Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/l61y6ZfF_1mopQro4SycuFLGKIk.roa
File: l61y6ZfF_1mopQro4SycuFLGKIk.roa (raw, json)
Hash identifier: WupkE93IkA8CAde1dxCQ4bclJaflH4ppFxA9VzcZDjM=
Subject key identifier: 97:AD:72:E9:97:C5:FF:59:A8:A5:0A:E8:E1:2C:9C:B8:52:C6:28:89
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA1B8E518C947AD4BD7781AAA85BEC2FD
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/l61y6ZfF_1mopQro4SycuFLGKIk.roa
Signing time: Mon 25 Dec 2023 16:04:58 +0000
ROA not before: Mon 25 Dec 2023 16:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:a1b8:4848/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a1:b8:e5:18:c9:47:ad:4b:d7:78:1a:aa:85:be:c2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 25 16:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97ad72e997c5ff59a8a50ae8e12c9cb852c62889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:db:ce:e4:5b:aa:89:5b:5b:17:51:fe:9d:73:
56:a9:6a:c5:7e:ab:a9:4b:72:bd:7b:42:f6:43:fa:
47:fa:26:7f:18:8b:b4:8b:e5:32:7f:26:c1:46:a7:
23:4c:c1:1d:22:d5:db:5e:da:99:a0:d0:2e:8b:d6:
2f:de:6c:d4:c9:43:49:39:68:af:06:e3:b0:6f:f1:
84:b5:11:c0:3e:aa:57:1b:4f:b5:1b:d6:b5:fc:35:
12:b3:98:e8:0b:0d:cc:80:1b:08:89:81:74:32:33:
3b:9f:9b:da:31:03:cd:1c:10:f6:cf:9d:c3:6d:7c:
54:23:2f:00:62:66:a1:f2:06:8b:c2:d2:48:63:4e:
a0:bb:56:62:d3:df:d0:fa:a0:2a:1d:81:50:b4:05:
77:f0:2d:59:c7:55:da:24:86:31:ea:df:04:ca:26:
33:86:73:97:50:c8:36:51:9a:f6:cf:54:c4:b4:70:
19:8d:d9:34:ec:d4:ac:87:29:4e:29:1f:4d:f2:c6:
de:c2:7a:d1:9d:68:78:bb:aa:cf:b4:74:22:40:d9:
cb:56:5a:c5:a9:f5:94:7f:b9:78:a7:13:cd:76:7e:
a0:b6:4b:57:74:ec:cc:a6:2f:1d:3d:81:75:f8:a6:
ea:eb:df:2e:78:be:3f:4b:9d:8e:2e:66:ac:f4:f4:
99:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AD:72:E9:97:C5:FF:59:A8:A5:0A:E8:E1:2C:9C:B8:52:C6:28:89
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/l61y6ZfF_1mopQro4SycuFLGKIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:57:9b:f0:d6:ed:9c:bc:d0:ab:32:89:d9:ec:a4:5e:27:0d:
b7:96:91:02:b1:b6:bd:d9:f2:2b:5c:f8:8d:72:34:7c:5b:33:
09:af:b9:78:80:b4:57:53:39:78:bc:05:d1:90:a2:a0:db:dd:
24:03:d5:ca:88:f2:42:dc:3a:52:1c:61:63:ae:3b:de:60:9d:
7b:0c:7f:fd:02:16:fd:f0:df:d0:ec:b4:84:cb:d3:da:10:09:
6f:ee:27:e0:69:71:41:08:e9:0f:03:c5:ea:18:50:d6:21:8e:
d6:e3:cf:c8:b0:f4:2f:75:88:9e:33:e4:4f:12:75:6a:6c:0f:
3f:a4:1e:99:ae:b8:0c:39:96:72:6d:22:bd:c0:94:f0:ee:5a:
ea:b9:9b:30:4d:f3:9f:28:c7:06:f1:95:17:48:6b:e0:ca:43:
e5:22:81:d1:d9:5f:12:c3:82:6d:fe:3c:fa:22:78:fe:7d:e1:
77:a9:2b:65:d1:cd:3b:45:f8:0b:30:13:35:2e:67:e5:27:f5:
1e:a9:e9:69:75:93:49:1a:68:82:51:c0:d3:f5:aa:0e:cc:ba:
f7:99:37:95:cd:b4:0a:c8:8b:3d:fd:a9:78:ed:87:a4:cd:de:
33:ae:9a:8e:bf:49:2b:ae:b2:cc:ff:93:77:f5:83:5b:b7:6b:
df:5b:7c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:00:07 2025 by rpki-client