Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1sGllnVK6ifay9nWRd9W_PEKEhE.roa
File: 1sGllnVK6ifay9nWRd9W_PEKEhE.roa (raw, json)
Hash identifier: YbR6pyZoNb0107xR5yowRz7Rg4g3F2yNXbYwuhsYpME=
Subject key identifier: D6:C1:A5:96:75:4A:EA:27:DA:CB:D9:D6:45:DF:56:FC:F1:0A:12:11
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E30A7C582644DE3F2DD5B08363BBABC36
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1sGllnVK6ifay9nWRd9W_PEKEhE.roa
Signing time: Tue 12 Mar 2024 03:14:45 +0000
ROA not before: Tue 12 Mar 2024 03:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:30:a7:c5:82:64:4d:e3:f2:dd:5b:08:36:3b:ba:bc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 12 03:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6c1a596754aea27dacbd9d645df56fcf10a1211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:b2:38:bb:85:f0:e9:43:b8:61:93:6b:22:
16:f5:7b:41:13:34:8f:6a:cc:45:6f:29:a1:5f:2f:
e5:8b:55:65:27:34:e1:b8:7d:26:0c:8b:76:4b:c9:
72:bf:e5:b1:3a:09:92:a9:b6:a3:5b:35:b2:a6:b2:
40:8b:04:d0:e5:6f:01:4c:9f:d9:e7:4b:cc:9c:2a:
bb:6d:91:49:0f:0b:f4:3d:dc:10:59:cd:d5:28:c8:
79:52:fc:05:28:a9:42:16:26:d0:90:98:74:c1:c6:
13:fd:6c:ec:15:49:62:df:bd:ca:39:8e:2f:51:cf:
bf:dc:9d:d2:f0:53:ff:73:78:a7:49:2d:c1:3f:f8:
40:81:a3:19:71:d2:e1:c0:ce:5a:b0:b7:2e:84:81:
56:ff:49:e5:8f:29:93:8b:47:a6:1a:d4:88:32:e3:
03:c5:ec:ee:b4:98:d4:06:f4:1a:7b:c9:39:0b:77:
63:20:c4:47:25:be:c6:4e:54:e8:85:e7:e1:4d:ba:
ba:b1:eb:b9:ee:5d:08:8e:16:4f:58:ef:41:a7:83:
93:e9:9b:5f:de:b7:fd:01:fa:36:05:30:1a:a5:f6:
c5:99:fc:47:ef:eb:37:60:b3:9e:6e:46:9e:9c:cb:
bd:5f:0a:ab:00:17:02:6d:e6:57:f5:55:03:79:58:
97:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C1:A5:96:75:4A:EA:27:DA:CB:D9:D6:45:DF:56:FC:F1:0A:12:11
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1sGllnVK6ifay9nWRd9W_PEKEhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:a9:c2:9c:ae:6f:68:6c:a8:f3:e2:c1:ab:6a:68:7d:2e:f3:
ac:37:42:ff:2f:98:54:89:d7:b8:c5:8a:09:86:49:39:25:9f:
44:ff:b9:c1:6e:3a:47:d5:dd:d4:95:51:8b:ce:df:d0:51:f9:
99:d1:83:06:ec:70:74:9f:27:2d:e8:c4:96:3e:2d:9f:ed:d7:
93:37:e1:cf:2c:fe:57:1a:ec:cc:d8:f1:50:69:12:69:18:c4:
90:11:92:dc:b2:5a:a2:0b:6e:4a:57:b0:9c:fb:8e:56:cf:3e:
de:8d:c7:32:66:6e:26:21:1e:bd:b1:42:60:74:b1:63:6d:19:
1c:89:07:04:8a:01:7b:db:5d:48:1b:0d:12:33:fa:9e:77:48:
91:14:9d:e8:d1:38:95:71:d9:73:d9:3f:4a:b1:6f:4a:bb:14:
e0:e0:dd:b0:19:3b:33:5e:9b:ee:8c:65:9b:df:8b:04:e7:ca:
a1:e5:65:7e:fd:7a:43:71:b7:4b:b4:f0:0a:a1:31:a1:6c:ad:
8e:07:0b:b0:a6:a0:17:76:15:ad:1a:3f:c1:f1:56:1c:35:da:
c4:6f:5b:ce:40:00:1c:b2:4e:d1:fc:04:86:dd:b0:f5:4d:6f:
49:f8:f7:a7:68:39:77:28:e9:ce:d8:ad:55:5a:b3:69:26:fd:
32:4a:79:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:38 2025 by rpki-client