Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vQ4AUSNXhspwrJxmLy37cfvdb5A.roa
File: vQ4AUSNXhspwrJxmLy37cfvdb5A.roa (raw, json)
Hash identifier: EixIyZRzE1ZHDrMBr4HzeUF+VqCQZ/OqGD85ugpMS3A=
Subject key identifier: BD:0E:00:51:23:57:86:CA:70:AC:9C:66:2F:2D:FB:71:FB:DD:6F:90
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E8B62B2A61495C12005A1460B63AD29F7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vQ4AUSNXhspwrJxmLy37cfvdb5A.roa
Signing time: Fri 29 Mar 2024 18:04:45 +0000
ROA not before: Fri 29 Mar 2024 18:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
2001:67c:64:ffff:0:18e:8b62:501a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8b:62:b2:a6:14:95:c1:20:05:a1:46:0b:63:ad:29:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 29 18:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd0e0051235786ca70ac9c662f2dfb71fbdd6f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8e:79:c7:84:85:84:ad:2c:2b:ad:fe:f4:dc:
da:ce:87:96:b0:a3:25:10:88:57:78:3e:84:04:25:
1d:9f:0b:d3:55:56:bc:ee:7a:41:f3:7f:cf:0e:d4:
cb:71:1a:be:7a:cb:e4:4d:58:a1:14:0d:9f:59:98:
09:22:79:32:00:af:1b:40:8e:75:6e:03:2a:17:30:
23:f0:05:17:d3:45:53:51:ef:76:6c:d4:7d:9c:cf:
4f:85:6f:65:f7:96:d3:f4:6d:35:43:db:41:69:95:
70:20:90:bd:8e:af:fc:dc:a6:bd:c0:81:82:e3:dc:
fc:e1:65:f1:75:3b:7e:40:35:48:73:80:f1:15:dd:
ff:51:c6:c0:55:d4:7e:48:6b:0b:52:c2:2d:f9:ad:
e1:e7:ab:e8:b0:cb:6c:0c:77:6d:7d:a2:09:6a:ef:
ea:cd:ec:f3:91:99:2f:9b:86:ed:9f:71:27:d4:24:
70:3d:21:1f:ae:c5:15:e4:ba:66:26:34:be:61:f5:
2b:f2:54:f0:fe:08:cf:b6:9b:d4:fd:97:15:9b:44:
ad:15:b6:50:88:98:95:0b:99:6f:b9:65:ef:e6:b2:
98:b1:bb:95:7b:0b:2f:19:3a:31:84:f1:35:15:a3:
cc:57:78:90:7c:68:0d:c9:0d:14:06:9f:c3:19:95:
72:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0E:00:51:23:57:86:CA:70:AC:9C:66:2F:2D:FB:71:FB:DD:6F:90
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vQ4AUSNXhspwrJxmLy37cfvdb5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:25:2e:cb:d4:07:de:b1:82:4c:d6:1d:dc:6e:79:c9:cd:cf:
62:df:83:e8:0a:35:4c:06:d6:9f:f2:55:33:ed:39:66:c6:39:
b6:ed:80:4d:08:0d:c2:45:6c:b4:19:40:95:f6:d0:55:63:a8:
9d:92:4e:da:fe:d8:59:5d:c9:db:95:d8:f1:5a:f9:c0:79:9f:
3b:3e:62:9b:b6:79:ae:17:7f:a3:02:ec:5f:c7:2e:9f:6b:7c:
04:42:d4:e0:18:67:49:cd:a9:e8:56:a7:ac:39:2b:8e:20:69:
07:1c:05:da:c8:31:92:ae:94:f6:aa:69:f7:e8:a5:f6:f2:6a:
10:5e:78:15:2b:01:d8:4f:c4:ed:c5:fb:18:70:6a:67:87:a4:
aa:d2:fa:3b:ff:8f:01:f2:a4:34:2b:56:4a:59:6d:82:b1:aa:
60:f8:ad:7b:1c:c5:d7:e8:c4:ae:5d:7a:10:ce:ee:3f:bc:58:
dc:da:16:55:97:63:03:79:cc:f9:b2:cc:67:b6:3d:45:e8:e9:
b9:9b:ab:33:4d:02:7d:f3:34:81:c4:e1:56:5a:2e:1d:ce:06:
e5:48:9a:31:bd:c8:09:d9:3a:1c:93:84:b7:cf:56:fd:87:2c:
28:d0:a1:2d:e1:ef:c5:a3:f4:7e:c2:94:83:d9:6f:cc:39:11:
0c:74:b1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:27:18 2025 by rpki-client