Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ywZb4F-kPb71kNRa3JfCTiqJBaA.roa
File: ywZb4F-kPb71kNRa3JfCTiqJBaA.roa (raw, json)
Hash identifier: kOG4ujrQMYNZhb8ogz3YIs1LcNARGtR+79YwFRG2QN8=
Subject key identifier: CB:06:5B:E0:5F:A4:3D:BE:F5:90:D4:5A:DC:97:C2:4E:2A:89:05:A0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D4C54C1E8D0DF5A765221F3F0F9F6077F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ywZb4F-kPb71kNRa3JfCTiqJBaA.roa
Signing time: Sat 27 Jan 2024 19:10:39 +0000
ROA not before: Sat 27 Jan 2024 19:10:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4c:54:c1:e8:d0:df:5a:76:52:21:f3:f0:f9:f6:07:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 27 19:10:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb065be05fa43dbef590d45adc97c24e2a8905a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b9:a8:01:49:a8:19:37:f4:fa:34:1d:b8:ad:
a0:f5:95:e1:a1:dd:9a:d3:ba:a5:8e:22:1a:3f:5b:
85:0c:1b:c8:c3:58:8b:b0:76:9f:60:be:5b:fc:3d:
34:3f:50:79:14:09:c5:d7:f2:03:45:9d:be:40:00:
98:81:5e:90:5f:c5:de:25:7e:f7:8a:40:f8:fc:34:
aa:51:df:7a:64:dd:90:78:88:a3:00:ea:0d:97:2a:
90:69:08:5f:06:4b:69:88:e1:66:4a:21:58:f1:16:
29:96:4c:97:b7:0c:fb:b4:51:22:ea:2d:a1:bd:db:
a1:bf:33:95:bd:38:cd:90:dc:30:8f:be:b8:72:05:
72:74:f7:99:67:73:e9:11:48:95:d0:6b:a3:94:23:
ac:d3:6d:7d:3c:f9:64:1a:c5:6f:bf:6c:45:d4:b6:
7d:c3:63:dc:1e:c0:39:19:e3:0d:29:9b:be:c3:ac:
87:cf:08:87:9d:dc:66:53:74:c2:43:2f:99:09:0c:
b5:cf:3e:51:33:72:74:6a:02:1b:0d:54:42:15:9f:
ce:af:14:94:1a:09:01:37:9a:ed:09:45:94:36:87:
ad:1a:f5:5e:c0:a9:59:97:6d:3e:fd:0a:38:fb:d2:
90:63:47:13:e7:28:a5:d9:30:ae:c9:77:09:c5:db:
c8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:06:5B:E0:5F:A4:3D:BE:F5:90:D4:5A:DC:97:C2:4E:2A:89:05:A0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ywZb4F-kPb71kNRa3JfCTiqJBaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:3f:be:be:86:17:37:0c:c4:4a:8b:10:d9:72:36:52:27:15:
90:ae:88:94:16:8c:4b:c1:ca:2e:28:0c:6d:b1:97:a6:af:69:
2a:a8:c5:b5:93:a9:ec:e1:bc:e2:63:16:6b:02:0b:dc:0d:0d:
84:34:de:73:f4:a8:d1:cc:6a:47:3e:0f:0e:95:26:3e:57:1f:
c1:9a:03:7f:0e:d6:d8:fa:1b:45:08:59:87:05:ce:95:9b:c7:
8e:5e:39:89:36:9f:4b:4b:c0:3f:0e:9e:f3:7c:9b:a2:f7:e4:
35:23:b1:39:36:71:f4:aa:fe:bb:d1:25:c9:54:17:4d:cb:a2:
7b:c4:0a:df:32:c1:ba:89:94:78:88:12:06:63:7f:7d:10:e5:
98:16:ce:be:2e:81:d6:79:96:db:2f:bf:20:22:e0:f8:e1:5d:
df:02:7d:58:ce:11:ec:a9:9f:7c:19:0d:0c:62:92:7f:e8:2e:
29:b5:c5:84:24:b9:c2:dd:3a:2f:b0:1c:6a:b9:76:fc:a0:6f:
ec:f4:0b:40:6f:0a:a4:78:6d:fb:08:d3:f7:ee:c9:02:4c:2c:
f7:df:8c:35:71:28:95:c8:bc:d0:a1:f3:ae:31:fb:21:b2:dc:
73:fb:03:c6:24:c1:e4:ae:ca:24:7f:0d:7c:84:1f:e9:da:05:
90:78:cf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:18 2025 by rpki-client