Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/F3OQqnBz7Z71ZJxf6r0jFTTZAC4.roa
File: F3OQqnBz7Z71ZJxf6r0jFTTZAC4.roa (raw, json)
Hash identifier: 8BYQWvFZH+D9aeoe5IWsj8B9xmC4MLG0yjuAV5+jHMY=
Subject key identifier: 17:73:90:AA:70:73:ED:9E:F5:64:9C:5F:EA:BD:23:15:34:D9:00:2E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EC334107062C44B70608A413B727727F7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/F3OQqnBz7Z71ZJxf6r0jFTTZAC4.roa
Signing time: Tue 09 Apr 2024 14:12:32 +0000
ROA not before: Tue 09 Apr 2024 14:12:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c3:34:10:70:62:c4:4b:70:60:8a:41:3b:72:77:27:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 9 14:12:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=177390aa7073ed9ef5649c5feabd231534d9002e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:8d:10:1e:94:18:1d:92:c4:d2:88:75:6c:
b5:96:d6:ac:f5:7e:cf:87:5f:73:1f:f5:ea:de:c6:
cb:e1:c7:68:5e:3e:c1:0c:57:ae:a2:9e:9e:96:53:
21:1d:25:61:30:5e:b1:50:07:f3:cb:5b:29:d7:53:
ed:99:02:8d:23:84:e6:12:14:0f:af:53:cb:56:ee:
78:e9:0c:30:c8:07:87:ac:7c:e4:15:e2:73:47:19:
5f:0a:a8:c1:d5:32:39:14:96:04:7f:29:6b:0d:79:
3e:f5:c2:4f:65:03:bb:c5:8a:3e:ea:e7:98:0f:01:
43:7a:a3:99:83:89:39:3f:18:d8:a0:42:b1:7f:8a:
f2:a5:ad:09:61:18:6f:fb:4b:f6:65:35:f4:d7:48:
dd:94:60:23:ef:78:1e:2a:a8:4d:b5:97:00:16:18:
3a:c0:ec:b5:65:c7:18:a5:04:56:65:f6:ad:03:fb:
19:d0:dc:56:e8:0b:21:d2:c1:42:a0:ca:55:fc:ec:
1f:7e:8f:4f:1d:04:5a:fd:c1:0f:0c:1e:a9:e4:9a:
11:16:64:c7:79:3c:c4:3c:fe:c6:5e:da:bb:ea:e0:
f8:f7:ba:59:83:71:46:d1:51:6d:d1:9c:20:bd:b1:
ee:ae:2a:94:7d:43:9b:25:4a:15:61:f0:e2:10:7d:
8f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:73:90:AA:70:73:ED:9E:F5:64:9C:5F:EA:BD:23:15:34:D9:00:2E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/F3OQqnBz7Z71ZJxf6r0jFTTZAC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:2d:1b:02:1d:b2:03:5c:38:44:5d:ed:a2:9c:2c:26:a6:e3:
7d:d7:92:81:ab:d3:52:ba:7c:bf:f9:56:83:22:e9:48:18:c6:
c9:ed:c8:97:e8:0c:d1:d1:92:b2:69:1f:81:60:1b:d4:64:16:
91:55:8b:e8:46:99:c0:69:81:c0:3e:62:a5:c6:c8:4c:5e:10:
85:bd:d8:43:04:e3:0c:6e:4b:ca:23:55:2d:75:e6:fc:b8:82:
91:ec:75:19:f2:05:4d:ac:d4:18:b1:db:c5:52:d3:12:e4:21:
6e:5f:5a:e6:7c:f9:55:0f:90:0a:8a:9d:3b:e7:ef:60:6c:04:
d2:6d:24:21:a3:f1:bb:f4:8b:fe:20:b7:65:c5:35:30:12:c9:
05:f4:7c:a4:f1:37:4d:7d:0c:99:aa:18:6c:e9:08:74:08:41:
4a:19:58:37:dc:2c:db:a0:82:4b:30:21:6f:f3:32:e8:e2:bd:
96:0b:7f:c0:08:ea:89:c2:42:54:c9:8d:38:89:a0:e9:a5:a5:
e5:4f:1a:ef:b5:23:93:74:e3:41:d3:61:fe:5d:5a:7b:5d:b4:
35:de:86:54:e5:04:db:7e:42:66:8e:35:f4:8e:1b:22:cb:35:
d9:ea:47:4c:63:65:40:3e:e0:e0:84:6a:a5:d8:75:21:00:35:
7e:a9:00:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:24:53 2025 by rpki-client