Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-N82QsYcgxEuFkXQ04bR3RtXDS8.roa
File: 1-N82QsYcgxEuFkXQ04bR3RtXDS8.roa (raw, json)
Hash identifier: t76mj8l37clrM5f4aQcMsdMWPR/DYd5n/Rf0B/kQzRA=
Subject key identifier: F8:DF:36:42:C6:1C:83:11:2E:16:45:D0:D3:86:D1:DD:1B:57:0D:2F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EDFBCA881EC60EF729984CD42FF64EBF9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-N82QsYcgxEuFkXQ04bR3RtXDS8.roa
Signing time: Mon 15 Apr 2024 03:11:06 +0000
ROA not before: Mon 15 Apr 2024 03:11:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:df:bc:a8:81:ec:60:ef:72:99:84:cd:42:ff:64:eb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 15 03:11:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8df3642c61c83112e1645d0d386d1dd1b570d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:a0:63:34:f1:a4:ec:3e:79:61:ce:e2:ed:
15:4a:14:02:1d:1a:ea:ba:98:7a:e3:bb:11:69:45:
f7:6d:ee:3e:10:11:fb:8a:e0:2f:2f:ad:64:88:fc:
35:61:1d:0a:be:44:fb:56:33:4d:b7:d8:79:ca:6f:
51:e8:6e:c1:b1:cc:bc:8f:a2:90:4f:ac:48:99:98:
e8:1f:f0:cf:3a:64:ea:0e:6e:9c:d4:b4:6f:c1:1a:
dc:89:76:a8:24:ab:38:60:ec:f1:3f:50:f6:9c:74:
d7:47:8f:e2:fa:21:68:fe:55:e9:d2:c7:d2:e5:d6:
a5:52:49:cc:22:0e:b5:b9:7b:ad:4f:1d:b6:87:d9:
0c:01:08:08:87:e1:0f:77:29:b5:d5:71:06:a7:23:
f3:8a:b5:e0:c9:3a:2b:66:95:e3:dc:38:6e:e4:79:
f9:b5:7b:8c:74:02:92:dd:44:77:0d:3f:21:3d:45:
64:4f:ee:83:d6:ea:5a:24:7c:06:0c:51:92:9d:cf:
c2:8b:05:81:fa:11:af:75:88:02:ed:40:e4:b5:44:
b0:fe:56:af:92:0a:9d:95:db:69:35:78:81:f0:b3:
65:c3:50:59:05:1c:c7:03:ec:67:e5:aa:7e:a7:5f:
b2:a0:b9:91:37:4c:c0:71:f1:08:49:2e:f1:e1:4b:
98:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DF:36:42:C6:1C:83:11:2E:16:45:D0:D3:86:D1:DD:1B:57:0D:2F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-N82QsYcgxEuFkXQ04bR3RtXDS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:92:a0:47:65:cf:7b:72:86:df:99:32:a8:4b:31:fd:11:8d:
31:06:2c:2b:aa:89:7d:38:23:75:96:ae:90:25:1e:49:bb:54:
b7:20:e8:03:6c:9b:7f:16:3e:e7:e7:a5:c2:f7:dc:0d:eb:8b:
4a:05:58:a6:bc:31:a4:48:f8:82:06:e3:af:32:5d:50:8f:4e:
a8:25:f0:20:52:ad:d3:97:b7:8d:cb:23:37:7e:20:34:84:f8:
8c:dd:71:6e:fe:ef:76:7f:a1:98:fb:e9:18:20:f2:4d:51:5f:
10:f0:65:e0:4a:22:98:b5:88:cd:2b:85:98:38:28:27:0d:72:
8c:2b:36:ec:24:93:ab:2f:f0:25:4e:d1:04:12:06:f1:8e:e8:
f7:af:3c:27:f2:0c:d8:a7:6f:f3:55:89:f8:43:38:9d:4a:4b:
b7:5f:a5:79:df:21:b4:e1:f4:db:29:dd:69:e1:ce:ae:72:32:
2e:18:10:6b:73:5c:f6:20:5d:58:12:c2:35:e5:e6:97:81:65:
fa:e4:16:2f:1a:06:92:80:db:37:f5:2b:1a:76:a4:fb:5a:b8:
7c:42:44:83:0b:52:30:0b:4f:10:40:83:fd:3c:0b:55:44:a0:
71:98:13:27:80:91:d9:61:21:22:24:fe:65:f2:29:00:0f:f9:
40:0d:b4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:24 2025 by rpki-client