Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2EEhwjzJSleYmuke1LpxCt1XL8M.roa
File: 2EEhwjzJSleYmuke1LpxCt1XL8M.roa (raw, json)
Hash identifier: a6OfeQmw/nYLthHZUTNJSfCBy17oYSwI+YW/CwBnmmc=
Subject key identifier: D8:41:21:C2:3C:C9:4A:57:98:9A:E9:1E:D4:BA:71:0A:DD:57:2F:C3
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA267C364F3E8A19FF5459E8C193EC59F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2EEhwjzJSleYmuke1LpxCt1XL8M.roa
Signing time: Mon 25 Dec 2023 19:15:58 +0000
ROA not before: Mon 25 Dec 2023 19:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a2:67:c3:64:f3:e8:a1:9f:f5:45:9e:8c:19:3e:c5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 25 19:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d84121c23cc94a57989ae91ed4ba710add572fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5c:31:c9:00:14:e5:93:0e:75:c5:85:36:bf:
fb:d4:ac:47:e4:ef:03:a2:18:a4:b3:b0:27:28:e6:
2c:82:0b:7e:20:55:c3:71:2a:6c:47:28:85:ab:6f:
13:ea:d8:76:05:09:5d:96:e0:d8:68:61:56:7c:5d:
1f:77:71:37:b2:a5:45:5b:53:81:30:86:33:41:11:
76:53:2f:0d:6a:4b:0c:f3:64:31:98:80:c1:1f:1c:
30:7e:9b:2e:fe:20:aa:25:06:e2:01:09:63:a0:55:
80:7c:a4:a5:85:1c:82:b4:fb:8b:87:00:28:61:41:
54:45:bd:d7:af:3d:b9:6f:3d:84:8e:69:5b:5d:27:
34:43:1f:da:80:83:f0:a8:5e:85:53:85:ce:9e:e6:
cc:c1:11:e6:2f:75:b1:4b:e7:a0:7f:50:78:d7:ef:
80:67:d9:95:c9:16:5f:c3:99:86:0d:87:51:f1:31:
25:5a:11:25:8d:7d:7f:ce:c4:aa:1e:0a:9d:42:08:
a5:50:89:97:a3:60:35:c9:00:f0:92:8a:5f:54:11:
2e:3e:91:a9:69:51:61:4b:a4:29:b8:ba:4f:b0:89:
c7:26:dc:93:be:59:36:ac:04:34:02:1f:b5:73:18:
dd:d2:7d:2d:1e:a7:37:64:92:f4:27:31:cd:e9:0a:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:41:21:C2:3C:C9:4A:57:98:9A:E9:1E:D4:BA:71:0A:DD:57:2F:C3
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2EEhwjzJSleYmuke1LpxCt1XL8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:3e:16:ff:27:7e:63:e6:44:3f:3d:2d:a0:ab:cd:69:34:09:
87:13:02:cd:a0:4a:da:de:6a:cd:dd:74:10:b9:18:59:42:e6:
50:a9:2a:24:4f:90:14:63:8b:5e:1c:8c:97:38:3e:11:5e:73:
7e:56:a0:0c:b9:ca:01:41:13:45:f1:60:73:3f:1c:27:f6:59:
47:bb:dd:cf:1e:bb:0a:5e:d8:d9:c4:ca:c8:4a:d3:02:61:37:
d2:4d:f9:d2:cc:6c:ef:df:22:87:84:87:24:a4:ea:ec:75:44:
56:a4:d7:ec:00:3d:89:61:07:86:d9:58:fe:6f:3d:01:65:6b:
c7:e4:c5:36:c9:51:85:95:f0:ff:8f:cb:7d:4f:4c:2c:c9:37:
45:9d:66:92:6e:a0:d2:3f:25:17:e1:85:62:22:7c:52:9c:2c:
a1:0a:5a:68:e2:9d:00:a1:d6:a1:74:d6:06:4e:84:ec:45:44:
c9:04:6d:f6:81:0f:fa:3a:e2:1a:cd:6d:24:72:97:44:8c:6d:
e7:2c:b4:eb:0a:15:85:7a:0e:d9:a5:35:12:cc:1e:a3:56:60:
0e:73:b4:0d:c7:55:1b:90:84:cf:23:77:c7:08:6b:d3:c2:f5:
a8:d7:9d:aa:3a:e7:52:16:df:44:19:a9:db:74:5d:d7:21:23:
ee:ff:4a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:04 2025 by rpki-client