Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/r8sbNrSPQ4uFemMvuMhTiPIyYxc.roa
File: r8sbNrSPQ4uFemMvuMhTiPIyYxc.roa (raw, json)
Hash identifier: sPAEQepJ4ke6OAXG310bF2O8B1RcF60bN+x68VrhXKQ=
Subject key identifier: AF:CB:1B:36:B4:8F:43:8B:85:7A:63:2F:B8:C8:53:88:F2:32:63:17
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DB9CA8770BC8FBEB9AA1C37C27EDC9878
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/r8sbNrSPQ4uFemMvuMhTiPIyYxc.roa
Signing time: Sun 18 Feb 2024 01:17:54 +0000
ROA not before: Sun 18 Feb 2024 01:17:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b9:ca:87:70:bc:8f:be:b9:aa:1c:37:c2:7e:dc:98:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 18 01:17:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afcb1b36b48f438b857a632fb8c85388f2326317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b5:c7:4b:0e:4a:1b:c3:42:a4:42:c9:bb:ce:
ac:e8:f0:ce:de:1d:2b:0a:30:93:d4:af:0a:05:27:
f6:38:16:1a:b2:cb:7a:bb:81:fa:1e:e6:f3:c4:49:
b3:9a:90:9c:d8:a9:75:2a:c0:b8:9f:25:39:cd:ff:
88:8f:69:fd:02:12:5a:a1:57:7a:cf:a8:23:3e:47:
70:e1:46:2a:c6:0e:35:98:23:25:69:74:fe:9e:98:
32:f1:5b:4c:9a:20:e7:3d:1f:6a:6a:a3:d6:c7:77:
da:50:b1:f0:b5:f5:86:03:08:ec:56:aa:2b:b0:b6:
4c:46:71:f6:29:42:4f:a9:56:8d:e2:44:ed:b2:ba:
18:c3:cc:1f:a4:0b:69:da:7f:30:91:a0:23:81:6a:
7d:15:2c:72:53:0b:0c:80:26:e5:d8:b0:6e:ac:07:
77:68:31:6c:f4:80:f6:31:32:36:de:e3:e6:4c:7e:
84:80:6b:b8:63:9a:6d:d6:10:6f:d5:dd:9f:f2:e8:
a8:6c:e3:82:c5:41:8b:59:bf:4e:40:d2:54:40:bd:
cc:b8:9d:59:47:42:0e:2f:37:6e:85:33:6a:21:95:
88:2c:cd:bb:29:2a:2c:eb:1b:48:df:20:f6:e2:d1:
1f:ad:64:78:ff:aa:ce:8e:dc:72:13:af:bc:36:d5:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CB:1B:36:B4:8F:43:8B:85:7A:63:2F:B8:C8:53:88:F2:32:63:17
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/r8sbNrSPQ4uFemMvuMhTiPIyYxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:0d:97:35:15:38:60:f6:6f:de:1b:9d:61:23:73:54:71:02:
be:5a:a1:67:91:59:38:dd:41:ce:39:92:17:84:a2:c2:02:e3:
a5:e0:34:e9:f7:5d:d6:42:62:9e:86:9a:8c:3b:8b:11:21:c5:
67:4e:51:0e:39:34:2b:41:77:5f:53:ae:9e:60:b7:18:e7:d1:
ae:5f:f4:45:88:0a:7a:a3:1c:d3:dd:8d:61:cc:a4:a4:95:a5:
66:58:18:5d:73:ec:3a:34:da:c5:37:63:34:fc:64:ef:1a:35:
09:5e:07:6f:e7:ee:ed:68:c3:09:92:76:1b:13:7e:e8:65:1c:
a9:38:cd:e8:b1:8b:21:1f:8c:b0:5a:27:d3:9a:9b:f6:a9:ec:
22:c5:74:de:47:ae:a4:05:86:48:3e:a5:60:dd:3b:69:cd:6b:
a9:ac:97:e1:ea:9b:0c:c6:6d:d4:ba:78:c5:79:50:d3:16:69:
d7:70:58:05:52:ce:ec:28:46:6c:f9:ad:1f:bb:ca:d6:9a:d8:
4e:50:9e:37:89:b9:4e:2a:ae:19:b1:9a:0a:c8:b8:96:4a:44:
ba:c7:0d:1f:68:8e:6f:2d:4c:51:ec:9d:82:cc:b7:f7:49:ea:
8d:9d:97:f1:7a:e4:1e:1c:72:eb:aa:e1:21:9a:c4:bf:08:94:
ef:36:f3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:51 2025 by rpki-client