Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pVBArt_U8cXjfTiTSvONxGJuqrY.roa
File: pVBArt_U8cXjfTiTSvONxGJuqrY.roa (raw, json)
Hash identifier: mydH//sskteseibWt7Ebm+xCdia25ynKFetrL1UuVwo=
Subject key identifier: A5:50:40:AE:DF:D4:F1:C5:E3:7D:38:93:4A:F3:8D:C4:62:6E:AA:B6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D8C835C728D508C7AFCABDE45ADDAECEB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pVBArt_U8cXjfTiTSvONxGJuqrY.roa
Signing time: Fri 09 Feb 2024 06:17:15 +0000
ROA not before: Fri 09 Feb 2024 06:17:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8c:83:5c:72:8d:50:8c:7a:fc:ab:de:45:ad:da:ec:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 9 06:17:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a55040aedfd4f1c5e37d38934af38dc4626eaab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fd:22:9b:c0:18:a0:9e:6d:84:f6:6b:39:4f:
89:63:7b:1a:54:37:95:95:45:92:83:65:4a:ff:26:
c2:39:3b:74:5f:27:f8:5b:7c:14:23:b8:5a:16:63:
b7:e3:4f:ba:df:81:a1:d0:10:50:a6:02:a3:8f:51:
23:d3:7e:14:50:85:e7:b4:15:ea:a9:bc:59:e2:70:
de:9f:a8:2b:07:88:91:70:d0:7f:57:3f:37:71:3e:
0d:78:5b:e0:4d:68:92:81:97:8a:49:e0:8a:d2:55:
d4:53:f8:cd:89:f4:79:96:6d:2b:cc:e0:27:e5:b3:
10:4b:78:15:b9:0c:63:c3:0d:0e:66:11:91:7e:38:
a3:95:04:50:e5:fd:99:13:f3:6b:2a:7d:7a:bd:43:
94:51:6e:5f:f6:42:cf:d4:36:18:4b:7b:36:da:6f:
70:ab:dc:1d:02:91:1b:fd:77:9a:5e:49:ea:cf:81:
b8:70:af:fd:6d:b6:d7:0d:98:ae:9a:8f:5c:b6:34:
7c:f4:a4:23:cd:69:10:cf:07:ee:a8:46:20:05:30:
ee:b1:46:1d:a7:a8:0d:8d:57:9f:b9:2e:93:cc:89:
e1:43:e7:67:49:2e:47:39:39:74:f1:b0:4a:1e:f5:
a8:cf:fe:72:58:a1:11:f5:1e:b6:29:73:6e:e1:38:
3e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:50:40:AE:DF:D4:F1:C5:E3:7D:38:93:4A:F3:8D:C4:62:6E:AA:B6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pVBArt_U8cXjfTiTSvONxGJuqrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:31:70:48:03:24:3a:fd:53:d8:94:3c:1a:2a:71:7e:57:71:
db:1e:bd:1c:41:e4:32:72:85:05:49:16:45:be:03:bc:c6:d0:
d2:89:fc:9f:fa:e8:01:c1:77:19:d3:3c:08:a0:1c:ae:b7:36:
75:0a:0f:14:fd:02:58:16:79:ef:6d:ef:e9:d6:df:7b:67:db:
d6:91:5c:36:7b:e9:28:3b:04:65:5b:c8:d8:53:92:26:1d:fd:
bf:27:92:2c:47:49:57:54:50:11:fc:66:4f:11:fa:13:e8:94:
e5:fc:0a:35:7e:23:c8:85:00:21:25:63:cf:bf:bc:79:9e:31:
e1:6d:14:46:3d:c1:4c:fa:ee:fe:ec:5b:20:6d:28:4e:8d:a9:
64:99:f2:20:ae:ed:1a:b8:ba:30:8b:86:a6:5a:42:f6:e4:5e:
26:fe:ff:bc:66:1f:50:5b:0e:0d:2e:bf:9c:c8:ae:ac:2f:04:
b7:05:30:a8:e3:9a:fe:72:e1:f8:9e:4a:87:77:e8:2d:b3:41:
19:ee:dd:1b:df:db:f2:68:80:f8:4a:b5:8a:03:cf:bb:ea:8a:
1c:07:65:5b:e4:51:bd:3c:93:45:81:d7:78:c3:94:7a:c1:71:
c3:ab:81:47:d8:05:ac:44:bb:5f:bf:8d:77:02:a2:70:12:00:
d2:c6:f7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:30:40 2025 by rpki-client