Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0nmS_jqLkjOP2P1vtdnPHJmcXb8.roa
File: 0nmS_jqLkjOP2P1vtdnPHJmcXb8.roa (raw, json)
Hash identifier: DUZHzJUj1th//w8y1zQtKevSiDOmD7GO9OcT6zy+uqk=
Subject key identifier: D2:79:92:FE:3A:8B:92:33:8F:D8:FD:6F:B5:D9:CF:1C:99:9C:5D:BF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E0282C4F7186527B7257BED1154F96AD8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0nmS_jqLkjOP2P1vtdnPHJmcXb8.roa
Signing time: Sun 03 Mar 2024 04:11:48 +0000
ROA not before: Sun 03 Mar 2024 04:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:02:82:c4:f7:18:65:27:b7:25:7b:ed:11:54:f9:6a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 3 04:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d27992fe3a8b92338fd8fd6fb5d9cf1c999c5dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:af:13:3a:13:c3:46:c7:9c:97:7c:88:6f:
d5:aa:f7:ec:ce:b1:a2:7b:b3:4d:6f:37:5c:14:75:
82:0f:1b:00:87:53:c5:24:26:c8:dc:9e:07:f0:dd:
92:08:de:91:8a:de:0d:0d:50:1a:b1:be:f9:d8:2b:
87:97:f7:72:dc:95:fe:d5:b2:b8:c0:c7:7e:b2:5f:
21:c7:3d:c2:7a:8f:f3:9f:e2:5b:40:40:80:a4:09:
2b:ee:4d:9e:5e:8f:08:71:3a:bf:4b:2d:8d:3d:9d:
80:41:be:bb:54:30:a9:8b:32:e2:a3:24:af:f6:dd:
45:52:e7:0f:e9:dd:f1:a8:c2:0c:8c:21:20:2c:04:
de:79:12:90:e4:70:ba:36:14:92:64:9a:80:c6:db:
2e:85:f0:17:8f:0e:63:e0:ba:50:dc:b4:ab:7a:52:
c3:63:ac:be:82:82:b0:d9:20:07:2d:8f:a7:c2:21:
80:85:16:b4:cb:62:bf:f9:4d:44:01:0e:83:20:6d:
b4:f9:91:b9:14:40:02:a9:a8:0a:3a:3c:6d:28:ff:
58:34:57:96:2e:6a:f4:28:3b:aa:ea:67:0a:1b:a3:
16:59:e5:7f:72:68:7b:8f:f7:8a:e3:76:0d:66:29:
1b:d4:44:fb:25:c1:bd:92:67:40:fe:77:e5:37:ed:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:79:92:FE:3A:8B:92:33:8F:D8:FD:6F:B5:D9:CF:1C:99:9C:5D:BF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0nmS_jqLkjOP2P1vtdnPHJmcXb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:d7:4d:cf:ae:fa:42:59:95:c2:7d:14:20:3e:75:67:d3:14:
c4:b7:e8:65:8d:ea:7f:40:72:88:4c:99:e4:e1:37:a4:4e:9e:
26:a1:74:34:a2:67:fd:d7:20:15:69:1d:07:79:e2:23:8c:68:
a1:32:d4:34:a9:2b:cc:7b:9f:dc:63:03:43:3d:31:1c:f7:73:
b1:cf:12:1d:17:6d:a4:05:3c:77:ae:2e:32:17:bb:be:49:24:
1d:1b:04:ef:a3:44:8e:e2:99:62:91:1a:0a:68:37:6d:1d:b4:
5c:33:0e:de:fe:f1:34:5b:ab:d3:d4:65:1d:b2:98:c7:a6:de:
8c:f1:0f:2d:e8:ef:4e:6d:1a:10:f6:9e:94:f8:84:20:88:d4:
68:86:bb:61:cd:6d:ef:1d:d6:a7:7a:4d:bf:4f:36:98:22:41:
59:4c:9e:2d:cd:5b:3a:ac:2d:12:53:cb:a2:4a:8d:e0:4a:45:
c9:91:4e:eb:85:d7:2e:c4:a7:d1:02:f1:95:e9:d5:68:59:c2:
91:d9:8b:0b:5d:17:80:b3:25:16:5f:b4:ec:8b:93:a7:18:a0:
9a:c1:b5:1e:56:48:ee:0d:eb:8a:59:f8:7a:36:2c:45:7f:a4:
96:35:38:60:55:1f:f7:12:ce:e5:4a:7b:bb:da:81:16:58:97:
48:2a:e2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:32 2025 by rpki-client