Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rhKbbstDI-wPGf-ERRbMc1B4vXA.roa
File: rhKbbstDI-wPGf-ERRbMc1B4vXA.roa (raw, json)
Hash identifier: LMNJSRL2vyuYZaVB5sTQi1gGlc2K211k/poV5QlfTzw=
Subject key identifier: AE:12:9B:6E:CB:43:23:EC:0F:19:FF:84:45:16:CC:73:50:78:BD:70
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9A3649E2B51DE371FDA3130D5D3D6A99
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rhKbbstDI-wPGf-ERRbMc1B4vXA.roa
Signing time: Sun 24 Dec 2023 05:04:58 +0000
ROA not before: Sun 24 Dec 2023 05:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:9a35:f4ce/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9a:36:49:e2:b5:1d:e3:71:fd:a3:13:0d:5d:3d:6a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 24 05:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae129b6ecb4323ec0f19ff844516cc735078bd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9e:7e:16:f7:8f:8f:06:fc:07:dd:7b:27:cb:
b4:e7:e0:79:71:a0:ee:0c:ce:74:9f:e0:45:2b:a3:
74:35:2f:3f:de:ee:a6:ab:48:24:a1:8f:a6:33:5d:
9d:11:ac:53:2d:2e:cd:2f:3f:c2:07:0d:17:58:70:
8e:0f:e4:87:ea:b0:bc:e1:53:81:5e:e8:6e:15:1e:
bb:41:27:ef:9d:0e:34:5d:47:ef:5b:0e:b0:25:4c:
5f:ee:d6:2f:a4:bd:4b:97:88:e2:56:63:8b:6c:8a:
9c:b1:98:ef:0a:43:1e:ec:5c:ee:ab:ff:dd:c7:d0:
74:c1:33:ef:11:a9:70:89:56:f9:0c:e9:a9:0e:1a:
c7:58:fa:8d:f0:7c:95:36:72:41:11:e3:17:5d:5f:
43:27:3b:af:66:16:73:f2:db:18:c6:a1:43:68:0c:
ef:ac:a3:17:a2:ff:96:32:fa:62:15:55:2b:54:7f:
b0:b6:56:96:8c:e1:dd:5e:f9:a2:c3:af:80:1f:dc:
62:3d:69:b1:54:94:e9:34:98:5c:7b:27:81:5d:41:
b2:da:f4:63:2b:d5:3f:6c:2b:bc:4d:e7:6b:9a:40:
7d:0d:b1:58:a4:49:ef:19:41:f5:4b:34:1c:09:27:
02:76:28:b2:29:d4:cf:e3:1a:f8:ed:e8:73:8f:95:
68:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:12:9B:6E:CB:43:23:EC:0F:19:FF:84:45:16:CC:73:50:78:BD:70
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rhKbbstDI-wPGf-ERRbMc1B4vXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:cd:b7:e7:3c:8a:78:94:b8:eb:59:aa:25:2e:64:09:f3:56:
16:8c:1a:46:a5:8f:c3:29:34:18:2c:cc:5a:81:b5:29:d1:b6:
c9:0d:b3:bc:2b:13:16:01:ac:22:fa:59:a8:80:c1:db:56:65:
c1:f7:88:44:fb:43:0c:6a:ea:80:5e:b1:c9:72:be:d4:bb:6f:
24:e1:4c:cf:71:25:1b:d2:7d:ad:3d:c0:f8:12:43:27:8b:ab:
50:3d:51:d0:cf:85:ce:57:b1:6b:1b:c5:1a:95:e4:72:10:1b:
a4:44:44:3a:0b:8e:f9:c1:31:35:be:b6:9b:66:81:db:78:0f:
53:34:19:87:9c:8f:21:c1:4b:1c:f4:44:f9:9e:9c:03:ab:1f:
25:9f:52:f0:4d:a7:40:36:52:82:6a:d8:ee:14:a5:4d:9a:be:
2c:81:f3:09:df:12:1c:1f:23:00:01:db:03:87:58:2b:e7:48:
34:4b:85:c0:c6:22:aa:c3:66:a0:1b:f8:2f:d5:70:11:cc:56:
ec:b4:9f:d2:b5:aa:0d:b5:e9:1c:e2:49:1b:b8:28:59:ed:21:
65:83:dd:cf:3c:9d:53:ec:11:1a:e1:1a:61:54:c0:8f:18:d6:
22:54:f4:b7:4a:20:27:02:51:ff:b1:16:b0:3b:e1:f9:41:2e:
3c:c1:e4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:07:48 2025 by rpki-client