Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nV0eyJMBsQIQJwHho4BoWhcinF8.roa
File: nV0eyJMBsQIQJwHho4BoWhcinF8.roa (raw, json)
Hash identifier: AfNEj6w1RouNUpga7HKpwxrYh7vprPfdo9ye/hVHssc=
Subject key identifier: 9D:5D:1E:C8:93:01:B1:02:10:27:01:E1:A3:80:68:5A:17:22:9C:5F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D6DD166D94EB99E8542F575CA93B492B1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nV0eyJMBsQIQJwHho4BoWhcinF8.roa
Signing time: Sat 03 Feb 2024 07:14:16 +0000
ROA not before: Sat 03 Feb 2024 07:14:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6d:d1:66:d9:4e:b9:9e:85:42:f5:75:ca:93:b4:92:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 3 07:14:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d5d1ec89301b102102701e1a380685a17229c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:74:bb:f1:6b:5c:c8:3d:79:e6:d3:89:bb:b0:
fd:e8:a0:d3:7e:0a:ff:65:aa:93:29:4b:24:e0:c1:
0a:67:bd:e1:79:90:b7:5e:3c:84:77:d1:54:2c:0e:
54:f6:3e:8a:02:f4:19:af:9d:67:e0:ef:2b:b2:b3:
c3:1f:f0:8a:ec:90:67:d7:8b:39:87:ab:59:65:de:
00:4c:e6:13:ed:92:76:40:5f:e1:ba:a3:88:f9:73:
f5:c5:19:5a:0c:f2:85:7a:9f:9d:87:aa:f5:3d:0e:
21:8a:ec:23:77:48:64:f8:08:f6:27:92:7e:17:aa:
e8:9a:66:e5:0d:02:53:75:94:c3:52:f3:87:cf:9a:
c0:fd:6d:79:ff:a1:05:75:3c:ad:55:2e:ab:93:b3:
9a:e3:9b:ca:56:a1:cb:90:e4:46:ef:86:9d:89:8f:
e6:76:1e:63:c1:7c:50:8b:cc:70:e6:ac:86:9c:be:
5a:4f:e4:58:09:34:65:c8:21:70:7d:c9:2b:0c:bd:
28:5f:5e:67:5f:77:81:96:20:56:08:9c:0b:07:d6:
9c:1e:b5:bf:4f:09:02:21:28:8e:c5:ad:68:de:71:
32:1b:67:00:df:8c:29:25:f3:7e:37:1a:29:3a:7d:
27:5f:5c:1b:78:01:26:52:c4:25:01:27:69:87:43:
56:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5D:1E:C8:93:01:B1:02:10:27:01:E1:A3:80:68:5A:17:22:9C:5F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nV0eyJMBsQIQJwHho4BoWhcinF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:41:d0:e0:c7:4e:72:ac:ed:df:34:f8:cf:69:9e:72:68:93:
2f:e4:89:8a:f0:a7:1e:18:3e:a9:18:f6:b5:6b:70:00:46:03:
c0:d7:9e:34:38:47:f0:15:72:e9:2a:bd:f9:0e:24:fa:ae:36:
4b:f9:40:c1:64:80:19:ed:36:ac:57:6a:41:0a:de:19:02:6d:
f2:1f:ae:d7:28:cf:c4:2a:5a:24:be:ae:6b:35:77:be:55:63:
c3:de:32:38:ce:05:80:de:28:1f:3b:c2:69:75:7a:21:39:95:
e2:5c:f1:e4:1a:84:f3:28:bc:e1:6b:d1:ee:8c:2f:ab:1f:02:
b2:81:37:a0:d3:f2:5f:7b:bf:76:29:3b:3d:41:0e:c3:4d:07:
ee:fe:83:02:d9:2d:9f:7c:52:cf:df:47:97:07:01:74:df:67:
52:6f:60:6d:c6:eb:48:ad:b7:1f:c0:b4:f4:f3:2c:14:2c:7e:
85:93:67:42:5d:84:98:11:7f:be:30:c2:ae:8e:b6:7b:a6:4b:
fe:5b:3f:e4:a3:0f:57:88:96:47:e0:68:f4:ae:f9:88:2c:a9:
95:98:3b:9c:02:2c:8c:9e:a6:5c:f3:70:81:e0:35:46:71:de:
39:b9:f4:68:eb:65:60:69:58:1d:8b:88:9a:b2:41:79:e6:ee:
bd:c4:50:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:22:36 2025 by rpki-client