Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uGH4lvl7r4YHhsZrbsPFdgXnAvk.roa
File: uGH4lvl7r4YHhsZrbsPFdgXnAvk.roa (raw, json)
Hash identifier: YTqGjPBxpk7PDzLr5ND7CqpBwb/hUwDcAgax0l7+3s8=
Subject key identifier: B8:61:F8:96:F9:7B:AF:86:07:86:C6:6B:6E:C3:C5:76:05:E7:02:F9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DD6C060ACADDD040DA08EFAB8DADECD96
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uGH4lvl7r4YHhsZrbsPFdgXnAvk.roa
Signing time: Fri 23 Feb 2024 16:15:48 +0000
ROA not before: Fri 23 Feb 2024 16:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d6:c0:60:ac:ad:dd:04:0d:a0:8e:fa:b8:da:de:cd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 23 16:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b861f896f97baf860786c66b6ec3c57605e702f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:96:44:ca:19:58:19:fb:0f:be:f4:dd:d5:
01:70:f8:ba:c7:b8:6f:2f:d1:f3:c6:cd:88:83:22:
e0:dc:aa:79:e5:0b:de:88:8e:d5:53:8b:ae:9e:83:
d7:bc:bc:7e:6d:5c:e2:81:a7:6f:5e:eb:f2:9a:ba:
40:fa:b1:0a:de:78:1d:eb:70:11:97:cd:52:f7:41:
df:19:fa:d9:8f:ba:cc:73:73:02:db:48:46:65:20:
5d:02:37:63:4e:c9:2e:fa:a9:23:b8:51:98:9f:22:
38:01:e0:0a:4a:1b:bb:38:d3:85:90:74:f1:96:66:
27:fa:6c:d4:a7:ca:7b:30:1d:0a:0d:8e:6e:9d:6e:
93:4f:c3:71:6f:d0:aa:7f:4d:b5:72:ad:3e:59:b7:
a5:bb:f5:22:bf:5b:d4:41:76:93:dd:b7:0d:99:53:
41:3b:7b:45:55:71:9b:c2:90:a5:35:43:d7:e0:64:
dd:ce:f4:12:bd:17:8f:28:d3:de:f7:7f:5a:48:7b:
ee:5d:33:1c:74:0c:09:d4:2f:4c:fc:2d:b9:13:77:
54:04:07:59:ed:9e:35:4b:46:d3:ef:20:ae:20:eb:
d9:81:74:cc:cf:6e:85:94:ff:97:fa:3a:fe:d2:e4:
c7:94:ed:1b:d6:02:49:c4:77:45:50:6b:8c:1b:ff:
d9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:61:F8:96:F9:7B:AF:86:07:86:C6:6B:6E:C3:C5:76:05:E7:02:F9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uGH4lvl7r4YHhsZrbsPFdgXnAvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:38:94:99:68:00:a3:e5:85:7d:13:6a:4d:aa:17:0d:d5:c8:
0d:8c:71:ba:1a:a4:f2:1f:7b:04:8a:09:d4:74:a3:dd:4f:48:
4e:13:98:c3:88:c6:93:9c:78:57:72:a7:01:36:3e:ba:c1:74:
e2:63:50:9c:82:6d:c4:ec:69:ea:cc:65:a3:db:61:39:2a:01:
dc:85:f0:08:bc:4e:af:67:13:43:92:69:99:5c:c6:2c:b5:b6:
fb:2d:f9:74:ea:f4:b7:2d:6a:ec:9b:85:78:85:bb:40:1c:50:
55:f6:32:31:2d:19:c0:da:ae:d9:62:2d:4c:7c:0b:29:60:57:
42:f1:84:8f:e3:05:01:40:a5:38:05:47:f8:8f:7f:2b:53:d0:
85:2c:08:16:38:b2:6a:6a:83:b8:ef:65:66:7d:25:c8:ba:a7:
0f:73:9f:ab:01:65:bd:4d:b3:f8:8c:a6:92:a6:fe:a3:f6:b2:
e2:d2:6f:b8:23:4e:cd:cb:d0:e8:65:ae:9b:f7:29:c3:6c:b2:
da:9e:56:14:d4:3c:57:72:04:0a:d4:38:13:52:c7:12:a1:80:
8b:2a:3c:a8:8a:9a:08:7a:66:f6:55:cb:67:20:fa:f6:a6:28:
48:59:5d:38:12:d6:4f:d1:2a:46:2c:ee:d0:09:34:b5:b3:85:
3d:1a:70:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:43 2025 by rpki-client