Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8nLfIpiYdVC5A2fUQYhChe-b2_g.roa
File: 8nLfIpiYdVC5A2fUQYhChe-b2_g.roa (raw, json)
Hash identifier: OOD8xQpXXm7WfSJFVCIn0I1ySEiB6ia7FysqDsPlhcw=
Subject key identifier: F2:72:DF:22:98:98:75:50:B9:03:67:D4:41:88:42:85:EF:9B:DB:F8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CBC26A49B93D7746CD0500874B43D34E2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8nLfIpiYdVC5A2fUQYhChe-b2_g.roa
Signing time: Sat 30 Dec 2023 19:14:58 +0000
ROA not before: Sat 30 Dec 2023 19:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:bc:26:a4:9b:93:d7:74:6c:d0:50:08:74:b4:3d:34:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 30 19:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f272df2298987550b90367d441884285ef9bdbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:37:74:4a:82:a3:97:1f:5c:69:0b:cd:c7:3c:
67:04:c5:6e:2c:34:af:21:f4:75:07:03:d9:9b:1f:
64:9d:4c:6e:2e:d5:c3:13:40:2c:40:bd:c1:86:0c:
b2:d0:b2:1f:6c:44:6b:36:f9:dc:ec:87:5f:20:af:
50:6e:84:bd:18:41:a5:14:d8:0d:e8:63:dc:8b:42:
3a:63:ef:1c:c6:31:07:5a:d2:bf:cd:dc:f7:ad:f2:
0c:56:9b:b9:ba:b5:67:b9:86:0b:f4:23:2c:3b:0c:
02:71:51:0d:29:79:1f:07:e8:1f:ee:c5:df:60:4b:
0a:69:90:62:f6:3d:a5:6e:32:bd:c3:78:f9:55:69:
c4:a2:f7:99:07:94:13:ac:89:2e:6c:42:19:99:cc:
0d:75:e1:fb:57:29:86:bc:f4:ce:17:54:eb:96:2f:
7e:48:5b:2e:9e:f0:77:db:9a:ac:1a:de:3b:e8:b3:
18:50:cf:9f:db:8e:9b:a9:3b:3a:84:08:7e:f5:a5:
76:86:0e:10:5b:48:18:8a:d6:b2:d8:c8:bf:af:d7:
67:44:e2:39:55:8e:0d:fc:92:74:95:b8:a4:8d:e6:
92:85:3b:53:97:d9:f8:17:ac:18:32:3f:41:11:38:
cc:1b:f0:e4:5f:8c:a7:91:6d:48:7d:fc:e3:f9:99:
84:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:72:DF:22:98:98:75:50:B9:03:67:D4:41:88:42:85:EF:9B:DB:F8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8nLfIpiYdVC5A2fUQYhChe-b2_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:4c:aa:6d:e7:9c:b5:a2:4c:5d:bf:bc:d4:c4:50:08:39:37:
da:a2:a6:f2:d1:b3:57:ae:0b:c9:ab:17:03:42:1c:af:d6:2e:
86:41:ba:a4:0f:04:1f:e0:b9:e1:8d:11:55:25:bc:76:43:61:
f2:84:31:d0:35:d8:6b:f6:7c:e4:94:1a:e2:ef:09:49:d2:c5:
9d:d4:9d:4e:7e:61:40:07:97:96:7c:26:37:ab:29:2e:1c:c1:
76:3e:95:da:f6:ce:50:d5:80:0e:18:1e:83:00:07:36:02:e5:
19:78:cb:2d:df:f4:6f:60:76:b0:c3:99:95:0d:33:20:a6:83:
bc:46:24:67:54:96:a5:a6:63:eb:0e:0a:d0:56:24:34:1a:b8:
a1:83:14:16:84:85:4d:5f:16:eb:25:17:30:b5:5e:65:56:49:
53:3d:c3:c2:82:23:9e:3e:5e:b9:0d:6a:8f:e3:57:38:c9:c8:
6d:6f:58:30:9f:91:f7:1c:50:a6:b4:a1:63:2f:dc:27:10:cc:
5f:d2:b1:8c:91:a5:52:c6:4e:e6:aa:a4:99:bd:7d:51:3f:0d:
4f:aa:98:4e:6f:bc:bc:61:46:e7:85:48:df:c0:19:c9:e7:cc:
f1:5d:80:0c:18:72:43:83:51:8d:11:c9:9b:96:da:67:94:42:
07:7f:a2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:07 2025 by rpki-client