Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3BTwCdyYn7LnFvaa3E0Ar_3loCc.roa
File: 3BTwCdyYn7LnFvaa3E0Ar_3loCc.roa (raw, json)
Hash identifier: GuB9pQhD+PDTBYFnxRcg6bMUdr8m23eBnNUT/ASkn6A=
Subject key identifier: DC:14:F0:09:DC:98:9F:B2:E7:16:F6:9A:DC:4D:00:AF:FD:E5:A0:27
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE10BFC5FEBD6CB9E8500363ECBD81879
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3BTwCdyYn7LnFvaa3E0Ar_3loCc.roa
Signing time: Sat 06 Jan 2024 23:11:48 +0000
ROA not before: Sat 06 Jan 2024 23:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e1:0b:fc:5f:eb:d6:cb:9e:85:00:36:3e:cb:d8:18:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 6 23:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc14f009dc989fb2e716f69adc4d00affde5a027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e1:8f:3c:ca:33:e2:c3:e6:53:48:f5:ff:cb:
1f:11:2d:ab:e6:eb:49:20:56:fc:f1:dc:95:25:7b:
90:e2:03:f6:d1:f3:6b:ee:e3:f2:8f:b5:ef:53:26:
25:55:a3:ef:5e:40:51:e4:bc:76:e5:8b:5b:2f:3f:
c3:81:39:94:eb:1d:2a:05:f8:e2:bf:e1:07:44:e8:
c0:e4:47:8e:aa:07:a5:b7:f0:69:e7:b6:3f:53:10:
71:96:87:24:4b:b2:ed:a0:b7:10:12:04:b7:fb:d6:
7f:f4:47:d2:c8:5d:fb:25:e0:c9:6f:4c:54:b8:7b:
b9:15:5d:61:39:6e:5a:64:6a:fb:e7:78:82:52:16:
5c:4a:21:db:cd:6d:06:e0:56:8d:f9:e4:96:2e:18:
6f:fc:b9:53:43:f1:bb:2e:c7:df:96:c9:7f:0d:de:
ce:71:92:4e:65:94:44:e8:5d:69:11:52:17:eb:27:
02:10:45:f9:d0:44:fb:fe:ad:ff:ee:a8:c4:39:02:
f6:f5:9e:60:8c:0f:9e:5b:41:20:a9:9e:d4:1d:ac:
3b:1b:b2:41:bb:70:6e:dc:a5:e2:b8:5c:86:9f:f6:
16:a6:18:c7:5c:03:8f:4a:e7:61:29:42:52:b7:13:
0f:1a:ae:a5:1b:2f:65:ec:99:b2:56:0c:8b:59:3a:
c3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:14:F0:09:DC:98:9F:B2:E7:16:F6:9A:DC:4D:00:AF:FD:E5:A0:27
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3BTwCdyYn7LnFvaa3E0Ar_3loCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:c8:39:64:05:f8:b5:7d:15:9b:39:b8:de:33:51:5d:b2:bd:
7d:3e:dd:a6:e3:2c:cf:f8:1a:c6:60:fa:28:4a:f4:cb:c2:1a:
90:bc:0e:84:ae:5d:73:38:d9:5a:49:64:0d:83:7c:2f:ad:74:
1c:53:23:83:91:24:77:a3:05:44:81:fe:2b:67:8e:84:f7:bc:
b0:96:b0:33:5f:e3:1f:cb:c2:55:8e:c0:8e:20:29:1f:59:24:
48:99:a3:29:b4:46:81:b2:89:f5:cd:ae:10:e7:56:d0:8e:3a:
84:73:6b:0b:b1:52:a5:a2:cf:26:51:5c:ce:d7:59:ce:96:e3:
5a:12:31:8e:a5:31:59:9e:89:06:2d:2d:96:ad:f4:7a:57:3a:
9c:cb:5c:69:4b:59:14:5d:44:ba:7f:0a:b5:6f:4b:20:99:ba:
a3:d9:c4:49:d6:56:52:d0:6d:d7:68:66:d8:b0:19:49:51:86:
33:78:72:05:31:cc:d6:50:2b:6e:1f:97:e3:4d:a6:f8:18:2b:
9c:ed:87:5c:0a:77:12:54:b5:d7:ab:1d:8b:61:30:84:20:39:
e5:da:58:ef:0b:a1:c5:cf:28:44:e0:1e:4c:a9:d2:86:ca:30:
7e:01:00:89:c9:bc:1b:fd:7e:b2:9a:29:1b:b8:57:86:42:90:
eb:79:86:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:10:31 2025 by rpki-client