Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rvASQ-o1ShsxVquBBFY7Sddue0A.roa
File: rvASQ-o1ShsxVquBBFY7Sddue0A.roa (raw, json)
Hash identifier: 0d7RYz73vZR8TK8DdL72vtBLu3K681YvLrIJzV8Is3M=
Subject key identifier: AE:F0:12:43:EA:35:4A:1B:31:56:AB:81:04:56:3B:49:D7:6E:7B:40
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DBF5EC75FB4A4FBB7A6EBDD9BA3FC7615
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rvASQ-o1ShsxVquBBFY7Sddue0A.roa
Signing time: Mon 19 Feb 2024 03:17:56 +0000
ROA not before: Mon 19 Feb 2024 03:17:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bf:5e:c7:5f:b4:a4:fb:b7:a6:eb:dd:9b:a3:fc:76:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 19 03:17:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aef01243ea354a1b3156ab8104563b49d76e7b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:72:b2:ec:35:d3:c4:0d:54:83:f6:91:95:
3d:3c:5a:80:47:ba:83:e0:54:a9:84:9e:0e:ed:45:
ae:40:39:d5:26:7b:71:0f:73:e2:f4:26:72:78:7b:
a0:36:6e:4c:c6:9c:a0:d1:a6:f8:b0:cf:c2:14:74:
6c:97:33:c1:99:b8:68:da:47:e1:a1:89:75:4a:e2:
0a:93:0e:76:1a:9c:8b:f0:27:63:cf:fb:da:da:3d:
e4:9d:79:1a:68:79:c5:43:f7:e3:64:2b:60:54:45:
ab:8c:d2:8b:18:c1:ef:0a:1c:6b:62:1d:8f:8a:bc:
77:0f:7f:d7:58:3d:fb:cd:3f:ba:18:e1:d3:80:66:
ec:a7:ef:e3:18:b0:d9:13:6d:71:dc:93:16:3b:49:
23:95:41:07:32:5f:b9:0f:fb:0c:b0:88:32:36:b6:
10:f7:60:02:6d:33:5b:46:49:b3:7a:3a:a9:5b:bc:
59:15:cb:10:1a:30:c2:86:30:93:06:29:59:c3:80:
56:da:45:54:bc:f9:1f:44:ca:a8:c4:85:26:f5:7c:
f3:f1:94:39:2f:4b:4e:e8:39:0d:82:fb:54:06:a6:
56:b8:1d:ca:3d:f7:d5:6b:76:6c:1d:95:27:c3:09:
0e:dc:82:37:58:a0:9b:f1:e5:1c:0b:d4:62:0b:9a:
ad:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F0:12:43:EA:35:4A:1B:31:56:AB:81:04:56:3B:49:D7:6E:7B:40
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rvASQ-o1ShsxVquBBFY7Sddue0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:6f:da:8f:0e:ad:2b:79:fb:e7:bf:ce:9b:f7:f0:05:2f:00:
69:d3:8c:48:3f:eb:d6:19:d1:29:d0:a6:df:1a:30:57:0f:c6:
b3:be:0d:90:00:0d:7a:d7:c8:a2:61:67:05:86:55:f7:f8:c6:
4c:4e:f3:89:0c:90:f9:8f:62:11:e3:9a:75:92:84:db:2e:73:
23:c2:1a:0b:e0:44:7e:96:a5:e4:5d:fb:9c:1b:34:3c:d0:60:
ad:98:6c:c1:e6:2a:30:21:e2:07:76:56:f1:84:d4:84:ff:d4:
5f:fd:1a:6a:89:d1:18:86:fd:d6:53:c2:ec:5b:42:b1:c3:7f:
fd:82:11:1d:b7:79:85:7e:73:13:80:46:42:a6:15:bb:01:04:
08:99:bf:c9:1a:6f:b3:24:cd:3c:eb:5c:bd:9c:7a:5a:15:fc:
71:97:79:9c:01:9b:84:69:fc:bd:d4:38:b3:a0:0f:84:56:28:
16:e6:e8:95:f2:25:31:1b:33:15:fb:8f:27:7a:bc:05:9d:a5:
43:47:82:27:7c:93:a6:d6:1e:6f:3c:77:19:bd:03:0b:c6:e5:
9f:cc:ff:f7:2b:f8:a9:19:3a:01:38:1e:6b:35:62:80:23:43:
72:b7:10:f6:b9:a8:58:5a:e2:91:d9:5d:ae:93:29:bb:ad:9a:
4d:37:42:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:44 2025 by rpki-client