Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sn28Goxpw6kaMz6mr8H27hBGe3s.roa
File: sn28Goxpw6kaMz6mr8H27hBGe3s.roa (raw, json)
Hash identifier: xBfd4RRd4433ocT/AHno5WE8/F29Im8mtpaJZrR71ME=
Subject key identifier: B2:7D:BC:1A:8C:69:C3:A9:1A:33:3E:A6:AF:C1:F6:EE:10:46:7B:7B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DA5669CAE0D781ECB1109A567A39DD634
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sn28Goxpw6kaMz6mr8H27hBGe3s.roa
Signing time: Wed 14 Feb 2024 02:16:21 +0000
ROA not before: Wed 14 Feb 2024 02:16:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a5:66:9c:ae:0d:78:1e:cb:11:09:a5:67:a3:9d:d6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 14 02:16:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b27dbc1a8c69c3a91a333ea6afc1f6ee10467b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:97:c2:94:2b:66:00:a7:20:13:47:1e:a7:
af:2d:e1:4b:dd:b7:09:68:b8:86:35:66:f0:ff:df:
76:39:ad:37:6f:47:af:ee:af:02:a6:0a:6b:2e:9b:
bb:5d:27:66:58:5e:38:8f:5f:dd:1a:28:eb:4b:65:
3c:35:97:48:88:ce:60:a8:56:e4:c7:d0:0d:c8:9d:
e0:f3:9a:05:a6:bd:d2:fe:b9:17:d7:a2:de:8d:c5:
99:59:6b:42:34:8b:dd:0d:a7:73:a4:d9:22:48:74:
e3:eb:1a:92:1d:b0:40:47:e1:3b:4c:27:02:8d:f8:
7e:36:6a:7d:d7:f0:10:c1:f7:63:b9:b9:aa:61:e2:
3c:81:bd:20:05:91:40:79:e1:90:51:37:7a:e2:be:
67:f8:66:4b:a1:30:25:e7:69:9f:80:6d:fb:31:f6:
57:a3:c8:c6:7b:87:15:cb:f8:51:a4:1a:d7:0e:ec:
b6:78:af:a4:99:f3:82:3f:dd:f9:75:1e:08:6f:ed:
cf:9c:e7:12:89:e4:af:a2:e0:fe:ab:6c:7d:96:28:
7b:5f:eb:50:35:0f:29:f6:20:3c:8e:33:ff:47:1f:
dd:6b:c2:2d:20:e5:a7:2f:4c:bd:f0:d2:86:80:88:
31:ce:e9:4d:2c:41:3b:06:93:71:2b:0e:ac:70:86:
42:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7D:BC:1A:8C:69:C3:A9:1A:33:3E:A6:AF:C1:F6:EE:10:46:7B:7B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sn28Goxpw6kaMz6mr8H27hBGe3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:01:60:7c:9b:a7:de:c2:44:f9:75:d9:5b:61:ea:c1:a6:70:
fe:aa:4b:78:17:5b:fc:0e:00:fc:2f:1f:ef:f9:28:b9:a2:db:
42:7a:0d:5d:07:39:67:df:bc:5b:42:bf:aa:6c:8a:fc:25:05:
4e:6a:59:cd:01:a2:d4:65:56:7a:98:48:e9:48:22:b9:93:16:
43:e7:59:0f:8c:99:f7:40:d2:f8:04:fd:ef:d1:51:39:56:42:
4c:22:dd:8a:50:e4:96:40:ca:6f:24:9c:87:b7:5c:7c:21:45:
e2:55:f9:6e:da:07:37:1f:5b:29:ca:40:cc:3a:26:6a:e5:cd:
53:6f:2d:23:74:8b:fe:5d:14:3c:c9:48:61:c0:12:69:f1:e8:
89:6e:a3:f6:5f:66:bb:ec:43:99:a6:98:81:80:35:ef:66:2b:
32:30:e3:ec:8a:11:03:2f:84:1c:41:36:49:97:94:28:a5:35:
50:90:ee:30:0f:72:3a:02:d7:6e:0b:4e:5f:c7:73:9d:b0:a0:
63:1b:8b:ab:e1:31:2b:81:6a:6f:f6:19:82:05:1f:12:9b:35:
ce:7d:0d:2a:2a:a5:5e:12:1f:16:20:0e:e9:e0:38:9a:e3:db:
41:2e:ca:f7:33:72:ec:d2:01:6c:ad:7e:9c:f1:8b:11:7c:6c:
17:fb:ac:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:57 2025 by rpki-client