Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EKwAJWMrOdMhbQOp9u_i6jox5z0.roa
File: EKwAJWMrOdMhbQOp9u_i6jox5z0.roa (raw, json)
Hash identifier: z4e93xFSTZiaA4+08PX2YgLvf1r6MbHgcvzuxSU2K1c=
Subject key identifier: 10:AC:00:25:63:2B:39:D3:21:6D:03:A9:F6:EF:E2:EA:3A:31:E7:3D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB65A9261AC0DE335204EF7E26F90398C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EKwAJWMrOdMhbQOp9u_i6jox5z0.roa
Signing time: Fri 29 Dec 2023 16:13:58 +0000
ROA not before: Fri 29 Dec 2023 16:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b6:5a:92:61:ac:0d:e3:35:20:4e:f7:e2:6f:90:39:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 29 16:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10ac0025632b39d3216d03a9f6efe2ea3a31e73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:54:26:74:81:82:cf:c0:e8:1e:f1:e0:9e:3a:
32:20:38:71:32:70:cd:78:c8:50:28:20:eb:f1:29:
e1:da:e9:c0:3a:e0:fa:52:d3:f2:9e:8c:ae:26:00:
a6:07:4e:24:e0:b3:21:64:4b:b8:35:32:90:93:e1:
a3:02:5b:97:b0:59:a9:89:1e:8b:7c:7e:ea:88:2f:
18:e1:bf:0d:d7:a0:5d:e6:5e:3e:af:f4:bb:e9:a9:
4a:eb:99:0c:09:e2:f4:24:a6:a6:22:da:8a:aa:64:
d6:8e:7c:0c:d5:61:92:96:18:2d:ac:3e:e2:49:9b:
ce:8b:55:d3:15:4b:da:20:49:d4:26:b2:2f:9b:f8:
30:3f:59:77:e3:06:24:e3:ba:db:c8:96:18:0b:02:
c5:35:fc:27:95:bf:9f:ff:c0:cd:2c:92:ce:aa:c6:
dc:c9:4c:df:f0:c3:3b:c6:ac:e1:8a:de:0a:56:cd:
e3:8d:f6:65:f3:e2:a6:43:20:0a:83:c0:25:a9:67:
2b:e4:34:8f:4a:e5:ba:cb:cf:12:8a:b4:27:03:c2:
cc:97:08:04:4c:5c:63:6b:78:ea:30:72:2a:c2:0c:
f1:5e:49:0e:d2:8d:05:65:5b:11:70:41:71:77:0c:
2d:4a:80:0f:21:47:5a:de:f5:28:51:9e:31:70:44:
cc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AC:00:25:63:2B:39:D3:21:6D:03:A9:F6:EF:E2:EA:3A:31:E7:3D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EKwAJWMrOdMhbQOp9u_i6jox5z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:76:6b:78:d0:96:2f:6c:45:7a:cc:e8:81:d8:a8:93:2f:08:
dc:78:99:41:0a:8a:5f:e7:63:67:f7:59:d0:66:43:fe:17:cd:
03:c9:7f:a9:39:c5:f5:db:88:3a:c2:24:fd:0d:30:8c:4f:59:
5b:5c:4e:7e:4e:cf:42:84:56:e4:fa:58:ef:0b:98:66:ea:16:
90:30:a5:20:a3:f1:7c:70:12:cf:ab:f8:4f:76:ca:7e:85:8c:
e7:3d:2e:87:eb:7a:3c:a6:3b:c7:ec:0d:fd:84:db:35:c4:fd:
86:86:d5:05:c5:9f:69:46:64:b6:c1:0e:f9:8b:5a:24:c3:a3:
4d:e0:09:e2:8d:81:92:dd:c8:b8:d8:a3:c9:f2:27:fe:69:18:
bc:fe:22:0f:ac:75:ee:fe:b2:a6:c0:16:73:19:20:55:ae:cb:
15:fb:ba:f3:fb:c9:54:80:b2:6f:c8:8b:74:4f:e1:41:da:93:
5e:ec:c8:ae:d2:32:a3:4d:3c:50:e6:67:15:c1:d8:73:23:c8:
79:a3:fd:ef:5c:e2:8f:ea:5c:9c:0f:40:19:e5:34:14:95:48:
ca:50:85:2d:07:20:47:dd:12:df:7e:0d:00:37:3f:94:d6:79:
95:f0:fa:96:d4:20:a9:d8:5f:40:6d:1f:af:3e:ac:cf:39:50:
72:02:bb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:49 2025 by rpki-client