Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8pzLrKXlTBYBYD_jI7jqjLzYRZA.roa
File: 8pzLrKXlTBYBYD_jI7jqjLzYRZA.roa (raw, json)
Hash identifier: wMpBrEMYgDehczCErDu6uNGZTeSuSCQTUuL5bY6DveY=
Subject key identifier: F2:9C:CB:AC:A5:E5:4C:16:01:60:3F:E3:23:B8:EA:8C:BC:D8:45:90
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CEAEC8F3F9E27F4B8BA3CBFE7518CF703
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8pzLrKXlTBYBYD_jI7jqjLzYRZA.roa
Signing time: Mon 08 Jan 2024 21:13:40 +0000
ROA not before: Mon 08 Jan 2024 21:13:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ea:ec:8f:3f:9e:27:f4:b8:ba:3c:bf:e7:51:8c:f7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 8 21:13:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f29ccbaca5e54c1601603fe323b8ea8cbcd84590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ab:94:be:7d:75:b0:47:c7:f2:98:fe:b3:30:
92:e5:59:71:fe:af:c4:22:78:3b:b3:fc:d7:17:14:
fd:4c:f0:82:06:ba:5e:66:93:2b:cb:fc:4a:c3:f9:
69:f0:b1:b2:59:11:39:b7:6d:61:ae:7c:6b:f4:64:
8b:23:4f:ad:cf:6d:0e:1d:b7:c0:fa:d2:1a:28:f7:
9e:32:ce:3b:3b:31:1d:a5:ca:4f:f1:91:1e:36:4b:
24:60:dc:87:54:a1:0b:88:ad:15:09:d8:cc:f2:ad:
ca:aa:90:e1:52:1b:39:ad:5e:48:01:33:4f:b1:e4:
b8:31:ae:a2:c1:4d:07:46:39:ce:20:9c:ba:1d:23:
76:42:54:17:d9:f9:22:07:a5:12:86:93:24:89:94:
59:3f:03:98:fc:29:64:3f:66:ed:61:c3:57:78:d9:
e4:4a:5e:b1:68:3a:8c:d7:f2:b6:e2:b3:a6:6e:e7:
3b:fa:4b:06:a5:59:b0:7d:f1:b0:9e:cd:ab:b7:41:
f2:d9:1d:c6:1b:64:63:22:9a:4f:98:d9:fb:2c:2c:
b0:39:21:5b:fb:a4:3a:dc:9e:c2:ae:ff:28:bc:91:
e2:f0:57:60:9e:f3:cb:c8:59:15:29:f5:04:81:d2:
0c:4b:76:45:65:39:49:0e:38:5e:5f:da:f3:a3:3b:
1b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9C:CB:AC:A5:E5:4C:16:01:60:3F:E3:23:B8:EA:8C:BC:D8:45:90
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8pzLrKXlTBYBYD_jI7jqjLzYRZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:b0:da:18:d5:63:fd:ee:9e:f2:0d:58:99:11:70:b3:9a:47:
e1:b6:a3:67:ac:76:24:e0:23:83:16:b2:3b:c9:aa:55:4e:a4:
ca:db:fb:90:c9:78:03:7e:b5:ad:db:76:da:1e:2c:31:1b:cd:
69:72:6b:e7:f3:38:58:f1:a4:bd:4a:85:9d:7e:44:88:d9:6f:
94:fa:be:ca:27:32:63:e0:79:78:68:38:5a:d7:57:2a:2d:63:
9b:e7:87:78:62:05:66:18:4a:17:28:84:12:8f:2e:b0:e3:99:
c6:a8:a9:e4:04:ec:53:c0:00:65:93:1f:29:2f:71:07:72:22:
4a:0d:58:81:8f:1b:02:0e:de:2f:8c:02:30:12:43:60:7a:8f:
27:43:3a:fe:c0:a2:62:8e:52:75:2a:b9:22:85:43:0d:ef:a4:
87:97:6e:62:d2:38:75:7c:1c:d5:73:69:d2:de:b7:b4:f7:c9:
cc:8b:2e:16:e3:1e:b0:07:cf:17:a5:ba:66:69:48:8a:c8:a6:
ca:d7:32:51:0e:8d:53:e6:f3:40:7e:43:9f:1e:18:27:12:7d:
78:f0:da:1e:66:a4:55:56:fd:f5:18:53:af:19:47:08:ad:c8:
98:12:36:bf:02:11:06:bf:7d:0c:7f:f8:b2:e1:ad:cc:19:c3:
ba:dc:d5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:28:41 2025 by rpki-client