Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DUB-lO-CncWN7pTocXcNI4CeaC0.roa
File: DUB-lO-CncWN7pTocXcNI4CeaC0.roa (raw, json)
Hash identifier: 7uum1vPcWiBDymRHfcQ255VBn8t/mdzIgx4hGa3Ahio=
Subject key identifier: 0D:40:7E:94:EF:82:9D:C5:8D:EE:94:E8:71:77:0D:23:80:9E:68:2D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EE65E0C7B4DA9A47DCF369EB1EC8F1659
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DUB-lO-CncWN7pTocXcNI4CeaC0.roa
Signing time: Tue 16 Apr 2024 10:05:06 +0000
ROA not before: Tue 16 Apr 2024 10:05:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:e65d:2ed1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:5e:0c:7b:4d:a9:a4:7d:cf:36:9e:b1:ec:8f:16:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 16 10:05:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d407e94ef829dc58dee94e871770d23809e682d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:d4:a1:7d:4a:fb:47:d0:c3:ae:e7:2a:ac:
cf:94:50:79:f5:3d:1d:f5:b4:38:43:eb:86:b5:5b:
6f:a9:5e:9d:34:06:69:fa:f1:33:53:b1:37:d9:35:
6c:38:6c:95:53:90:2a:1a:02:16:1b:75:24:80:1f:
2c:bf:ec:0d:8d:31:8c:ab:9d:42:3b:ee:90:fd:d3:
20:57:9c:85:b4:ff:0a:81:fd:2b:3b:bc:b5:b4:c7:
97:6f:32:88:6d:18:90:74:17:7d:69:2e:8c:72:07:
22:9e:6b:58:ee:83:2d:ce:0e:a9:83:13:25:31:44:
5a:38:c7:0e:f1:b3:89:13:e5:26:42:a7:24:5a:86:
15:51:02:56:43:54:9e:a3:05:b0:b2:ce:07:48:fa:
f5:63:95:49:0e:f8:39:cc:39:f7:6b:b3:3c:44:3c:
19:c8:d0:ea:b2:cc:83:03:47:b5:6c:36:1e:0a:c8:
2d:53:ee:f7:c9:e8:12:32:11:a5:7b:7b:3f:93:83:
e3:09:9a:5e:4b:6f:32:9e:49:f2:75:a6:ea:08:d7:
c5:af:2f:52:75:d8:f0:fb:6f:e1:49:cd:d9:11:1b:
aa:b2:01:32:71:82:2d:2e:e7:ed:fb:09:7f:00:c3:
5c:0d:63:7b:03:18:d5:10:c0:08:3d:ed:21:37:5c:
39:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:40:7E:94:EF:82:9D:C5:8D:EE:94:E8:71:77:0D:23:80:9E:68:2D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DUB-lO-CncWN7pTocXcNI4CeaC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:43:8b:47:d7:41:54:30:7c:ea:8b:78:82:5a:02:c1:46:5c:
20:1f:7e:2a:c3:aa:d1:bb:fc:eb:72:05:29:04:22:19:9a:2a:
b2:4d:ff:69:d1:0e:1c:a6:80:f9:ab:53:8b:ad:a7:34:00:48:
6e:fe:4d:df:5d:1a:f9:8c:99:d4:a9:3c:1d:f4:a4:7d:19:dd:
fa:68:02:a7:ca:50:45:4f:62:bf:56:a4:d1:c7:ab:31:b3:9a:
9e:5e:6a:65:a9:d9:c2:b0:dc:ee:7f:76:c0:25:e1:10:b1:4c:
cc:fa:dc:80:fe:09:5b:78:eb:9d:36:9c:c1:cd:d8:83:b7:da:
95:fe:14:5e:6e:c9:80:85:b1:cc:69:90:60:8a:a6:b9:0b:86:
2f:ad:8a:32:36:4f:70:b5:6c:e0:30:f6:ae:47:58:64:ea:62:
2a:e4:58:2a:02:9a:28:cb:69:f0:2d:95:59:10:23:67:57:49:
77:3c:cf:ae:fd:bf:c6:5b:82:97:55:ea:2b:0e:3c:88:d4:a3:
1d:ce:7e:5d:14:8a:dc:e3:5c:35:e0:30:e2:0a:25:3e:c7:84:
0b:d9:fb:e9:a6:82:fa:46:b7:5d:f9:99:3a:62:52:a8:43:cb:
58:e1:6f:68:60:5a:cf:f7:4d:4a:c8:cf:51:bb:e0:7a:c4:2f:
90:69:55:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:17:38 2025 by rpki-client