Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/hO6Zdtuv8CFOnuGJRqHdLVbesZA.roa
File: hO6Zdtuv8CFOnuGJRqHdLVbesZA.roa (raw, json)
Hash identifier: UBMsaDtZm/JbldlYFhLqQ4i/SaBX5Fc1yT0BH+vCLFw=
Subject key identifier: 84:EE:99:76:DB:AF:F0:21:4E:9E:E1:89:46:A1:DD:2D:56:DE:B1:90
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DBBB3D701D7BD5E74BB66F0FC9E4719C6
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/hO6Zdtuv8CFOnuGJRqHdLVbesZA.roa
Signing time: Sun 18 Feb 2024 10:12:21 +0000
ROA not before: Sun 18 Feb 2024 10:12:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bb:b3:d7:01:d7:bd:5e:74:bb:66:f0:fc:9e:47:19:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 18 10:12:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84ee9976dbaff0214e9ee18946a1dd2d56deb190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:78:0b:d0:3b:c0:50:2c:ae:45:d1:85:e2:
ee:9f:1a:e1:1e:a5:03:af:08:c0:89:69:d0:b7:19:
68:3b:c9:06:71:bd:1c:31:15:1f:81:13:64:46:1e:
39:0a:96:c0:d5:01:b7:e0:5a:fe:d8:65:2e:1d:59:
0d:90:00:a8:c5:5a:79:c0:85:43:a8:4d:a6:d1:81:
ef:9e:0e:57:1f:c8:6e:34:08:cc:d4:57:40:0d:47:
42:9d:8d:c6:cb:7f:70:4b:58:a3:fc:6e:c8:88:32:
9b:5c:e8:91:30:68:1a:c1:bb:39:98:ae:bd:64:7b:
51:21:fc:f5:25:7f:b9:11:15:2f:f3:6f:5b:e5:aa:
b9:c4:77:cc:53:00:85:2d:45:29:31:a7:9b:50:24:
16:4d:26:03:7b:47:4e:01:cb:e6:b0:2e:8d:c9:01:
51:17:5a:44:47:f2:22:4d:2b:c2:3e:c2:da:59:c1:
8f:98:32:ff:ba:49:36:f8:f7:2e:36:bb:0b:a8:68:
59:38:66:b4:eb:73:47:7d:3f:c3:a3:63:f5:fe:1a:
6d:7b:28:fb:61:49:92:1c:03:82:58:99:29:09:42:
27:17:10:7b:16:ba:64:d8:f0:8c:85:b5:cc:b6:10:
81:12:2b:45:bc:b8:af:ca:65:ee:48:7f:e7:08:a5:
12:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EE:99:76:DB:AF:F0:21:4E:9E:E1:89:46:A1:DD:2D:56:DE:B1:90
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/hO6Zdtuv8CFOnuGJRqHdLVbesZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:24:a4:a0:01:f3:ca:29:cc:bd:69:3c:c3:55:d4:45:63:4e:
04:de:17:d4:c2:d4:0b:0b:23:03:6e:b7:83:cf:d9:cc:a6:3d:
a7:6e:b8:a2:7a:31:f3:e3:fc:40:69:ee:ec:83:db:fa:d6:4b:
57:eb:d9:a9:40:7c:d2:a1:3d:c6:8c:d2:a4:b6:5d:3f:15:f9:
d4:1f:c5:e6:7b:a8:61:fa:ce:30:b2:4f:e1:c6:6d:bf:e8:29:
77:80:81:8a:67:f7:eb:e9:c0:87:cf:04:c4:a9:1f:af:37:d3:
44:da:27:d2:41:60:6d:0c:64:b4:70:b9:d2:fa:92:f2:87:88:
60:2f:1a:b7:b3:1a:7b:ad:56:6c:e6:9b:be:e8:3b:59:3c:0e:
ff:f3:70:cf:3b:19:08:04:01:96:ba:03:a4:ab:6a:43:4f:9b:
ca:85:88:02:70:60:e4:cb:c0:2e:db:35:ac:6f:1f:f2:a9:dd:
1b:f6:bc:5c:60:ac:c0:35:e6:2e:10:91:2c:49:3c:85:2f:04:
94:ef:c9:95:dd:38:a8:30:21:25:a5:c2:1a:95:9c:68:a5:5e:
8c:34:0b:d5:78:59:36:f6:bf:df:0c:8d:6b:19:99:6c:00:b0:
a8:19:9f:6f:45:a0:e2:84:2c:53:2d:85:a8:ed:39:e8:68:d8:
c8:23:19:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:24:01 2025 by rpki-client