Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/prGlNvJPGVTknaEcdQSo6Ino9H8.roa
File: prGlNvJPGVTknaEcdQSo6Ino9H8.roa (raw, json)
Hash identifier: OB3WVqSo/sRJySZC5paICQF1bp7YCoZ90MAk0C2pM8A=
Subject key identifier: A6:B1:A5:36:F2:4F:19:54:E4:9D:A1:1C:75:04:A8:E8:89:E8:F4:7F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DBD328865C9B6472101E85C2AE3E798C0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/prGlNvJPGVTknaEcdQSo6Ino9H8.roa
Signing time: Sun 18 Feb 2024 17:10:21 +0000
ROA not before: Sun 18 Feb 2024 17:10:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bd:32:88:65:c9:b6:47:21:01:e8:5c:2a:e3:e7:98:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 18 17:10:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6b1a536f24f1954e49da11c7504a8e889e8f47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:4f:0b:f8:c1:26:a7:94:f7:e1:2f:bc:38:
df:60:36:d8:96:48:37:c7:56:0d:98:a3:e3:ad:0c:
42:ce:ef:09:d5:f1:ca:68:e0:5f:6b:56:68:00:5e:
5e:81:e3:dc:f7:33:85:94:e9:9a:7b:f7:59:45:de:
01:12:18:94:90:4d:28:89:fd:17:b9:d7:18:e6:20:
3d:f9:22:80:6a:3c:d4:1e:14:a7:e6:0e:f9:65:13:
0b:42:c8:f2:eb:4a:d8:95:71:33:1c:77:b3:98:68:
be:88:dd:eb:0a:cf:05:fa:a2:6a:f1:d3:bc:2a:28:
58:cb:d5:7e:77:02:51:e3:77:30:60:50:1f:97:53:
71:55:3c:9b:a5:a9:3f:a9:d7:30:38:f0:dd:63:1f:
83:7b:dc:49:d5:f7:d5:0e:49:a2:8b:9f:b7:5c:87:
69:fb:31:26:30:27:56:5a:94:4f:29:8a:20:30:57:
73:2d:36:95:c7:3b:ec:38:5c:d3:d8:70:62:71:20:
9d:cb:f2:fa:3c:33:0c:2e:3d:5a:16:94:ae:f4:45:
07:84:8f:b5:f8:f6:ac:98:10:3c:e9:9b:29:da:6d:
7b:5f:ec:8b:64:9e:eb:df:08:94:cd:de:16:39:38:
d2:a3:af:c0:ff:bf:3b:07:47:80:a5:0d:c0:66:fc:
48:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B1:A5:36:F2:4F:19:54:E4:9D:A1:1C:75:04:A8:E8:89:E8:F4:7F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/prGlNvJPGVTknaEcdQSo6Ino9H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:93:d5:f8:9b:c8:91:09:d1:76:d6:aa:6f:64:db:5c:ad:5d:
2e:52:54:a8:d9:5d:be:e6:bc:e0:99:ff:8a:12:9a:43:ee:3a:
5c:a1:88:4e:5e:89:7e:1d:0b:df:e9:b1:0b:00:31:f9:87:73:
40:ff:0e:11:8a:17:be:9e:27:93:7f:f7:49:ce:ac:7b:f9:c5:
84:b4:74:d7:1c:9a:55:5c:16:99:1b:64:d3:8a:97:a4:d8:a8:
d9:d3:61:1e:2e:3a:01:a1:bc:ad:ff:33:65:dd:8f:eb:e0:bb:
5a:25:57:13:b1:d8:ae:b0:c6:39:9d:64:eb:b5:52:b0:49:5f:
75:b5:ba:49:b5:e6:db:5f:ec:46:94:40:f4:dc:9d:0b:f4:67:
58:cb:a5:ff:d6:7c:33:3d:27:52:45:a8:45:e9:be:17:b3:19:
75:07:e2:9f:aa:d7:7d:91:2b:47:1e:0f:45:55:46:de:c3:cf:
c6:3d:05:f3:a5:41:82:92:7d:aa:ea:47:aa:9d:05:2b:06:a4:
a4:3b:b8:df:0c:04:00:b8:fa:4b:90:cd:b5:86:3a:23:58:2d:
bf:8d:05:9e:de:97:99:4c:be:5e:95:91:f9:b0:78:1e:2c:af:
86:83:4d:d1:c2:5b:16:ad:e5:b3:84:0b:25:75:c7:fe:21:d5:
c9:76:a2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:33 2025 by rpki-client