Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xsBFzb_aWXZaIpselVcF3pWbC90.roa
File: xsBFzb_aWXZaIpselVcF3pWbC90.roa (raw, json)
Hash identifier: SPsV5XPsLN9ZRbftW0O8+xpikWOkhtkBpSB65ISQKtY=
Subject key identifier: C6:C0:45:CD:BF:DA:59:76:5A:22:9B:1E:95:57:05:DE:95:9B:0B:DD
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E5586DCA4F3A67CACCC1E12D2ED45FAA2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xsBFzb_aWXZaIpselVcF3pWbC90.roa
Signing time: Tue 19 Mar 2024 07:04:45 +0000
ROA not before: Tue 19 Mar 2024 07:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:5586:68e6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:55:86:dc:a4:f3:a6:7c:ac:cc:1e:12:d2:ed:45:fa:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 19 07:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6c045cdbfda59765a229b1e955705de959b0bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a9:80:e0:30:64:3c:02:c9:d7:67:6b:c2:06:
15:d6:90:fa:95:6d:34:cc:b2:d9:d4:46:62:63:a4:
c5:8c:c4:95:36:47:91:05:2f:1b:b0:d4:ce:4e:d4:
52:7c:db:53:87:79:3c:33:9d:6a:6e:fa:45:77:43:
62:6e:05:10:f0:ad:91:70:5f:50:bb:75:73:7a:31:
7b:d2:8c:49:52:99:36:47:b0:5d:b3:c8:41:2b:b9:
7c:01:1a:45:0e:f9:e3:dc:a4:56:b4:67:01:3b:f9:
6f:6b:5e:28:65:8a:7f:84:f6:02:6a:18:6e:e2:8a:
b9:06:4b:91:48:e1:37:d2:99:ee:56:9f:bf:4a:91:
68:c2:32:33:b1:79:b7:9d:41:63:01:03:69:b5:19:
bc:a4:66:61:78:e6:47:9f:de:24:38:88:85:cf:c2:
27:bd:57:ef:d2:0d:43:c4:57:ba:33:87:f9:63:c9:
d9:c1:34:80:ea:16:06:78:fb:66:15:eb:1d:24:c8:
81:4b:3e:57:9a:3a:5c:d8:24:f1:b7:3b:86:cb:6c:
5e:0b:54:18:63:0c:98:25:dc:b0:00:b0:a9:81:a0:
1a:be:01:d0:34:af:dc:07:6d:70:b3:ea:75:ec:20:
cb:ff:5d:6f:8a:16:83:33:ad:f3:57:38:2b:7f:b9:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C0:45:CD:BF:DA:59:76:5A:22:9B:1E:95:57:05:DE:95:9B:0B:DD
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xsBFzb_aWXZaIpselVcF3pWbC90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:8b:07:19:33:87:29:d4:d5:46:7d:48:f4:6a:87:c4:82:59:
ae:b9:10:50:0d:de:48:01:0d:8c:8f:b2:6f:b7:27:3b:3a:99:
48:cc:75:e2:a6:ac:52:d5:14:22:a1:3b:57:78:61:b1:9e:a4:
42:5f:19:30:7f:5e:64:5a:b2:f1:91:bd:e4:68:b4:79:82:d7:
eb:4c:e0:c8:c1:59:9f:1c:8a:60:3b:84:65:a4:dc:60:53:17:
a7:b5:31:ca:1a:15:d8:e3:d7:9d:26:53:e6:76:81:8a:2d:90:
7c:8b:4b:57:f6:a4:df:53:65:12:06:7a:e2:c0:83:02:c9:9c:
13:ba:6c:69:2e:30:cf:09:0b:e8:11:c2:06:65:5c:bf:aa:d6:
52:d0:81:98:c4:39:9a:61:1b:8d:38:c1:dd:4e:f3:0f:c2:66:
7f:c5:4f:bd:f4:7f:d4:cc:25:b3:08:f9:e3:2a:5c:28:87:70:
eb:cd:a7:a7:94:17:54:4c:78:d2:12:16:0e:bd:6f:37:94:1a:
9c:ac:57:2a:49:94:da:ab:02:ee:f7:dd:ab:72:3d:a2:da:8f:
28:cb:d2:5e:3a:8f:b2:92:d7:79:1b:dd:91:e6:42:44:4d:b2:
0b:ec:80:45:a2:29:5f:d3:14:36:c4:dd:d7:c4:e7:2b:1f:a8:
bf:f5:48:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:22 2025 by rpki-client