Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0iIdmZ3mjdZWRKR3yJNnDoZsS6E.roa
File: 0iIdmZ3mjdZWRKR3yJNnDoZsS6E.roa (raw, json)
Hash identifier: SdZt5BKZZvmeYeU2AdpEJxxYRBoaDMIRWrw2cSAKC1E=
Subject key identifier: D2:22:1D:99:9D:E6:8D:D6:56:44:A4:77:C8:93:67:0E:86:6C:4B:A1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D1268CAF3749F0911AA398F42BC15E551
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0iIdmZ3mjdZWRKR3yJNnDoZsS6E.roa
Signing time: Tue 16 Jan 2024 13:14:34 +0000
ROA not before: Tue 16 Jan 2024 13:14:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:68:ca:f3:74:9f:09:11:aa:39:8f:42:bc:15:e5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 16 13:14:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2221d999de68dd65644a477c893670e866c4ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c0:96:75:aa:c1:e5:67:de:b4:d7:90:94:4f:
10:69:2f:07:99:42:2a:22:2b:a1:bc:13:be:bc:d0:
df:1c:a9:db:36:ce:61:0e:4a:ed:9b:0f:7c:b8:0f:
bc:e5:2f:72:eb:45:92:a2:67:9c:48:f2:7c:45:59:
81:b2:35:1f:50:0a:1e:84:45:ad:46:66:1f:45:8a:
55:03:3c:dc:05:22:c3:fe:19:3c:dc:10:f7:16:b9:
6c:8b:61:59:e0:74:8f:63:74:06:30:68:79:89:86:
de:04:e2:61:1f:91:ac:7a:b2:3e:8d:d0:6e:6b:2c:
8c:82:ec:41:f7:6f:bd:03:97:3b:0d:4c:9e:5a:a2:
5b:eb:15:15:d6:b4:77:55:2b:90:1e:03:e9:d4:a2:
53:68:97:18:d3:fe:de:47:bd:56:60:63:e3:73:22:
61:4c:65:aa:32:f9:fb:f9:1f:6c:3f:e8:aa:38:10:
53:cc:33:bb:10:1d:61:18:5d:73:35:c5:a3:57:56:
de:f8:b9:94:b8:2c:95:8a:7a:5d:48:b1:6f:4f:dc:
5b:97:61:d6:5c:0a:8d:93:5e:76:c1:e2:ec:06:a7:
18:b9:e6:cc:d2:f4:c2:42:7c:5b:55:ec:8d:75:4e:
ef:9c:2e:39:75:8e:a7:9b:c9:76:d7:26:83:99:9d:
b0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:22:1D:99:9D:E6:8D:D6:56:44:A4:77:C8:93:67:0E:86:6C:4B:A1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0iIdmZ3mjdZWRKR3yJNnDoZsS6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:17:88:59:d7:98:89:63:b8:81:0b:3c:1b:97:85:6c:bf:8e:
59:48:cc:06:1e:7d:62:16:fc:64:da:0e:2a:ef:4c:b9:46:d3:
bc:4d:47:c4:6f:cc:85:5a:33:0b:13:36:d7:4c:cc:b7:80:5e:
36:c8:7a:22:38:5b:96:50:85:6d:60:9d:54:e4:60:f7:9d:6e:
a9:7e:30:5b:7b:bd:1a:c1:ba:37:0e:4b:8f:52:df:2f:57:d8:
2a:9c:73:59:f6:cf:96:d9:bb:c5:1a:05:63:5d:75:3f:b3:f7:
97:a1:35:24:c3:a7:51:d2:8c:52:2c:2a:13:50:3a:ba:14:f6:
bd:31:ff:43:b6:f9:27:e9:be:68:1f:e4:e7:07:f8:3a:1c:92:
11:e8:e3:ab:ff:b9:06:5f:5b:38:a2:c5:4c:91:c3:01:01:68:
89:57:07:b4:4a:42:35:ff:cc:a1:d8:45:f9:50:cb:2e:ed:8b:
5e:68:85:d8:84:ce:33:06:c3:39:2b:cd:2c:b1:47:b4:b7:23:
31:b0:31:da:20:11:8b:32:a7:5e:73:75:c5:0c:38:3d:6f:75:
11:4f:e0:93:81:78:42:f4:99:23:97:9c:12:ff:ff:3f:4b:85:
d6:43:cc:fd:66:49:44:9e:4d:f9:32:17:73:a1:ff:2f:e3:11:
40:95:19:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:38 2025 by rpki-client