Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1jCy1EjNfHWpiEJZ-3_GuqzVJFs.roa
File: 1jCy1EjNfHWpiEJZ-3_GuqzVJFs.roa (raw, json)
Hash identifier: fuIX4jCfkm7ZI6To6CocPLJCOS5AzcYr4CfxYBpdQlA=
Subject key identifier: D6:30:B2:D4:48:CD:7C:75:A9:88:42:59:FB:7F:C6:BA:AC:D5:24:5B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DD316E05228C39AF2C349E49858518891
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1jCy1EjNfHWpiEJZ-3_GuqzVJFs.roa
Signing time: Thu 22 Feb 2024 23:11:48 +0000
ROA not before: Thu 22 Feb 2024 23:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d3:16:e0:52:28:c3:9a:f2:c3:49:e4:98:58:51:88:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 22 23:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d630b2d448cd7c75a9884259fb7fc6baacd5245b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f7:3d:71:f2:7d:83:82:8b:56:a6:d7:7c:21:
c7:e1:9a:56:cc:6e:6c:db:6b:de:01:8f:af:49:cf:
07:6f:7e:3e:cb:1d:76:ec:c2:a7:3b:7b:d5:0f:91:
bf:87:53:50:04:7b:1f:83:f1:cb:82:83:60:4d:a0:
22:b4:81:ba:73:31:41:db:23:94:9d:7b:aa:56:05:
cc:d9:07:54:89:b0:25:f3:77:0e:0d:00:5d:04:34:
75:f1:3b:75:ff:cc:dc:08:8a:eb:97:c8:3b:d1:78:
b2:3c:96:e9:e2:c5:b6:19:ea:ec:80:9f:ae:57:fa:
9b:23:87:ae:95:62:5d:92:15:8c:d0:3d:1b:1e:45:
d2:de:0c:28:0c:34:24:d9:47:72:13:a0:14:e0:6d:
94:c8:a2:64:64:2c:72:f5:71:f1:14:85:99:b0:91:
b6:8e:46:d9:97:41:b2:03:f5:fc:31:3b:c1:9d:04:
5c:19:11:92:7f:3d:5f:32:99:2a:4e:8d:02:9e:62:
e2:45:56:6b:f4:56:8a:dc:26:d4:61:55:2b:d0:5d:
c1:a8:8b:1b:bb:86:0f:b5:93:81:3c:b1:0f:56:28:
06:67:d3:28:70:31:da:00:6e:3c:a3:f1:e5:3d:71:
51:b4:da:8b:62:6b:cb:d1:5f:f3:14:e9:0c:a1:9b:
8d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:30:B2:D4:48:CD:7C:75:A9:88:42:59:FB:7F:C6:BA:AC:D5:24:5B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1jCy1EjNfHWpiEJZ-3_GuqzVJFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:52:91:95:c3:d7:c8:3d:bb:3a:bd:32:6d:b7:30:ba:00:f8:
2a:2d:db:b5:a1:9e:76:57:b5:9d:23:fc:f4:eb:18:ad:5f:0f:
e9:3a:a2:f6:62:8b:79:9e:a8:51:65:f9:d7:b1:ac:7e:6f:77:
9a:df:ad:f6:0e:23:1e:d4:4e:2b:f7:12:d3:d0:b7:79:f5:b1:
14:61:25:9a:ef:da:ab:13:98:99:b1:52:aa:35:ce:4b:19:0c:
52:6e:b4:c2:7d:39:0d:68:6c:74:7e:f3:21:77:68:77:64:eb:
ea:0e:f3:7e:73:0d:96:07:98:6c:df:71:f7:fc:6c:27:84:83:
ad:b9:79:69:3d:23:1e:86:92:4d:52:02:76:d2:b1:d4:51:e0:
f6:6e:ac:d4:fd:f2:fe:4f:fc:3c:ad:d9:af:cf:48:7c:7b:03:
ec:34:5e:c8:b1:3b:d8:2d:d5:4d:dd:80:12:6d:de:2c:8a:c9:
e8:2a:7d:fb:0a:c1:0e:7d:81:ae:ea:a0:e9:d2:09:bb:22:d1:
d9:4c:47:55:c8:f1:f8:cd:45:07:fa:c8:2d:d6:0d:1c:05:a5:
05:2b:5e:04:19:fd:95:9e:aa:d4:be:f1:8e:d0:f1:18:43:56:
a2:1c:2a:60:56:28:4a:4a:8e:90:78:61:95:90:de:f7:97:99:
7e:12:45:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:25 2025 by rpki-client