Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3EhiLQXQHZrOcw9yFkqW8IvHtNA.roa
File: 3EhiLQXQHZrOcw9yFkqW8IvHtNA.roa (raw, json)
Hash identifier: 3k4lhViWqPEjkxDQwRLvvdTJ36dmqbXQNHXCjxWRLlg=
Subject key identifier: DC:48:62:2D:05:D0:1D:9A:CE:73:0F:72:16:4A:96:F0:8B:C7:B4:D0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CAD8D75C1A10215BB47F703A0D6EAEBF5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3EhiLQXQHZrOcw9yFkqW8IvHtNA.roa
Signing time: Wed 27 Dec 2023 23:12:58 +0000
ROA not before: Wed 27 Dec 2023 23:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ad:8d:75:c1:a1:02:15:bb:47:f7:03:a0:d6:ea:eb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 27 23:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc48622d05d01d9ace730f72164a96f08bc7b4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:fa:82:f1:e8:f0:40:04:ef:6b:97:6d:4c:
40:63:df:73:d4:8f:13:e6:1d:35:ab:f2:3d:c2:eb:
dc:b4:e3:b7:6b:22:0c:de:2e:28:43:c8:6d:02:f0:
0e:b7:73:34:6c:95:71:30:d4:0f:33:c5:1b:f2:73:
b3:6b:21:33:b6:2a:23:42:a3:dd:dc:8c:92:f7:b9:
93:62:ab:ee:00:9e:40:6b:66:d5:a3:c8:f7:c6:06:
32:2e:b1:44:7b:99:10:d7:01:38:a2:4f:12:e7:87:
1a:b1:b2:27:b0:8a:98:39:66:e3:75:b1:35:fa:5e:
58:b3:39:1f:fa:07:ff:41:47:7f:c8:41:c6:a6:6b:
f7:2c:4e:96:ad:23:4a:34:68:a0:02:4a:b0:3b:03:
c3:2d:ee:37:91:67:26:76:21:d3:25:cb:08:1b:35:
b4:91:5b:31:98:c8:27:42:95:0c:7c:2e:31:d2:a3:
5e:12:4f:a5:f7:1a:72:78:82:08:a1:6f:b0:f4:21:
db:a5:06:1a:f1:77:ae:8d:1c:95:c1:ac:13:04:9e:
05:56:9b:d4:bb:fc:7e:b2:98:a1:9f:c2:80:ad:7d:
bd:ea:e4:2e:c5:48:c3:07:2c:81:ab:22:40:ea:70:
32:7e:be:45:be:42:b1:aa:ac:c4:a1:5a:a7:b3:11:
ef:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:48:62:2D:05:D0:1D:9A:CE:73:0F:72:16:4A:96:F0:8B:C7:B4:D0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3EhiLQXQHZrOcw9yFkqW8IvHtNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:4d:56:05:da:f9:da:96:6c:58:1f:6d:e2:7a:7c:9c:2a:a7:
08:63:63:0a:f7:18:ed:41:e0:43:85:2c:40:f3:9f:97:30:93:
5b:e2:2f:c2:98:b9:8b:48:a4:af:a6:01:e4:e6:c8:5b:d7:55:
31:2f:22:f5:48:79:a6:14:64:01:03:f7:f2:6f:87:f1:73:d4:
3d:6c:26:e3:ca:e0:4a:1d:12:a0:29:03:f2:4f:67:51:0e:8b:
5b:e9:00:e0:dd:46:79:c6:3f:23:90:e6:aa:7b:60:90:9f:c8:
75:29:50:c8:54:78:d6:2f:21:ae:99:13:b8:10:0d:bb:1e:5e:
4f:b9:6c:9f:46:88:d3:9b:76:64:5a:54:77:e5:2b:c7:bc:8e:
62:3d:e6:20:54:a7:2d:7d:b6:d6:10:2d:0e:14:3d:ce:10:2c:
ec:f4:05:ce:e3:ce:b5:66:62:9d:a6:e6:fc:1e:2e:dd:f0:60:
96:46:04:bf:fc:d4:f9:f7:29:c4:6e:f1:c7:a5:00:37:0d:93:
1e:fb:9f:73:f6:a3:1f:a9:df:37:f7:a6:3d:2e:b4:c1:17:a6:
cd:1c:f8:74:c4:11:7b:2b:0f:69:2d:98:ca:06:88:0d:d4:5c:
1e:5e:ac:48:af:22:55:ba:5a:35:07:39:5d:e5:45:9a:5b:8a:
15:70:81:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:47 2025 by rpki-client