aa:2c:52:da:68:
e6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8D:ED:54:69:AD:16:67:6D:17:A2:0A:76:97:9B:FF:E4:0E:7E:3F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/g43tVGmtFmdtF6IKdpeb_-QOfj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:c4:35:73:7d:27:e3:ff:3d:c2:d4:ff:dd:8d:e4:2e:77:96:
8d:74:04:1d:43:a4:c3:f6:7a:8e:3d:82:20:3e:a8:f2:d0:c0:
2a:32:54:6e:27:49:9d:bf:3d:d7:c8:f5:44:bd:db:ad:3c:a6:
ff:b1:4b:e0:aa:58:5e:e3:84:c7:49:b1:19:c9:fb:f9:5f:b7:
84:32:40:e2:97:e0:01:f7:1c:27:01:90:97:52:b9:b2:8a:22:
65:d4:c3:24:fe:09:18:a1:8b:e0:26:50:e3:f1:41:6d:0e:85:
1e:dd:f6:d2:ca:2f:08:95:c5:e2:9c:48:29:72:79:73:bc:5a:
86:e8:80:73:6f:ed:9e:3d:6b:8d:eb:23:70:d1:08:0c:78:d4:
dd:0f:14:f0:a8:d5:9a:ad:ba:5b:35:cc:a9:db:9b:d4:28:38:
57:f3:aa:32:89:9d:8a:04:ef:40:b8:a0:e9:b3:e4:be:5c:2b:
69:03:20:fd:63:16:e3:7f:15:83:b2:0d:f8:12:d2:62:f1:61:
27:83:e9:64:6f:e0:e5:88:63:78:12:4f:1d:65:5e:da:4d:a5:
c3:bc:75:ed:e8:be:a9:bd:f1:d5:16:98:24:6e:30:6d:3b:57:
15:cb:db:41:13:37:04:88:d8:2b:44:f6:a1:25:3c:d5:f1:0a:
af:f0:11:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:18 2025 by rpki-client