Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ibHEC1NB6XxD3p2Fp2dnTA1ar9g.roa
File: ibHEC1NB6XxD3p2Fp2dnTA1ar9g.roa (raw, json)
Hash identifier: uHb8WmF+ESmNWLuiSFj72Dle9pT8uTwQ4pzc2c64h24=
Subject key identifier: 89:B1:C4:0B:53:41:E9:7C:43:DE:9D:85:A7:67:67:4C:0D:5A:AF:D8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E10B2DD4EE8200422776C2B0B81DEC48B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ibHEC1NB6XxD3p2Fp2dnTA1ar9g.roa
Signing time: Tue 05 Mar 2024 22:19:01 +0000
ROA not before: Tue 05 Mar 2024 22:19:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:10:b2:dd:4e:e8:20:04:22:77:6c:2b:0b:81:de:c4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 5 22:19:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89b1c40b5341e97c43de9d85a767674c0d5aafd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5d:b1:a4:62:a3:2c:b0:f4:03:68:35:39:be:
f7:a4:89:fd:df:5e:68:a5:b5:94:59:81:b9:df:72:
46:97:73:43:1d:26:ce:8a:52:3c:63:26:28:2e:bb:
df:5c:92:e7:b2:f3:44:52:eb:43:5f:e5:ed:e9:e7:
a3:a7:8c:ab:7e:39:46:fa:e4:47:cf:bf:10:5f:ea:
5c:1a:53:8a:d8:f6:04:85:a1:07:3d:04:72:e2:6d:
58:4b:e8:71:69:d6:9b:83:19:1b:ef:49:de:13:4e:
0f:be:b0:3e:a2:fb:ad:9a:aa:8f:08:37:54:11:cc:
16:e9:14:ff:02:fc:7e:7c:8b:70:5c:c8:4b:b8:73:
c6:7a:71:42:7d:28:4e:d4:58:95:48:e3:2e:54:f7:
3e:f1:69:b9:d2:dd:f2:4b:fa:f0:96:6b:04:e5:f3:
73:76:ef:38:a8:94:8e:b0:5b:82:5a:2b:21:08:ef:
d0:7c:b7:d1:e4:62:45:94:7a:8a:f5:8c:8c:a8:b9:
a1:c0:d7:39:c8:78:72:42:e3:82:6d:11:e1:e9:f6:
ea:eb:7d:89:89:db:31:77:cb:9b:4c:02:98:3a:2e:
7d:90:3e:08:da:81:3b:15:2c:22:95:2f:37:e8:a6:
f9:f7:55:1c:63:fd:42:c3:49:99:c6:6b:b7:4f:23:
c6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B1:C4:0B:53:41:E9:7C:43:DE:9D:85:A7:67:67:4C:0D:5A:AF:D8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ibHEC1NB6XxD3p2Fp2dnTA1ar9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:d7:89:b6:78:ca:64:80:82:bc:9f:b3:92:11:53:3f:2b:24:
b5:ae:07:e9:d5:86:2a:08:d9:b0:b0:32:a7:f9:c5:ee:ad:71:
22:8a:ef:1e:3a:60:23:33:5b:8e:a7:cc:57:76:b4:fa:7f:f8:
a0:17:a7:4c:4e:f6:da:0b:74:9e:ff:da:65:98:d9:60:99:98:
f4:d1:1a:5e:91:1a:cf:52:bc:b3:7f:09:12:c5:0e:92:01:ad:
fa:90:3a:ff:ea:78:78:a5:b8:33:51:95:de:d8:5c:13:b5:26:
2c:48:76:40:bc:a3:d5:9c:3c:02:81:18:d5:dc:ac:b4:8c:f9:
ad:49:68:9b:b5:06:dc:49:1e:d7:3e:e3:83:77:58:a6:08:14:
3c:eb:c8:44:ce:14:86:bb:7c:ed:91:6c:da:9b:e0:7a:86:97:
b1:bd:c0:0d:ff:73:55:95:c4:ea:d1:c0:31:4a:60:8e:b5:ae:
74:61:04:cd:fa:34:7a:d3:74:da:6a:bc:05:fa:50:c0:93:44:
d5:fc:ba:b8:d1:5d:49:56:6d:2a:8a:37:56:c9:37:35:5d:6d:
ef:9d:cc:b4:10:9a:60:85:49:e3:26:81:5a:8d:45:d7:d5:1d:
02:8b:92:27:e6:fe:db:3d:6c:ce:f3:e3:24:5a:74:8b:16:2d:
6b:3a:a1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:54:00 2025 by rpki-client