Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/r_a6UFLJacqkUwwziPqs5vztqQA.roa
File: r_a6UFLJacqkUwwziPqs5vztqQA.roa (raw, json)
Hash identifier: ZQXcQGKVdCWsRIWmYvbzupO6bW+igddwkUuvZnm2vpE=
Subject key identifier: AF:F6:BA:50:52:C9:69:CA:A4:53:0C:33:88:FA:AC:E6:FC:ED:A9:00
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CDF21438AC5FB47857E8C3F4ED931E3C5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/r_a6UFLJacqkUwwziPqs5vztqQA.roa
Signing time: Sat 06 Jan 2024 14:15:48 +0000
ROA not before: Sat 06 Jan 2024 14:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:df:21:43:8a:c5:fb:47:85:7e:8c:3f:4e:d9:31:e3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 6 14:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aff6ba5052c969caa4530c3388faace6fceda900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:18:15:8b:32:da:4e:ac:23:ae:1a:55:e4:
6e:24:8d:0a:16:2f:4a:8d:90:4c:21:cf:0e:07:d2:
32:2c:88:a6:b9:09:84:6d:c4:f4:d8:52:a6:b0:65:
e9:ae:fb:4e:3b:2b:2c:1d:5c:d5:75:d8:15:65:d8:
2d:c9:51:7e:e5:84:69:63:25:a2:1d:4d:de:d6:3a:
34:50:5a:67:e2:14:93:2c:a5:3a:03:f5:4a:0f:8d:
ea:fc:07:a8:a9:35:5d:60:e3:ab:f6:06:c4:04:07:
5e:40:4a:eb:bc:cc:82:73:ed:48:8f:7c:98:6b:c6:
44:54:0a:fc:5b:38:0d:fd:95:a8:92:1c:49:9e:95:
3b:1f:81:69:43:6c:a3:06:56:9d:4a:c0:7c:1f:41:
1a:f2:04:cf:b6:f5:39:08:97:b8:dc:9d:19:3c:f4:
7f:75:23:88:05:a0:da:fd:e1:fc:3a:96:31:ea:b1:
71:09:0e:29:73:c0:c4:1e:fa:bc:7a:c3:c9:0d:c3:
da:74:2f:10:f3:ce:6f:e9:d9:1c:ed:83:53:7f:93:
28:bd:27:13:59:74:3f:76:9a:d1:2d:9f:f7:32:d8:
d8:db:d6:14:eb:ff:39:9f:e7:30:27:d3:bf:18:f5:
53:36:c3:ce:81:24:f7:4c:34:01:3b:02:ac:39:50:
c4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F6:BA:50:52:C9:69:CA:A4:53:0C:33:88:FA:AC:E6:FC:ED:A9:00
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/r_a6UFLJacqkUwwziPqs5vztqQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:1e:e5:fd:40:db:a1:d1:73:40:ef:69:c2:3f:75:d2:e9:30:
06:f1:ee:b6:e6:cf:40:d3:c5:1e:f5:e0:45:4c:de:1a:f1:00:
a6:99:23:c2:9f:b9:a0:87:2d:d2:1e:8e:fc:d9:2f:0f:c9:0e:
6c:49:c9:db:81:89:d4:ca:b8:91:a4:88:16:e5:29:bc:aa:ce:
13:47:3d:8d:c5:0c:bc:2e:04:bd:0f:66:7e:63:cd:c8:aa:00:
65:a6:ca:4d:66:4d:cd:3a:c0:7f:24:2f:1a:88:78:96:5d:fd:
c4:de:26:41:03:bd:e2:47:89:55:83:bb:9b:a3:4a:06:58:b0:
59:6c:32:ec:66:4d:36:05:c8:9c:5c:93:c5:c5:92:fe:22:74:
3e:84:f2:30:ba:ae:f2:c1:9e:27:e5:aa:b0:fe:d3:b4:31:8f:
a6:6a:e7:45:da:2a:4c:d6:5e:30:73:26:ba:53:8b:21:d1:c6:
50:95:50:b4:29:76:c7:3b:49:ff:8c:24:79:49:1b:84:eb:e7:
8f:ce:38:87:92:a4:9e:85:cd:54:4d:0f:08:f9:c8:72:a8:e3:
96:f5:72:3e:ba:70:9c:d2:6a:76:46:b5:f0:e9:00:4c:91:9a:
31:65:9a:50:cc:96:82:b4:1d:c3:d5:f8:4c:ce:ff:a4:7a:f9:
ff:bc:95:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:30 2025 by rpki-client