Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mVEFLkHNP2g7J8vrT6bGpO1yvaQ.roa
File: mVEFLkHNP2g7J8vrT6bGpO1yvaQ.roa (raw, json)
Hash identifier: Cq7pp1FsLFcnhBd8a+FaEAJmoK+IxrP6imQP6Ch1nDY=
Subject key identifier: 99:51:05:2E:41:CD:3F:68:3B:27:CB:EB:4F:A6:C6:A4:ED:72:BD:A4
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E73FF27BC0DBFC5605361EEBC75F14F7E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mVEFLkHNP2g7J8vrT6bGpO1yvaQ.roa
Signing time: Mon 25 Mar 2024 05:04:45 +0000
ROA not before: Mon 25 Mar 2024 05:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:73fe:a01d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:73:ff:27:bc:0d:bf:c5:60:53:61:ee:bc:75:f1:4f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 25 05:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9951052e41cd3f683b27cbeb4fa6c6a4ed72bda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:d6:f2:98:3d:39:9d:d4:12:8e:dd:32:70:
7e:e5:fa:ce:9b:98:25:61:fe:3a:52:d2:b7:3f:87:
1f:b9:72:86:2d:ae:17:e3:ad:45:9a:6f:60:dc:ae:
10:62:91:be:c5:71:e6:0e:4e:bf:c0:ea:3d:a8:14:
a0:fb:ff:5c:d7:23:ac:95:11:d2:2c:6a:fb:91:c9:
bb:9c:9f:86:d6:7d:4a:c3:a1:67:d6:af:7e:1e:1f:
cf:a5:2c:2f:45:cb:89:9f:ea:ce:b2:03:3e:b1:0d:
b0:02:6b:7b:28:60:18:89:8b:ca:bf:8e:6c:c1:2a:
63:2c:07:a9:bb:ed:02:31:07:b2:dc:b2:1d:94:fe:
47:fa:13:7b:64:89:81:a1:af:c1:fa:1e:ac:bc:fe:
f2:27:a5:40:be:02:aa:79:8f:0c:33:f7:69:c2:71:
aa:04:ae:87:f4:ee:6b:4e:8d:e7:92:f3:ff:7e:c1:
de:95:f0:5a:b4:8e:4d:bf:83:cc:73:06:8f:32:a5:
dc:ba:a1:f1:fc:b4:23:45:0f:44:98:00:a8:fa:d4:
ab:41:56:41:30:35:1e:ce:31:b0:b3:cc:4b:dc:a3:
78:2a:c6:80:d1:ff:96:e1:f2:2c:26:05:4c:c0:84:
3c:f2:45:bf:49:00:fa:3d:d2:01:5f:e0:81:db:de:
59:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:51:05:2E:41:CD:3F:68:3B:27:CB:EB:4F:A6:C6:A4:ED:72:BD:A4
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mVEFLkHNP2g7J8vrT6bGpO1yvaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:ff:68:82:9a:47:ec:c0:ca:fc:b6:64:df:b9:63:35:13:21:
3e:07:5f:0c:d4:00:11:8a:cd:15:23:b9:9d:8d:51:29:cb:0e:
70:03:1f:79:44:a6:cf:60:c6:33:9a:a7:c8:df:03:86:53:85:
e4:4b:e3:28:e1:c3:a9:9a:a8:c0:2d:4c:5c:16:8a:e6:91:f6:
b8:3f:b4:fb:1d:91:2f:98:4e:7d:a5:83:cc:b8:2a:55:5b:90:
bf:b4:12:2f:36:30:d9:b4:b9:3d:16:64:80:fa:33:f2:94:1f:
7d:cc:a6:2d:50:45:dd:38:0c:36:3d:1f:e4:4c:a5:5d:86:00:
97:5d:87:34:21:8c:ef:0a:f5:e5:45:70:e5:50:6f:b2:0f:25:
d1:95:78:fc:96:6f:e8:c2:e1:7a:83:88:2b:26:de:9f:1a:75:
c9:44:d9:db:3e:5a:57:cd:4d:bb:81:48:76:88:96:5a:51:10:
bc:d2:5a:48:52:04:70:2a:bd:67:26:41:b4:1c:87:b5:44:59:
a0:62:1f:49:95:d7:65:d6:4d:86:e3:db:1b:70:a4:32:13:c9:
a8:f0:ee:e7:15:bf:02:90:e6:9b:f9:50:c8:02:29:e9:90:63:
43:b1:4e:4f:8a:0a:79:f1:55:49:e3:50:c6:34:38:df:1d:e1:
8c:08:f6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:14:06 2025 by rpki-client