Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Cwb2TTTd4m6XA90v_6rHXArNiuY.roa
File: Cwb2TTTd4m6XA90v_6rHXArNiuY.roa (raw, json)
Hash identifier: Oa5ifeUGG8RpoS/dUgohofYz49WIqBcmWqmZ0bC/ngw=
Subject key identifier: 0B:06:F6:4D:34:DD:E2:6E:97:03:DD:2F:FF:AA:C7:5C:0A:CD:8A:E6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D05BD2F4ED780A6A1ABBBE7FEC245DC87
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Cwb2TTTd4m6XA90v_6rHXArNiuY.roa
Signing time: Sun 14 Jan 2024 02:11:40 +0000
ROA not before: Sun 14 Jan 2024 02:11:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:05:bd:2f:4e:d7:80:a6:a1:ab:bb:e7:fe:c2:45:dc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 14 02:11:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b06f64d34dde26e9703dd2fffaac75c0acd8ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d2:f5:42:40:78:88:4c:b3:c9:c6:b9:a7:a7:
16:67:c2:81:71:bf:42:cb:d9:33:b9:7a:94:f7:30:
9b:f1:78:f0:79:53:b8:d0:c9:22:cd:08:80:e9:13:
16:fb:f8:49:8b:ad:49:73:25:8a:ab:5a:33:48:ca:
19:78:a6:a3:f3:5c:bd:3d:b2:da:d0:71:b2:73:df:
02:8a:33:8b:2d:6f:12:88:26:13:b8:44:f1:f6:e3:
d7:55:36:15:69:b5:7c:fa:8a:24:69:3a:b3:16:77:
e1:d6:cd:44:5e:1d:0d:fd:52:43:d4:3c:55:6b:0a:
40:fd:b4:12:1f:1a:72:b5:1a:ec:d4:53:59:d5:18:
7b:5d:ec:2e:ed:d1:fa:a5:39:6f:7a:f1:a2:01:70:
7d:40:af:3b:e1:27:7a:d3:87:34:b7:2c:1e:6c:63:
0c:3c:90:26:4f:2b:8b:a9:01:a2:4c:7f:71:8e:aa:
dc:f4:89:8b:ee:f8:f2:51:27:ad:51:ee:dc:ba:b2:
81:cc:43:0b:b6:67:b3:7e:22:1d:4f:b6:b3:9a:40:
8d:61:22:11:a4:dc:d0:34:8e:a2:cb:7d:52:de:b9:
1d:5d:a7:64:17:35:37:dd:64:b0:34:5c:a7:55:19:
10:29:c6:c4:62:33:9f:d7:ab:b7:bd:b3:03:8d:99:
fe:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:06:F6:4D:34:DD:E2:6E:97:03:DD:2F:FF:AA:C7:5C:0A:CD:8A:E6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Cwb2TTTd4m6XA90v_6rHXArNiuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:cc:7b:b4:b2:3a:44:99:5c:d4:fd:4e:d0:e8:e3:95:72:36:
f6:65:9e:6d:3e:f4:0e:64:a0:d6:95:6a:38:46:1e:fd:9f:f2:
2c:9d:57:35:80:4a:5b:b6:db:4d:b8:1f:6b:23:a5:0a:73:c8:
e3:0c:de:03:2a:2c:e3:6c:44:12:b7:fe:16:1f:55:c8:36:b9:
95:20:a9:e2:2f:46:7e:3e:3d:8f:e2:5f:0d:af:76:04:c1:40:
20:19:a2:b5:6e:f3:57:81:ae:32:5a:6f:5c:c1:ea:df:bf:57:
da:75:c0:df:08:32:8e:be:4b:97:72:86:d5:78:4c:75:44:c1:
62:61:d6:ad:39:bc:7d:3d:d2:f6:ca:c6:76:c1:a6:b4:04:2b:
ba:a6:db:eb:2f:83:5b:db:a0:f7:b0:2a:02:b1:eb:d6:ef:5b:
f8:f6:95:72:ef:f3:37:a5:7d:68:cb:5b:53:5d:42:79:6d:1c:
8e:d1:3c:2d:d7:d4:66:04:df:00:8d:d6:a4:4a:76:13:3f:10:
a7:bb:f1:1e:61:85:01:1d:6f:87:47:7a:b4:dc:5e:62:ca:4b:
17:4c:5d:a7:d3:e0:d3:fc:29:57:ad:e7:d1:a3:6a:58:ea:13:
f1:5b:0d:4a:78:e6:9f:b5:04:a1:73:5e:4a:63:27:c3:63:a7:
f1:66:99:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:18 2025 by rpki-client