Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lRIfMVA7Rg9tklx7yA_2PBoLyA0.roa
File: lRIfMVA7Rg9tklx7yA_2PBoLyA0.roa (raw, json)
Hash identifier: AE84iT4Phhmiv+Sq4VDC4kvaj+wDi45xgIUqcL2WV1c=
Subject key identifier: 95:12:1F:31:50:3B:46:0F:6D:92:5C:7B:C8:0F:F6:3C:1A:0B:C8:0D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D94A9D953C8952646F2431AE668DD2DF0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lRIfMVA7Rg9tklx7yA_2PBoLyA0.roa
Signing time: Sat 10 Feb 2024 20:16:15 +0000
ROA not before: Sat 10 Feb 2024 20:16:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:94:a9:d9:53:c8:95:26:46:f2:43:1a:e6:68:dd:2d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 10 20:16:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95121f31503b460f6d925c7bc80ff63c1a0bc80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:71:92:2e:66:7f:4b:47:6c:95:88:05:7f:
08:95:b2:b5:51:12:22:7c:8f:4b:1c:9b:f0:55:78:
36:75:10:e1:e1:ba:84:45:18:76:ec:27:4f:9a:0f:
b3:60:3e:c8:f6:82:4d:23:f3:ac:67:97:dc:31:7f:
53:20:2a:e7:76:2e:3e:5f:20:c6:c4:6a:52:3c:d5:
e9:53:2a:b0:49:b5:7b:a9:78:d9:bc:c1:5f:00:43:
c8:ed:3c:db:04:8c:ba:34:95:f8:47:c3:13:2f:3b:
b2:69:4a:28:59:fa:31:46:00:78:4b:d6:67:bf:cd:
6c:a5:38:7a:46:dc:42:ea:3a:11:55:ee:5a:0c:52:
95:ac:7b:b3:db:b5:47:a4:04:40:ae:3d:36:ca:0f:
71:3c:24:43:27:59:fd:d1:ab:1f:bb:4e:30:3f:9f:
62:29:13:c9:58:13:44:54:be:31:db:5b:ca:81:fb:
1b:23:27:57:0f:94:f5:b7:1b:6f:18:ce:f0:71:98:
7a:c1:05:7d:ec:1f:2e:af:32:84:69:92:b9:be:c3:
17:a9:df:d3:b2:a4:12:fe:44:7b:85:63:ca:ce:7e:
f8:f5:1b:ce:77:35:5d:dd:f6:07:13:92:8a:2b:6b:
c8:8d:22:2d:d6:b1:89:a4:a4:8a:e0:57:a0:3b:19:
ff:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:12:1F:31:50:3B:46:0F:6D:92:5C:7B:C8:0F:F6:3C:1A:0B:C8:0D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lRIfMVA7Rg9tklx7yA_2PBoLyA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:c6:5e:61:38:13:9c:42:6f:b9:86:02:89:76:e3:28:0f:ef:
04:d9:19:67:26:45:83:6d:38:24:28:2f:82:77:6b:c3:8e:8a:
ae:1e:59:c5:ed:ee:4e:af:f5:ba:ad:fc:a7:af:7b:c1:24:15:
59:46:63:b7:63:f4:01:61:01:4b:aa:78:53:6d:ac:4e:89:b7:
aa:64:18:9e:71:60:22:04:4d:61:bb:3b:55:c0:5e:01:e6:ef:
51:bd:49:9f:59:7f:0a:a2:2d:e4:aa:e5:5f:90:7a:48:98:fe:
a5:10:0b:4b:25:e8:d2:a4:a3:65:4a:dc:ec:7f:fe:1b:95:87:
4c:eb:fb:ed:ff:66:ec:84:c7:77:85:c5:29:5e:51:d0:ab:fd:
fc:bd:ae:a1:39:44:ee:ce:bc:ca:cf:e2:55:cf:88:73:f4:87:
01:e1:de:df:49:d0:a6:b1:6d:d5:01:c8:6f:3c:80:3a:ff:6f:
2a:f8:d3:b3:af:39:a3:3f:15:58:63:a3:4a:b5:92:47:b1:50:
fb:b2:29:14:39:c2:e2:66:84:d7:40:2a:7b:2a:36:61:24:ce:
14:4c:0b:71:d5:20:9e:1e:b3:8a:d1:9e:d4:42:a6:e9:bc:ab:
b1:08:30:44:af:13:0b:0f:2b:88:1d:ae:eb:41:ec:42:92:da:
71:ac:ab:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:04:07 2025 by rpki-client