Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vuSezyq3xAgOqnHa7QdAeoaf84c.roa
File: vuSezyq3xAgOqnHa7QdAeoaf84c.roa (raw, json)
Hash identifier: EUF5F4f4aeAN922DAeazq7FMGl+bmXeOh9SEijQrSoo=
Subject key identifier: BE:E4:9E:CF:2A:B7:C4:08:0E:AA:71:DA:ED:07:40:7A:86:9F:F3:87
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EDFF396F078665E5906C6BAD35B371C68
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vuSezyq3xAgOqnHa7QdAeoaf84c.roa
Signing time: Mon 15 Apr 2024 04:11:06 +0000
ROA not before: Mon 15 Apr 2024 04:11:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:df:f3:96:f0:78:66:5e:59:06:c6:ba:d3:5b:37:1c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 15 04:11:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bee49ecf2ab7c4080eaa71daed07407a869ff387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8a:79:18:49:94:93:8b:67:15:eb:07:7d:38:
13:68:3d:bd:dd:2e:13:dd:a9:f3:79:8c:aa:2a:9c:
62:fa:c9:fa:e8:4c:a2:33:cb:d8:52:e3:a8:0b:1c:
69:05:b5:42:d5:28:85:93:8c:42:d7:fc:75:c1:6f:
00:63:ea:96:0c:72:1d:e0:cb:52:a9:87:f0:6b:fd:
8f:7e:9f:15:bb:b3:5e:6f:8a:11:35:c4:e7:6c:66:
d1:ee:b2:89:53:76:03:f5:1d:1a:c0:67:64:df:2a:
5c:bf:e1:a1:c0:82:4f:14:25:c4:d7:ee:55:54:76:
a5:a0:50:ea:f9:82:01:81:36:72:dc:1c:5c:66:1d:
27:fd:7d:ba:84:a4:b7:ef:aa:26:26:ee:5e:97:d0:
62:3a:4e:56:d0:61:48:0d:a8:c3:ed:30:9c:02:7c:
b9:b5:7a:1f:d3:a8:e5:8c:8b:40:f8:45:f5:8d:25:
d2:69:8b:4f:be:76:07:8f:0d:e8:d8:44:f9:f6:b1:
96:ad:4e:79:3d:f0:33:af:1f:96:1b:fb:4c:7a:39:
81:19:71:2d:53:5c:40:f4:92:92:af:af:c6:2b:7a:
8a:88:2b:36:8e:33:00:8b:52:97:0a:b7:a5:c5:75:
da:61:d5:f4:6e:13:a7:a0:2d:5b:26:1b:35:f5:58:
5f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E4:9E:CF:2A:B7:C4:08:0E:AA:71:DA:ED:07:40:7A:86:9F:F3:87
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vuSezyq3xAgOqnHa7QdAeoaf84c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:b4:cb:c8:5d:e7:3a:e4:ef:3f:63:43:80:ed:2b:c6:be:a2:
0a:b7:4b:bc:09:ee:16:3b:9f:9f:cb:e3:75:c1:5c:c0:de:0b:
69:a2:17:c1:b6:45:ef:68:06:11:c2:65:b1:92:f8:15:81:6d:
35:1e:a4:d7:32:dd:3b:0f:65:6a:45:66:0b:3c:05:f0:af:3e:
fc:cc:09:9e:3b:4a:40:6e:b3:d9:f1:0f:12:f1:ba:3a:f0:b4:
84:29:50:59:5e:35:d6:88:f1:13:74:c7:cf:f1:a5:28:8f:60:
c6:2e:34:a8:24:54:bd:03:ea:07:68:1e:a4:8b:ce:6a:b0:e5:
22:00:4d:20:53:b8:18:e2:d9:1f:94:de:0b:b9:2a:a2:35:29:
a8:57:ce:3f:bd:1c:e3:42:0d:70:15:d3:0a:67:78:19:2f:75:
55:fc:53:05:de:ed:d0:27:4f:ec:0c:ac:f3:85:64:62:91:7c:
ba:d1:06:ee:c1:c6:8a:be:bb:22:f8:e9:6a:c3:45:cc:f0:81:
32:6e:36:96:b4:73:8f:53:ec:59:40:73:05:aa:65:88:66:b7:
5f:5b:6c:81:58:81:03:4c:14:84:4d:40:5f:f2:39:75:28:71:
92:c9:bf:d4:a0:2f:f1:af:25:42:4d:5b:50:a1:77:2a:be:f0:
ea:73:6e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:50:15 2025 by rpki-client