Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1GFZLDZJRASxzfL2idoV-E2shB8.roa
File: 1GFZLDZJRASxzfL2idoV-E2shB8.roa (raw, json)
Hash identifier: IB5gefo5soa3q5OayziwOcZl1+TxrLsD0Oy4xgpdupQ=
Subject key identifier: D4:61:59:2C:36:49:44:04:B1:CD:F2:F6:89:DA:15:F8:4D:AC:84:1F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB12E213E2D84AFC0E523BA728EAFC44E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1GFZLDZJRASxzfL2idoV-E2shB8.roa
Signing time: Sat 06 Apr 2024 02:12:54 +0000
ROA not before: Sat 06 Apr 2024 02:12:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b1:2e:21:3e:2d:84:af:c0:e5:23:ba:72:8e:af:c4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 6 02:12:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d461592c36494404b1cdf2f689da15f84dac841f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:36:85:a9:f0:ec:59:6f:b3:4f:0e:36:4a:2b:
df:47:6a:52:f1:41:6e:d3:78:fd:b0:72:4e:34:70:
d6:80:d0:93:45:58:29:1c:4e:5f:82:9e:90:1f:b2:
2e:f1:37:6c:77:87:c3:07:19:d9:a3:90:4b:13:6f:
3a:b6:b9:13:97:eb:d4:4a:58:de:06:89:9b:63:74:
90:c7:2d:10:e9:02:eb:9f:d8:ad:3a:a3:dc:bd:f1:
d9:94:8c:a1:8a:e7:3d:0a:f3:ca:ea:99:fd:0f:d0:
64:04:1c:fb:d2:9c:e1:11:72:6d:c6:85:15:d7:c8:
c8:1e:1a:89:6b:d8:a1:5c:55:eb:64:3a:23:5d:a6:
a5:11:55:99:1f:88:dc:91:a2:81:3c:6f:37:d5:2f:
8b:c0:8e:1d:01:3f:4c:e4:0c:22:7e:82:1a:a1:86:
61:d5:2f:a8:8d:58:e4:66:29:1b:3f:a4:16:75:27:
5b:c6:55:f0:15:e9:39:37:3f:2e:41:0d:b8:33:56:
fa:da:6b:08:e0:4c:5c:19:c5:e4:8c:e8:01:87:4f:
a5:ae:1e:ef:d8:1f:a2:4a:56:ef:37:be:5d:ca:a5:
6c:fd:c8:5b:e9:8a:06:18:12:06:71:ba:e2:b4:fe:
4c:6c:89:8b:da:0c:de:a1:50:f2:99:c0:df:89:fa:
db:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:61:59:2C:36:49:44:04:B1:CD:F2:F6:89:DA:15:F8:4D:AC:84:1F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1GFZLDZJRASxzfL2idoV-E2shB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:9d:de:ea:a8:5f:12:3f:c2:a4:78:2c:c1:86:3d:63:09:25:
ed:4e:46:8b:a7:3d:54:4b:c5:d7:9d:03:9b:e5:e9:17:3d:66:
6b:83:6d:17:f2:a8:48:ef:66:03:8e:21:5f:b1:ea:ea:eb:bb:
a2:92:91:76:9f:52:14:fd:71:29:e1:8f:8c:b3:79:84:3a:28:
f9:42:66:99:da:03:1d:a7:f0:e4:9a:e7:f0:5a:40:18:d5:16:
d4:46:c0:2f:22:95:09:a1:88:70:e8:6f:74:71:44:33:55:ad:
3c:89:9e:a0:47:87:6f:8b:49:fb:2d:bd:26:68:96:48:75:d8:
e1:4a:14:f8:30:cc:45:a5:73:af:ad:f9:9d:3c:bd:49:9c:f9:
1e:3c:21:0a:36:df:d3:6a:6f:a0:62:d1:83:e3:b9:88:4a:96:
6e:21:51:a1:c3:94:14:98:77:02:8f:97:a2:68:e0:8f:9f:6d:
9a:f4:14:cd:42:a9:72:b3:cd:8f:0c:3f:c5:05:01:f5:66:c5:
5d:cf:e6:55:f7:60:8a:0b:3f:99:6d:b4:f4:77:50:dc:e0:43:
43:16:63:10:c8:b3:b6:63:95:2c:58:f5:25:d1:b6:c7:3d:ca:
73:14:0b:5e:29:f8:2b:19:29:bd:66:86:e6:8f:5c:e5:fa:62:
9a:1a:d3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:22:29 2025 by rpki-client