Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xeG846b01o9A-NTb4CNQnSEjY8M.roa
File: xeG846b01o9A-NTb4CNQnSEjY8M.roa (raw, json)
Hash identifier: +s/PPjv8dWs+yxbsI5PkCY5v7lgIOwQDi/mdAgrzGYQ=
Subject key identifier: C5:E1:BC:E3:A6:F4:D6:8F:40:F8:D4:DB:E0:23:50:9D:21:23:63:C3
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D74AF375FACBCDF0BBB5A5241AB032E59
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xeG846b01o9A-NTb4CNQnSEjY8M.roa
Signing time: Sun 04 Feb 2024 15:14:16 +0000
ROA not before: Sun 04 Feb 2024 15:14:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:74:af:37:5f:ac:bc:df:0b:bb:5a:52:41:ab:03:2e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 4 15:14:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5e1bce3a6f4d68f40f8d4dbe023509d212363c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:ca:05:07:63:e5:47:13:12:fa:e2:f9:40:
62:69:63:3f:8a:12:c6:ac:22:c8:dc:d1:bd:85:c6:
84:56:aa:f5:e1:a6:98:1f:29:48:e5:5a:9a:63:71:
2a:fd:dc:5d:b2:87:0a:f5:5c:e1:c3:72:9a:4e:8d:
76:c2:cb:44:1f:2d:db:6a:a2:85:66:13:f1:5f:2e:
0d:fb:20:56:cc:d3:00:78:ee:72:5d:c7:d3:10:f8:
0b:e0:d4:85:72:7c:53:d4:4a:cd:05:f9:84:98:08:
a2:ca:f2:bf:2d:68:77:6e:c9:a1:f0:c7:b9:e5:71:
34:70:d5:53:82:03:6f:14:8c:58:94:b3:c1:e4:bf:
96:07:d8:5a:6a:e8:d8:c1:c9:29:65:4a:a5:60:5d:
ba:84:97:65:1a:f5:5a:e6:d8:65:f2:09:aa:3f:7e:
bc:d3:df:bc:19:91:1a:88:15:f4:e3:f8:3c:75:f7:
17:b8:74:44:0b:fa:52:0f:8b:1b:f5:d0:1e:b9:60:
cd:51:73:71:69:f8:c0:09:3f:81:2c:fe:5f:ff:14:
71:11:2f:6d:aa:ee:4c:d5:f9:ee:b7:ff:d1:bf:41:
d7:3f:40:50:b9:56:f5:3c:59:f8:d2:30:62:7b:9e:
b6:21:46:25:a4:f2:54:a9:56:f8:a5:a3:41:78:80:
15:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E1:BC:E3:A6:F4:D6:8F:40:F8:D4:DB:E0:23:50:9D:21:23:63:C3
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xeG846b01o9A-NTb4CNQnSEjY8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:92:bd:fe:fd:8a:89:f4:57:49:60:6f:ea:04:d5:a6:bb:00:
2c:a7:df:c2:2e:1a:ca:ff:3e:02:60:a2:b8:c0:2d:bb:33:75:
0f:da:d3:bd:23:59:f2:6b:be:f8:14:9e:87:0a:15:26:e1:9d:
38:a4:e9:c6:88:ce:2d:b9:e7:3e:f2:7d:07:5b:53:71:17:e2:
23:6d:84:8e:80:e2:e4:fc:ac:dd:40:a6:2a:ec:0b:88:e5:3e:
d7:12:55:41:73:64:7f:03:d0:5a:e3:a4:74:c1:32:58:2b:02:
44:d9:b2:c9:5c:34:75:96:18:97:bb:da:48:8a:bd:eb:bb:41:
01:d8:dc:68:95:e7:ab:ba:88:0b:15:16:d5:45:d7:51:da:3e:
f7:23:13:38:53:54:d3:29:b8:08:68:d9:4a:fa:bf:30:68:67:
c9:80:4a:cc:9d:75:08:e7:96:88:7b:4e:00:af:09:05:3a:1f:
42:b2:f3:fe:cb:11:9b:30:87:ad:85:19:0a:bb:e8:e3:65:39:
37:ec:82:7b:82:48:72:4b:13:98:6c:d7:d5:f2:eb:98:4b:f0:
62:63:45:84:26:6e:10:fd:f0:25:c0:50:0c:4f:19:54:9e:7a:
86:21:0d:44:65:51:ce:8e:f7:7f:bd:77:81:b7:1b:f5:a4:ba:
e1:c1:52:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:30 2025 by rpki-client