Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pVdELBCEe_WUc3YWvTuHUP8CpQQ.roa
File: pVdELBCEe_WUc3YWvTuHUP8CpQQ.roa (raw, json)
Hash identifier: 4kJo1ZoppWFezy9thG+Z/cRfLiiGtbYSwIENSfzl2Xw=
Subject key identifier: A5:57:44:2C:10:84:7B:F5:94:73:76:16:BD:3B:87:50:FF:02:A5:04
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E5DB4ACE1F3C72C9F6C1DBED9F3CF4B61
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pVdELBCEe_WUc3YWvTuHUP8CpQQ.roa
Signing time: Wed 20 Mar 2024 21:11:45 +0000
ROA not before: Wed 20 Mar 2024 21:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5d:b4:ac:e1:f3:c7:2c:9f:6c:1d:be:d9:f3:cf:4b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 20 21:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a557442c10847bf594737616bd3b8750ff02a504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:ef:00:75:d4:1f:58:df:f0:c0:0f:76:d7:
cf:96:db:95:fa:82:48:11:c8:a1:7c:38:c3:a0:35:
89:2a:4d:02:f3:2f:9f:1e:d4:b2:5e:69:dd:bd:bd:
ce:f5:4e:57:df:d1:27:11:8d:6d:3f:17:ab:52:1d:
13:ef:c1:e7:ad:95:f4:6a:40:f4:2e:64:59:9e:a1:
50:1e:3d:5b:a7:8f:12:0f:ad:8e:12:f4:1c:2f:00:
57:82:5d:c2:f0:00:a4:8b:e9:e1:20:e7:ec:5f:5d:
81:79:9e:74:7b:57:25:bb:04:be:52:c5:b6:3a:36:
58:2f:ef:a6:f6:12:50:09:9f:29:c7:b4:d5:98:46:
4d:5b:7f:cc:6c:9f:20:b0:c2:36:60:01:3a:b3:81:
09:4f:c5:59:80:42:26:3e:5e:bc:cb:a9:e9:32:9a:
d8:e7:71:c6:97:c6:16:fa:a0:97:b9:cd:fc:20:6a:
fc:8c:2e:8f:38:8e:2b:8a:d1:e2:0b:95:6d:51:a5:
9a:ab:69:09:b3:53:c4:09:65:2c:b9:27:4f:f4:2a:
20:ef:63:21:c0:03:b4:ef:37:d8:d7:0a:51:af:0f:
fb:15:6e:c4:2c:2f:c1:a8:6d:83:9b:b4:2f:35:2d:
e4:3c:fe:95:b7:25:05:82:cc:4a:ce:13:43:8e:26:
ad:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:57:44:2C:10:84:7B:F5:94:73:76:16:BD:3B:87:50:FF:02:A5:04
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pVdELBCEe_WUc3YWvTuHUP8CpQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:7b:c2:28:15:c4:d1:e8:67:3b:d6:54:ff:e8:d8:b3:e5:37:
b3:8f:60:c2:be:0c:97:f1:ac:70:bb:82:b5:2d:b6:8d:f9:0a:
9c:b2:c8:41:f2:74:4d:77:c8:cd:4e:e6:5c:7b:20:1b:07:c0:
c1:a7:ed:9a:4a:37:8d:67:9d:65:54:29:53:ea:83:ec:e1:d3:
8f:a2:87:9a:ef:92:61:ac:c4:ef:04:dc:8b:09:bd:0b:bd:b2:
44:35:96:3b:2b:bf:df:df:9a:78:a5:2d:09:49:3b:a2:80:0f:
f4:b4:e4:c2:ca:f1:3a:d0:d1:0a:00:d2:b7:aa:2c:f5:e1:7c:
b6:1c:e4:05:97:1d:cc:52:4a:a1:20:a2:e5:f3:ca:46:d3:c8:
29:a6:2d:41:9a:25:98:07:b6:41:28:b5:7c:d2:7c:b1:67:93:
f8:4c:4d:96:79:48:e1:93:57:25:54:2d:b1:6b:40:17:80:c1:
df:93:df:1d:93:d9:0b:ee:b3:13:de:56:8f:36:2f:8d:67:c7:
a7:c7:cd:8a:6d:d5:38:0e:d0:bd:b0:e5:65:cf:55:6f:fb:39:
e0:11:dd:5f:7e:b5:10:df:e7:96:ad:cc:f3:d7:65:31:75:b0:
80:cb:94:c3:6c:f1:09:76:a9:5e:a5:cf:c5:40:d2:5c:07:57:
cb:d5:00:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:57 2025 by rpki-client