Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gGefb7g6wWKDeIn7NG8fqMTaBfk.roa
File: gGefb7g6wWKDeIn7NG8fqMTaBfk.roa (raw, json)
Hash identifier: r3VwRwfbkMxhOolsvD2RRj7Lv2b9ipCglgIN0gvQwk0=
Subject key identifier: 80:67:9F:6F:B8:3A:C1:62:83:78:89:FB:34:6F:1F:A8:C4:DA:05:F9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DFFBA7DD6CA38E78E38FA5E0CC158F1F7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gGefb7g6wWKDeIn7NG8fqMTaBfk.roa
Signing time: Sat 02 Mar 2024 15:13:48 +0000
ROA not before: Sat 02 Mar 2024 15:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ff:ba:7d:d6:ca:38:e7:8e:38:fa:5e:0c:c1:58:f1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 2 15:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80679f6fb83ac162837889fb346f1fa8c4da05f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c9:71:5e:c2:e1:5b:12:b8:23:ea:85:73:81:
54:62:2a:c5:76:15:98:5d:41:b0:11:2a:51:e9:a3:
87:62:12:3a:5a:ff:1e:a0:f2:81:ad:95:b0:bc:52:
93:4b:e4:1b:da:b6:f0:1f:36:c7:f6:ab:f5:a4:5e:
68:e7:89:d1:c6:1d:47:e9:0c:38:81:cc:c0:ac:08:
fd:7c:95:6e:3f:26:a5:da:8d:a3:32:6b:6b:69:e7:
75:2c:10:36:34:76:f5:e4:1f:da:39:c7:9d:fe:f6:
c4:dc:23:6c:d5:9b:8d:24:ba:ce:9a:3d:8f:df:bb:
43:68:27:cc:29:0f:5a:a5:60:f4:47:95:67:f9:d0:
8a:28:fe:2c:c9:08:df:f1:f7:98:fd:f3:e7:b3:2c:
73:d7:b7:d0:68:22:aa:75:4f:f7:d3:d8:e3:3b:55:
2a:0f:c5:77:bd:4c:45:85:0e:b9:42:c7:a9:5d:a2:
05:68:aa:ce:73:81:b1:4d:ac:d3:06:73:ba:64:f8:
b9:51:b2:e0:5e:59:a3:26:29:63:ba:50:e4:ee:12:
8f:25:15:9a:fd:4b:b2:13:ae:86:56:57:32:7e:4c:
69:a9:c5:ab:75:ca:bd:d1:9a:8c:25:0d:7c:9a:66:
5d:de:ec:fe:26:d1:35:ba:3b:1a:68:b9:f8:1c:c0:
3a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:67:9F:6F:B8:3A:C1:62:83:78:89:FB:34:6F:1F:A8:C4:DA:05:F9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gGefb7g6wWKDeIn7NG8fqMTaBfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:a1:5a:20:9d:5b:17:14:fb:fc:10:4d:66:bf:70:e1:ab:78:
94:b1:49:74:0c:38:e1:df:c9:67:57:c7:40:b3:82:b4:41:5a:
aa:b9:f1:ed:c4:fd:34:dd:bb:bc:cf:d4:f6:9d:af:73:4d:ea:
1b:85:54:19:d5:5a:4f:82:e5:7e:9a:2c:52:e6:04:2c:c9:d9:
a1:f5:7b:a0:71:ab:54:2f:29:4d:7b:5a:04:06:4c:15:27:6a:
5d:cc:bc:2b:3d:2b:a1:d1:56:52:0e:8e:e3:34:aa:15:87:65:
bc:f1:19:e3:48:15:f3:b6:9b:4b:55:62:29:92:72:44:ee:f3:
16:57:b9:1c:39:74:a2:8a:8d:88:2a:5a:72:4d:52:9e:24:25:
32:90:3e:b2:ad:0d:de:22:40:3b:26:90:ad:c3:8e:3d:6e:56:
50:df:78:f8:3a:48:1d:db:6f:0e:13:0b:21:58:16:4b:7d:f1:
60:c7:af:a3:05:72:2f:3f:d5:dd:55:e8:40:df:b1:7a:58:11:
26:33:e2:37:08:1d:79:23:c5:13:1b:eb:6d:ee:3d:27:d1:3e:
5f:61:30:fd:7f:38:e8:08:9d:d1:19:2f:e7:b7:a9:52:d9:a7:
dd:ef:e5:10:4b:6b:76:2a:5b:36:b7:71:33:33:e3:39:13:24:
44:8e:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:12 2025 by rpki-client