Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sEa3ucui58ZWPV6FccYE0HdB-0c.roa
File: sEa3ucui58ZWPV6FccYE0HdB-0c.roa (raw, json)
Hash identifier: +GLbKqrG4tTrYImSojCzsRXqIdBHQsb0kYfWy+XZiGQ=
Subject key identifier: B0:46:B7:B9:CB:A2:E7:C6:56:3D:5E:85:71:C6:04:D0:77:41:FB:47
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D9882F44B24E615A295FB3326C9242AF6
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sEa3ucui58ZWPV6FccYE0HdB-0c.roa
Signing time: Sun 11 Feb 2024 14:12:15 +0000
ROA not before: Sun 11 Feb 2024 14:12:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:98:82:f4:4b:24:e6:15:a2:95:fb:33:26:c9:24:2a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 11 14:12:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b046b7b9cba2e7c6563d5e8571c604d07741fb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:41:1b:83:7e:f2:28:e7:d5:68:b8:a7:1b:
b1:ba:1a:63:6f:f1:91:a6:04:2d:6a:82:14:fc:f3:
e7:15:f4:c4:b7:7a:18:57:c4:4d:d8:31:e5:51:83:
bf:5a:75:eb:a3:86:68:2f:26:17:c4:16:0c:21:7e:
42:ea:3c:e1:5d:2f:a8:50:52:e1:85:2c:86:aa:9a:
2d:72:60:8b:6d:67:29:9c:1a:14:ea:bc:a9:05:81:
e6:bb:59:3f:9c:16:cd:a2:6c:4e:1d:ab:16:6d:dc:
a0:1d:bd:20:cd:db:f1:1a:38:fd:0e:6d:d9:98:e2:
f0:d6:57:a7:db:1a:88:19:ae:35:c4:ec:0e:11:28:
cb:f2:b0:ae:4c:89:9e:8a:42:c3:72:e2:4f:8f:92:
39:64:bd:02:57:ac:f8:31:65:16:81:f0:66:7a:50:
23:13:b2:20:c4:96:0a:12:04:91:d9:19:ca:27:8a:
a9:fd:f0:5a:58:10:e0:7d:5b:c4:77:b9:64:a8:4c:
66:50:69:56:9d:9c:02:8b:55:ef:44:bf:29:01:b4:
55:52:63:cd:91:d0:07:ee:4e:fa:0c:86:30:82:b0:
72:77:5b:49:e9:66:0b:dc:a3:5d:bc:fc:36:f8:6e:
0c:64:8f:6c:d4:83:57:5f:57:4f:5f:e1:a5:fc:8c:
da:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:46:B7:B9:CB:A2:E7:C6:56:3D:5E:85:71:C6:04:D0:77:41:FB:47
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sEa3ucui58ZWPV6FccYE0HdB-0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:5c:9f:8f:cc:da:db:fc:2b:4d:7a:cd:0a:dd:e9:45:af:a4:
29:6b:03:69:a1:03:9d:15:e6:fa:4d:8a:42:96:e1:60:a2:10:
aa:d8:58:c5:3f:4f:3a:bd:6e:ac:4e:97:48:b4:b9:c2:7f:43:
f6:65:9d:89:07:a9:18:f5:4b:29:b0:02:e5:0b:70:de:79:dc:
38:e8:91:63:d6:bb:a6:e0:e7:01:21:13:63:ae:c7:ec:41:e1:
55:9a:d5:45:5c:42:e2:83:3c:60:b7:7f:f3:d1:25:bb:06:1b:
21:92:6d:a1:cf:ca:d0:65:81:70:56:61:17:ff:90:27:d9:0b:
79:c3:8b:ae:7d:5d:88:37:a9:f8:ed:15:99:fe:fb:ae:7a:5f:
d6:37:45:58:b5:e1:85:03:8d:dc:b6:6e:a3:46:65:78:f6:f8:
35:19:50:af:b7:32:dd:9e:7d:4c:40:6a:46:8e:c5:37:1c:dc:
fd:1d:73:89:e1:ca:d6:32:70:11:59:d1:e0:29:a8:e4:3c:e1:
38:4c:90:4f:77:4c:ea:a7:d9:4e:94:fe:09:18:f0:47:cd:eb:
3a:6b:89:fe:2a:c1:90:54:4b:3c:b4:9c:fd:f8:e4:be:b9:69:
98:80:ff:49:5f:4e:07:8a:4f:1d:1d:e0:f6:f8:e9:c4:43:78:
23:a3:dc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:00:58 2025 by rpki-client