Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-YB0Up4xTKAcPDUpvGDLCpjLGoI.roa
File: 1-YB0Up4xTKAcPDUpvGDLCpjLGoI.roa (raw, json)
Hash identifier: lVyGVLRDzc6s1NHlO895LbYS6PXWhM0ZuWjq23mFKgs=
Subject key identifier: F9:80:74:52:9E:31:4C:A0:1C:3C:35:29:BC:60:CB:0A:98:CB:1A:82
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C984E4FAD08C3488AC7AD1371BC115AAF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-YB0Up4xTKAcPDUpvGDLCpjLGoI.roa
Signing time: Sat 23 Dec 2023 20:11:58 +0000
ROA not before: Sat 23 Dec 2023 20:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:98:4e:4f:ad:08:c3:48:8a:c7:ad:13:71:bc:11:5a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 23 20:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f98074529e314ca01c3c3529bc60cb0a98cb1a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:32:d1:1c:d1:fc:a5:78:71:8f:40:af:bc:db:
be:51:b1:b7:fc:47:57:90:3f:de:1b:03:a0:ff:0a:
93:13:a5:06:1c:5e:53:c1:1b:f2:26:db:f7:98:7a:
a5:9b:f9:6d:11:c1:71:93:45:09:7c:35:15:0c:2e:
2e:8c:30:cf:d3:47:57:6c:db:44:8c:ac:59:eb:07:
93:a9:f2:01:d7:c6:2c:ec:e0:67:ea:a1:fd:8c:8f:
d2:8e:83:8d:fe:a5:b5:cb:47:f0:a5:14:cd:d1:50:
92:8c:c6:fd:a3:4b:25:2a:c5:26:5b:e1:43:cb:ce:
d4:c8:3e:4c:55:41:b9:3d:b2:1c:dc:14:85:81:f5:
2d:c9:31:32:69:4b:35:22:22:9d:00:55:d4:86:35:
7f:9c:68:4f:6a:56:e1:f0:ab:84:ab:cd:7e:ef:39:
fb:ef:28:34:3f:79:13:08:59:0d:34:e3:6c:1c:0f:
9d:06:e2:36:8e:2d:db:c5:3a:c1:fc:c2:1b:f6:15:
d2:77:c5:5a:a2:5d:96:a6:65:a3:c7:d2:b4:28:26:
57:0d:8b:69:59:50:e4:3d:2b:20:28:c1:36:7a:bd:
4e:93:d7:8c:0f:cc:f9:da:ce:58:61:1d:d2:8d:a7:
32:21:ff:08:7e:1d:62:e1:02:0a:72:83:8e:08:fd:
74:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:80:74:52:9E:31:4C:A0:1C:3C:35:29:BC:60:CB:0A:98:CB:1A:82
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-YB0Up4xTKAcPDUpvGDLCpjLGoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:26:88:34:7b:d3:23:b0:fe:be:57:b9:1c:83:03:77:5a:06:
6d:12:8e:0f:36:06:a1:c5:f9:ae:ef:a8:c6:43:7e:28:fe:2a:
bb:ba:5b:ad:ca:2f:17:de:63:18:8e:9d:c1:ca:7b:57:ef:f2:
20:eb:a6:c0:32:6a:ef:2c:57:8a:b4:b0:f5:09:7a:95:e6:23:
32:76:91:0b:80:bc:00:aa:0c:3e:f8:02:1f:6c:65:a9:c9:fd:
07:b4:cf:44:9b:8e:d1:dd:4a:59:0b:4a:59:30:df:6f:b1:24:
9c:8a:82:b8:74:17:b7:d5:e4:38:3e:69:e7:79:c5:0a:65:9d:
73:9a:71:3d:49:4e:9f:1c:14:5a:00:51:2d:50:bc:28:b5:4c:
f4:ab:81:88:28:be:9c:06:f1:08:7c:87:d9:a2:91:e6:2a:5d:
92:d4:c3:d8:42:ab:e3:01:c5:d6:7c:0c:15:05:1d:44:ce:cf:
ea:e2:2a:74:91:8f:13:dd:d3:2d:91:73:d2:f5:d8:88:94:e0:
0c:a6:2d:f6:b6:fa:ca:23:58:ab:83:9a:48:dc:f4:59:49:20:
4c:d6:73:03:0b:33:18:c1:f3:b3:68:0d:fa:97:21:72:74:83:
29:9b:b3:6d:63:e4:e3:dc:f1:87:05:01:7f:c1:b9:b6:8e:55:
65:47:cd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:22 2025 by rpki-client