Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/k63dogG5XJ68cLHK8cFzsrjlW1s.roa
File: k63dogG5XJ68cLHK8cFzsrjlW1s.roa (raw, json)
Hash identifier: B88CqWBwTXUu9iSoawutTC/MSuTYcX2/GuwrTF4kDJQ=
Subject key identifier: 93:AD:DD:A2:01:B9:5C:9E:BC:70:B1:CA:F1:C1:73:B2:B8:E5:5B:5B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E4763C66AB40E37369F6A62D452D65448
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/k63dogG5XJ68cLHK8cFzsrjlW1s.roa
Signing time: Sat 16 Mar 2024 13:11:44 +0000
ROA not before: Sat 16 Mar 2024 13:11:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:47:63:c6:6a:b4:0e:37:36:9f:6a:62:d4:52:d6:54:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 16 13:11:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93addda201b95c9ebc70b1caf1c173b2b8e55b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c4:d5:5f:bc:dd:0f:39:35:53:f7:6d:cd:21:
e6:a4:c7:e7:f6:b5:2a:66:c4:25:f4:cd:0a:f5:3b:
81:70:29:c5:1e:11:22:42:08:81:e8:a9:af:16:da:
9f:5e:68:83:c0:55:70:ae:37:3b:7e:96:cd:64:8d:
31:25:1f:ac:a0:6a:9f:a7:6f:8c:99:e7:cd:55:d7:
24:aa:c0:88:b1:9c:a9:25:57:02:c2:6b:75:c1:ba:
36:de:9a:32:1b:c8:02:8f:cf:f7:58:af:14:e4:9e:
7b:58:48:66:96:55:ed:1f:2a:e9:6b:4f:54:cd:64:
bf:4c:d6:67:2c:c5:52:73:ec:f1:9b:71:da:63:2e:
93:2c:a0:89:19:e3:10:bd:d4:5d:e7:b1:d7:c0:de:
50:48:eb:55:7b:17:4b:56:d6:ec:3a:f2:ff:26:78:
0b:77:09:38:b8:6f:b2:37:82:45:d5:cb:b5:f0:1b:
df:00:7b:c3:17:90:94:62:48:8a:a2:0b:9f:53:39:
fc:8e:1b:cd:83:ce:9a:50:56:9d:c4:97:dd:f7:4b:
3d:dc:69:23:47:bf:3f:56:91:6a:fa:a1:ba:61:32:
55:0d:1c:68:33:0e:92:fa:fc:a9:9c:46:4f:e5:07:
01:1d:a7:05:fb:94:1f:c9:32:a0:50:ab:da:65:39:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AD:DD:A2:01:B9:5C:9E:BC:70:B1:CA:F1:C1:73:B2:B8:E5:5B:5B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/k63dogG5XJ68cLHK8cFzsrjlW1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:50:98:04:8a:77:9a:54:9a:35:dd:c9:35:6d:91:44:52:33:
17:ed:8c:45:67:ef:07:51:de:60:74:71:68:b0:c3:12:66:30:
e2:64:ea:99:37:56:44:71:68:0e:5d:dc:1e:92:f6:10:ad:84:
a5:d0:5f:8e:55:d7:37:0e:81:94:18:b0:39:35:bd:ba:4c:57:
cd:8a:3d:53:63:c6:9a:f2:28:71:5f:de:1b:a3:21:a0:7f:0e:
1b:50:d4:8a:c7:71:63:a2:b7:8a:7b:1e:7d:5b:b9:5b:df:f6:
3e:a6:8e:18:d1:e0:ac:9a:4e:bf:ce:18:45:aa:28:cb:da:d7:
92:4d:21:09:50:a5:68:40:94:64:c6:6d:8b:cb:79:34:8e:22:
bf:7e:d7:5f:02:d5:9a:53:a7:f9:5c:07:05:57:83:ab:c3:7d:
7c:e3:85:ea:c2:51:25:b6:f0:93:13:4f:87:50:4d:dc:74:55:
68:89:c6:dd:f8:54:ff:3f:f8:8f:a7:d1:57:40:86:41:80:66:
89:9f:d9:79:f6:94:d0:9f:a1:2c:40:d0:47:57:5c:35:e9:ab:
38:9d:c8:8f:55:81:19:33:7c:19:b9:47:42:c2:bc:98:4e:17:
d1:41:c1:71:f1:c7:63:20:ab:09:44:7c:b1:7c:11:2f:a9:ff:
1e:fb:97:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:35:34 2025 by rpki-client