Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lOKCZKr1UXRZa-Usj9cddgBNTPA.roa
File: lOKCZKr1UXRZa-Usj9cddgBNTPA.roa (raw, json)
Hash identifier: 0eVYFxtJCJZ7EqnlFMI7U380p24+CTAlvQZOAsiJedY=
Subject key identifier: 94:E2:82:64:AA:F5:51:74:59:6B:E5:2C:8F:D7:1D:76:00:4D:4C:F0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D7EFCD647AA6F4C7FA543D52C955CD32A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lOKCZKr1UXRZa-Usj9cddgBNTPA.roa
Signing time: Tue 06 Feb 2024 15:15:15 +0000
ROA not before: Tue 06 Feb 2024 15:15:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7e:fc:d6:47:aa:6f:4c:7f:a5:43:d5:2c:95:5c:d3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 6 15:15:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94e28264aaf55174596be52c8fd71d76004d4cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:21:8e:e9:16:47:f2:32:51:6a:e6:b2:59:0d:
8f:86:61:c8:77:7d:09:81:f2:9c:94:67:d1:a5:81:
49:19:89:da:1c:b1:68:6a:13:05:55:a5:28:1e:9e:
e2:c9:82:a2:68:28:d6:b5:1e:1a:66:14:1c:50:1f:
05:f5:4a:aa:d5:68:ac:a3:27:b0:e0:4e:99:86:6e:
f9:a8:b0:36:60:e6:f8:74:03:60:29:19:22:df:1d:
67:6f:98:a9:c8:6f:b9:1b:36:b3:b9:a8:c2:8d:c5:
68:cf:20:0b:3a:5e:24:4c:f9:70:69:59:9b:ca:7c:
be:45:5d:34:f0:d2:49:83:67:ee:f5:04:80:f5:87:
ca:32:be:a0:72:c8:9c:45:44:04:f4:24:71:1c:d1:
a4:a8:8b:8b:f5:76:6d:e8:44:0f:7f:14:31:84:31:
3b:bf:90:c3:e2:07:73:b6:f4:15:e5:79:f1:70:71:
6a:ff:e7:b8:97:5a:74:64:49:50:53:db:93:9f:04:
80:f8:5a:05:9f:30:66:72:88:29:a1:30:54:b2:f7:
d8:1d:2e:e5:e3:a4:f0:16:7a:9f:02:05:b1:d9:a5:
f1:28:c2:0d:a4:05:ec:f4:2c:ca:1b:32:b2:37:6f:
d9:00:c3:4e:bb:ba:9a:77:30:9c:10:7a:03:84:64:
5e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E2:82:64:AA:F5:51:74:59:6B:E5:2C:8F:D7:1D:76:00:4D:4C:F0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lOKCZKr1UXRZa-Usj9cddgBNTPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:22:ed:b3:fe:28:4c:5b:4c:e7:10:49:81:87:a2:0d:3a:09:
d3:6a:fc:e2:13:45:3c:16:f9:c8:9e:b1:14:f2:29:8d:50:1b:
19:2e:3e:bf:55:9f:6c:77:a5:d2:8f:11:20:48:b7:62:e9:a9:
64:c7:5f:18:b9:d4:2f:49:9c:ed:c4:a0:70:4f:64:98:97:78:
88:87:85:54:0b:16:5a:4b:c5:d0:2d:72:2e:6d:92:80:4f:ff:
8e:c1:b2:3a:7b:82:c4:bc:36:73:89:28:d2:63:23:a8:4d:82:
67:8f:27:db:c8:e6:17:31:ff:74:ec:1f:74:f2:8b:6a:83:c9:
3f:13:a5:96:80:a0:5f:8c:f0:de:35:91:e1:17:44:cf:7e:8f:
93:f6:bb:14:e0:4f:b4:ea:50:de:b6:1d:8c:f6:4c:ac:9f:90:
6d:f4:70:15:09:0b:84:a5:7e:59:4e:b3:33:66:30:a5:8e:22:
14:14:2d:9e:c9:44:6f:e7:0e:15:e5:36:da:f3:60:aa:48:72:
c1:ba:06:d1:9a:91:6b:cb:dc:d7:66:9a:ea:76:c9:d5:1c:eb:
7a:82:7b:1b:50:08:50:c1:be:0d:d5:47:7c:b3:56:17:4e:68:
9b:71:c0:cd:18:4c:e2:01:c8:b8:f9:4c:de:c5:df:fc:29:d3:
81:44:2e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:11 2025 by rpki-client