Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4LTUuKC77g93hNhPNS3EayjWvrQ.roa
File: 4LTUuKC77g93hNhPNS3EayjWvrQ.roa (raw, json)
Hash identifier: tvugiIimJOZGl4FXb+utdHxmiFsJg6G3JxGKYUSehGI=
Subject key identifier: E0:B4:D4:B8:A0:BB:EE:0F:77:84:D8:4F:35:2D:C4:6B:28:D6:BE:B4
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C96CDCA289DB21D46CE2C53EF17585C57
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4LTUuKC77g93hNhPNS3EayjWvrQ.roa
Signing time: Sat 23 Dec 2023 13:11:58 +0000
ROA not before: Sat 23 Dec 2023 13:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:96:cd:ca:28:9d:b2:1d:46:ce:2c:53:ef:17:58:5c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 23 13:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0b4d4b8a0bbee0f7784d84f352dc46b28d6beb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:d5:7e:52:fc:e2:11:2b:6b:ce:e0:21:88:
3b:34:44:f2:f0:95:d8:72:1e:6c:e0:0f:ee:b6:53:
d1:3b:81:76:5f:76:c1:aa:5e:bc:37:15:02:62:31:
7d:8a:99:24:09:2f:a0:19:c8:73:ab:a3:1e:9e:17:
15:07:5e:e9:49:84:34:02:b4:fe:c7:5d:9e:bd:31:
05:0f:a3:df:40:84:7f:d2:23:2a:10:36:eb:17:7b:
bd:3a:07:31:82:26:f9:cd:08:81:76:18:ae:0b:b7:
78:8c:3e:42:51:5e:c4:89:60:3d:68:07:f4:d9:c3:
d8:75:89:0c:1a:0d:bd:dd:cf:29:d1:2b:43:61:a2:
7f:e1:8d:65:85:bd:0a:d4:6e:2a:91:66:b9:44:ad:
3d:08:9b:4d:b2:2e:aa:5f:5d:0a:00:44:57:6a:7c:
27:4c:9e:f3:b3:d7:b0:4c:ca:2a:02:c5:38:11:c6:
8f:bb:5f:27:d3:08:43:f0:b6:9b:4f:91:a0:56:31:
e4:e2:3c:42:d2:32:6e:94:e5:3b:9c:b6:d1:4a:6e:
95:17:d6:32:35:23:37:b1:ea:72:18:b5:50:32:72:
0d:a1:f8:63:1c:4a:ae:11:d9:2e:5a:60:a5:c0:3b:
8a:19:d1:c3:58:9a:ed:54:18:c6:93:95:43:19:d1:
09:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B4:D4:B8:A0:BB:EE:0F:77:84:D8:4F:35:2D:C4:6B:28:D6:BE:B4
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4LTUuKC77g93hNhPNS3EayjWvrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:37:2b:55:3b:98:f3:fb:21:f7:b9:25:88:be:e5:9b:ca:8d:
f8:44:f6:56:53:24:47:a7:7c:f9:18:26:01:30:5f:51:6b:39:
db:b5:72:2e:29:57:1e:65:eb:85:9b:2a:15:d3:8b:44:37:d5:
fd:0b:22:da:90:cc:aa:d2:7a:cc:43:10:bb:f0:2e:fb:15:68:
24:17:0e:7d:dd:01:d0:aa:da:78:50:b1:55:7b:57:4b:73:c8:
78:0c:59:ce:f9:c2:9f:d7:bf:e0:3a:3a:af:e4:ba:91:b0:ff:
b1:c2:13:13:5a:3f:49:f1:3b:0e:1a:e1:0d:8f:05:33:63:1f:
d4:7e:be:75:14:f5:3f:10:7a:0a:43:3b:6d:ef:cc:91:c0:ed:
57:98:79:84:08:b8:79:7e:bd:5d:19:34:36:46:98:20:a3:7f:
80:1d:fa:56:f2:a6:73:9d:a4:51:c7:c2:b4:36:02:ab:95:7e:
6b:53:5f:06:4b:f8:e9:c8:27:4c:c4:0e:ec:61:b5:32:c0:38:
bb:e1:14:69:83:eb:eb:1e:18:d4:67:fe:ac:9d:a7:b0:21:bf:
15:9b:eb:8b:62:c1:84:d9:17:c8:5b:3a:a5:02:13:68:9b:24:
da:89:50:f3:1a:7a:db:8d:e0:a8:d6:0b:11:af:9f:ac:7f:37:
d9:9f:02:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:16:06 2025 by rpki-client