Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0vgL8bEs-tdr0u32AV22ndzg5Ys.roa
File: 0vgL8bEs-tdr0u32AV22ndzg5Ys.roa (raw, json)
Hash identifier: yzIU6Fn+9FJnt0hRAIzS7e2eH3LAuxsFpJVuf+awNR8=
Subject key identifier: D2:F8:0B:F1:B1:2C:FA:D7:6B:D2:ED:F6:01:5D:B6:9D:DC:E0:E5:8B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D0A06E6081D3AF768E68DA5986B34EA92
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0vgL8bEs-tdr0u32AV22ndzg5Ys.roa
Signing time: Sun 14 Jan 2024 22:10:40 +0000
ROA not before: Sun 14 Jan 2024 22:10:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0a:06:e6:08:1d:3a:f7:68:e6:8d:a5:98:6b:34:ea:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 14 22:10:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2f80bf1b12cfad76bd2edf6015db69ddce0e58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8f:e6:b2:c8:0e:f9:aa:1a:91:a1:60:5a:00:
12:6d:2d:3e:0b:aa:46:be:6e:9b:8e:f0:b4:d8:f5:
dd:06:ab:d1:1b:96:24:90:bf:3b:21:61:81:91:f9:
d7:54:e7:ab:22:80:fb:6c:82:70:12:cd:3d:09:9b:
ca:1f:cd:97:ec:68:0b:b4:64:85:99:3f:0c:81:85:
79:0d:89:df:4d:9f:ab:8c:58:2c:9c:f6:e0:79:86:
61:fd:fa:c0:f5:3b:78:78:09:c9:c8:d2:b8:0c:a3:
3e:af:a6:cb:7d:82:f5:3a:b5:ab:a0:8d:5e:58:d3:
56:d4:2e:c0:6f:cb:97:37:2f:dc:1b:0f:de:4c:0c:
77:1e:1a:3b:4c:27:55:66:33:85:fa:5a:71:ee:98:
4b:c6:99:68:fa:c4:2c:13:85:b3:bd:36:08:17:a1:
7d:89:88:9b:13:84:92:b3:b7:12:c0:45:4a:10:8d:
aa:80:dd:f5:b1:96:e3:e6:84:be:cd:40:fc:33:f2:
e8:28:69:42:fd:56:1f:8d:7f:97:cc:aa:13:49:15:
b3:22:5a:0c:f5:83:c0:01:ae:d6:03:2d:3e:a2:c1:
db:21:0b:e8:40:60:d4:76:69:ed:9d:98:43:69:71:
ac:96:0e:b9:37:88:64:d1:c4:2d:3f:e7:6f:4b:ac:
c5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F8:0B:F1:B1:2C:FA:D7:6B:D2:ED:F6:01:5D:B6:9D:DC:E0:E5:8B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0vgL8bEs-tdr0u32AV22ndzg5Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:e9:82:b8:a8:1c:7d:40:0a:9f:1a:18:1d:22:cf:20:b5:d9:
c8:77:55:22:01:9b:2c:36:23:66:2e:56:22:e2:0f:dc:2a:e9:
15:b9:94:02:68:e9:fc:8c:35:df:3e:9c:f7:79:ae:d2:35:eb:
65:1a:91:9a:e8:78:af:44:29:24:c4:3b:98:84:f2:31:11:90:
7f:08:7b:c2:84:1e:67:5c:ed:65:fc:b5:37:29:d2:00:3e:bc:
8d:41:1d:51:85:08:04:78:35:71:51:10:cc:22:bb:bd:c3:ec:
eb:ef:ba:4a:64:55:37:01:18:1f:1c:28:69:61:7f:bd:9b:85:
ae:2e:46:61:44:83:14:7f:e8:2b:c8:35:b7:30:b1:a4:ce:9f:
18:a7:20:7a:a0:1e:7e:da:1f:2e:ea:ac:19:1c:96:41:f2:4d:
2c:2c:1e:7b:77:1c:c7:eb:55:a8:68:20:41:06:03:5e:cf:5e:
6a:39:3d:ab:bf:5e:50:d5:dd:57:1e:d5:5a:a1:2e:92:8b:4d:
59:3f:69:92:a7:28:7a:c7:46:41:ea:50:40:bd:cd:b5:a1:13:
d0:f8:5f:3a:b3:07:bc:4b:08:a7:ab:8c:9e:8d:0c:e9:0c:78:
af:ec:c2:0a:f1:c3:69:3f:48:2f:e7:1d:0d:9c:45:a0:70:c5:
c6:2e:ca:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:26 2025 by rpki-client