Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EluXD4kWPIX_A3NB6XBEW1s9RiQ.roa
File: EluXD4kWPIX_A3NB6XBEW1s9RiQ.roa (raw, json)
Hash identifier: FydCzHKc1eWrl0DSzaVAplm0hzpbT8LJ6K32+kIIuOg=
Subject key identifier: 12:5B:97:0F:89:16:3C:85:FF:03:73:41:E9:70:44:5B:5B:3D:46:24
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EAECF2349DA816079B31ED0369C77A51A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EluXD4kWPIX_A3NB6XBEW1s9RiQ.roa
Signing time: Fri 05 Apr 2024 15:09:54 +0000
ROA not before: Fri 05 Apr 2024 15:09:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ae:cf:23:49:da:81:60:79:b3:1e:d0:36:9c:77:a5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 5 15:09:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=125b970f89163c85ff037341e970445b5b3d4624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a3:bb:23:76:d3:9c:de:fb:58:2c:5b:37:61:
99:e0:e5:aa:87:23:b2:83:c5:76:c3:f4:24:ce:01:
d1:38:c9:5f:ba:07:5d:51:2d:44:cc:9e:6f:7e:a0:
be:f2:87:6a:4f:67:f6:fb:27:a0:6a:4a:89:79:2c:
dd:46:55:fb:c5:08:47:c9:84:98:e6:9e:fc:88:5f:
7f:bc:43:73:b3:d0:aa:84:cf:e6:3e:f2:4b:c2:1b:
27:39:4b:2d:89:2f:ee:28:3d:e8:d6:5c:ae:3c:b3:
1a:d5:8e:d0:df:0d:f1:23:a7:27:e8:8b:95:6f:31:
17:2c:ba:7e:57:92:f8:33:77:89:e6:5e:ac:45:48:
81:91:af:9e:1f:62:36:52:a8:5c:ab:8e:84:a4:24:
7b:a0:99:d2:6b:31:77:6e:9c:32:c1:bd:5f:e8:55:
60:2b:69:d0:5b:78:7f:0e:bf:ca:b9:d9:86:ee:97:
57:e2:a3:83:dd:e0:93:a9:8b:d1:5e:d6:cc:00:3b:
27:ca:5d:9d:53:e8:91:55:5c:49:e3:da:35:b8:21:
3a:ea:b3:5c:05:35:06:9b:2a:d9:34:ba:b8:3a:82:
43:c1:dc:07:b0:18:fe:ef:fe:91:19:98:c8:8d:8d:
f3:82:e8:3e:28:62:75:8f:d5:26:83:63:cb:0a:0e:
74:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5B:97:0F:89:16:3C:85:FF:03:73:41:E9:70:44:5B:5B:3D:46:24
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EluXD4kWPIX_A3NB6XBEW1s9RiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:fa:70:ae:6f:66:c7:92:f9:4c:fb:ba:2b:c0:58:d1:a5:92:
66:6a:8e:aa:49:d9:b8:0f:cb:fe:2c:73:08:3f:03:fd:43:44:
db:6f:5c:6b:5c:63:e8:4d:3f:e7:20:58:ac:d5:a2:ca:40:0f:
9c:22:3b:4c:27:21:99:ad:52:f9:15:ba:36:1f:ab:f7:f7:ce:
f7:32:72:fb:14:76:a7:40:b7:46:2b:2f:a0:8d:af:09:64:e2:
4a:06:56:d4:79:be:ff:24:17:c5:2a:c9:b2:04:8c:9f:49:b9:
91:aa:7c:10:b6:84:e3:6c:9c:2c:67:64:c7:16:0e:52:95:75:
a3:98:0d:d6:c2:bc:42:6d:f2:dd:87:62:cf:58:ba:0f:0e:e5:
7e:7d:f8:c8:3a:d3:7a:db:bb:84:45:a3:f0:1f:7b:1c:46:82:
e7:fa:e2:30:98:38:73:7c:3f:ca:2e:54:8e:51:03:da:76:9b:
79:bf:cb:23:bc:0d:d1:d8:2e:40:ce:2f:82:96:5a:f7:d9:c7:
6f:9a:f2:e6:80:bf:2e:bd:9b:c2:fe:77:ea:21:7f:3f:77:06:
c6:e5:f4:8f:b2:c6:7b:e7:a8:ca:a9:b5:bf:4f:ac:ba:03:67:
2b:63:bd:68:31:99:0e:93:aa:c2:f1:55:23:eb:76:6c:d2:5c:
89:5b:b0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:32 2025 by rpki-client