Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zbtWcDhpdaf7YRk6W2ng7-23HnU.roa
File: zbtWcDhpdaf7YRk6W2ng7-23HnU.roa (raw, json)
Hash identifier: bg0xIlDKsMR1e6WLjAw0AfKMmvQaWbE8G0qFvwr9lVA=
Subject key identifier: CD:BB:56:70:38:69:75:A7:FB:61:19:3A:5B:69:E0:EF:ED:B7:1E:75
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E27A5F004A8349E3393D350BBE1000CC4
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zbtWcDhpdaf7YRk6W2ng7-23HnU.roa
Signing time: Sun 10 Mar 2024 09:16:10 +0000
ROA not before: Sun 10 Mar 2024 09:16:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:27:a5:f0:04:a8:34:9e:33:93:d3:50:bb:e1:00:0c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 10 09:16:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdbb5670386975a7fb61193a5b69e0efedb71e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:f0:87:b8:58:72:d7:3c:79:8b:11:66:75:
1f:3b:fc:68:08:8e:df:09:c7:6b:89:cc:ba:33:70:
07:75:a5:0d:64:ca:6b:62:52:bb:3d:a3:cb:aa:11:
ac:6c:15:88:fd:57:32:e7:d5:dc:ad:38:98:0c:6a:
d6:b6:a4:06:36:95:bf:52:ad:96:bd:2d:f2:b9:eb:
c8:7a:cd:d6:95:b9:9f:cb:5d:e3:2f:ed:10:b1:94:
d2:a7:99:81:02:d5:be:45:ff:99:50:d5:23:86:a4:
54:34:2a:d8:45:d5:86:00:cd:e3:cf:9c:cd:c7:ae:
38:8d:84:41:01:61:b4:0a:a7:f7:2f:f2:c9:64:8b:
22:45:03:a6:d9:ac:57:42:d8:ae:9f:21:67:db:e8:
78:e6:0c:8f:ba:8e:11:12:1a:15:b3:b2:82:8f:1b:
42:cc:b1:5b:22:4e:c6:53:98:5c:69:6e:e5:c0:f5:
18:33:75:cd:86:90:26:3a:2e:fe:ca:99:8a:71:54:
32:c1:da:c7:30:4b:3c:2b:07:e4:cc:e3:c1:29:91:
29:b7:f6:71:9a:2f:9e:a2:c1:64:af:ad:4c:82:19:
22:de:36:31:17:e9:6c:13:5a:97:a4:58:bc:9c:23:
cf:30:a5:21:d0:35:cf:9e:7a:b5:4c:a5:1d:c6:95:
9b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BB:56:70:38:69:75:A7:FB:61:19:3A:5B:69:E0:EF:ED:B7:1E:75
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zbtWcDhpdaf7YRk6W2ng7-23HnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:0d:6f:91:35:88:8f:d9:5d:96:a5:6e:4e:3a:80:e8:dd:ea:
74:9e:4e:0f:c5:3e:bf:da:54:ab:eb:16:c9:9d:c3:4e:34:8e:
bd:bc:35:ed:a7:51:f5:57:8d:63:5b:17:2b:af:87:37:4b:7b:
c3:c0:07:c0:38:20:c9:a4:6d:ac:f0:7f:29:7c:f2:00:e0:aa:
70:97:78:44:1a:96:2d:ea:e6:65:56:8b:d2:69:24:e9:3a:f6:
b6:f1:04:d1:e3:08:eb:35:49:7f:01:e5:fa:3b:c2:f9:a3:af:
4d:72:1f:b6:ed:50:4a:74:57:9c:4d:3c:80:bd:b4:57:d4:31:
0b:90:c2:f5:e0:4f:d2:16:f1:d6:ac:b9:34:ba:23:f3:d1:63:
fd:32:83:df:44:78:8e:f1:9e:d0:c2:05:24:27:f6:b7:ec:5c:
6f:03:73:ac:b6:b0:9a:9e:f2:01:c2:cb:17:2b:8b:5a:82:ce:
13:21:04:0c:12:c8:6b:df:52:be:bb:bf:cc:96:77:d7:4c:4f:
ef:ab:4f:58:05:b4:66:6f:e7:9b:85:fc:d0:77:16:70:a8:af:
9c:e3:00:33:cb:7d:33:e2:42:7d:f8:f6:97:2b:92:a7:42:7a:
94:b1:fa:9a:fe:1a:fd:d4:f8:ef:c1:ef:9a:dd:73:41:85:98:
03:64:85:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:10:50 2025 by rpki-client