Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DkHv0btTvSKKe1od5hJGaxJnCZQ.roa
File: DkHv0btTvSKKe1od5hJGaxJnCZQ.roa (raw, json)
Hash identifier: ugjqmpVI1awD/4sQzvkRt1Sr5kz0ZpCRkUQ98lqAg3E=
Subject key identifier: 0E:41:EF:D1:BB:53:BD:22:8A:7B:5A:1D:E6:12:46:6B:12:67:09:94
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D032915F20C4B1680F54ADA46F2BE4E0A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DkHv0btTvSKKe1od5hJGaxJnCZQ.roa
Signing time: Sat 13 Jan 2024 14:10:40 +0000
ROA not before: Sat 13 Jan 2024 14:10:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:03:29:15:f2:0c:4b:16:80:f5:4a:da:46:f2:be:4e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 13 14:10:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e41efd1bb53bd228a7b5a1de612466b12670994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4b:1e:a1:c3:94:9b:d1:26:b5:5c:9a:48:3b:
0b:8d:c5:77:b0:54:38:62:fa:2f:9e:5d:4d:bd:21:
43:51:32:38:98:e3:a4:58:f3:2f:0e:ed:bb:fa:3d:
24:23:44:a0:f1:a8:63:e0:2b:a4:64:01:0d:00:93:
44:85:c2:20:49:f2:43:79:e6:6f:f9:73:cb:9e:60:
fd:a0:ef:c3:93:2d:6f:fa:d5:b4:62:eb:81:ba:c3:
47:9c:bf:1c:91:1e:28:a1:73:88:f6:9e:09:e5:55:
b8:be:d9:62:e5:f3:74:46:4d:54:e2:28:4b:e2:69:
ad:64:04:4f:b3:f2:49:9a:42:68:0d:8f:11:d3:56:
b5:03:11:a2:98:48:72:bc:fe:09:08:b6:85:31:18:
5e:df:b9:c8:97:c4:94:65:0f:49:a8:cf:e3:ac:f6:
54:81:06:5c:d2:aa:b2:18:9d:cd:da:0a:b1:e2:02:
1b:45:dc:02:d7:de:22:af:c0:cb:9d:2b:e9:67:26:
b7:32:11:c5:04:5b:ee:4e:24:1c:de:08:d1:ce:72:
4b:46:b9:e9:0e:24:dd:ab:87:97:f2:80:40:3a:78:
be:cf:25:89:1a:0e:4c:45:31:11:03:26:51:8d:b1:
a8:45:8f:41:45:ed:0e:00:9d:82:c9:55:f6:d1:68:
27:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:41:EF:D1:BB:53:BD:22:8A:7B:5A:1D:E6:12:46:6B:12:67:09:94
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DkHv0btTvSKKe1od5hJGaxJnCZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:84:b2:bb:32:43:97:17:5e:14:5a:48:8e:a0:5b:9e:cb:39:
d6:c7:f6:5b:8e:b4:d4:ff:0c:00:f6:bd:7b:c5:cc:c1:5f:2a:
73:0e:e0:5d:f0:c1:ec:0a:65:2c:3b:77:9a:48:ff:45:4a:35:
99:f4:e1:8c:f9:ba:ee:e0:c3:74:7b:05:99:56:ee:42:e8:4c:
25:a8:c6:37:64:39:5a:10:80:46:ab:63:a9:75:b8:7e:c9:16:
ed:b1:9e:16:56:bc:16:7e:fd:5c:78:f4:41:c5:a3:e9:bf:c2:
ec:a6:02:0d:13:97:4b:9b:ef:2f:2f:41:34:f1:66:35:c9:2c:
6f:72:4d:f2:8e:40:32:a7:6f:05:d7:59:1d:39:c6:67:63:a4:
1e:6e:b8:e2:bc:42:a9:27:6d:04:24:44:4d:18:6b:2b:38:03:
cc:1f:4e:1b:4e:00:04:99:47:0f:03:e9:60:9b:e3:35:37:aa:
87:66:dc:47:e1:8a:0a:63:7e:ad:43:a0:59:3c:d4:37:d7:d7:
70:89:06:f3:a4:0a:ba:ec:8c:cf:f3:ab:e1:ec:bb:69:98:08:
1e:d7:1f:60:12:5a:30:0d:4c:0c:e1:80:fd:85:a6:27:4c:32:
64:94:96:4d:b5:5b:1d:92:d0:98:da:08:ef:14:d7:71:58:15:
be:8c:f6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:34 2025 by rpki-client