Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/F_8kKfG0yI2jS1s1mF7mJA0TljM.roa
File: F_8kKfG0yI2jS1s1mF7mJA0TljM.roa (raw, json)
Hash identifier: 9gMVcvjFzQDrpzNCjSDlp0zpOAJ+gV72CWcyVUe7Ugk=
Subject key identifier: 17:FF:24:29:F1:B4:C8:8D:A3:4B:5B:35:98:5E:E6:24:0D:13:96:33
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018ED5A6DF1F4D8F5DADE831B1529E2C0D72
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/F_8kKfG0yI2jS1s1mF7mJA0TljM.roa
Signing time: Sat 13 Apr 2024 04:11:06 +0000
ROA not before: Sat 13 Apr 2024 04:11:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d5:a6:df:1f:4d:8f:5d:ad:e8:31:b1:52:9e:2c:0d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 13 04:11:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17ff2429f1b4c88da34b5b35985ee6240d139633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a3:af:19:1f:bb:5c:d1:57:ee:4a:98:39:4b:
96:8b:91:94:14:2d:37:f6:a8:cf:be:ab:3b:5d:cf:
64:2a:db:cf:61:cd:cd:6e:93:e8:7a:9a:90:b0:c9:
51:11:aa:77:5b:1d:ea:7c:33:72:62:df:37:7b:d5:
2c:08:2f:88:b5:ee:dd:f4:56:41:ea:d2:38:d6:33:
63:17:34:6c:05:7e:3b:98:ea:cc:1d:cb:43:16:f0:
81:0c:ae:3c:b3:11:b5:03:fa:fc:d9:75:3c:b6:43:
74:14:d1:0b:7b:f9:29:21:ae:a8:15:ed:24:a3:9e:
6d:b6:b2:d8:f3:df:68:f3:c7:66:5a:d8:69:27:31:
eb:18:01:62:36:7d:e0:24:3e:c4:d7:0c:df:b0:81:
e7:61:d5:21:bc:45:08:95:56:ae:ee:92:7a:26:14:
77:dc:8c:ab:68:15:b2:8f:3a:b3:86:01:b7:94:51:
2b:44:a9:82:03:44:be:ef:8a:91:cb:72:a0:aa:f7:
f5:14:bf:46:b2:56:91:fc:f1:50:cd:16:27:c4:d9:
b9:1e:fd:8b:8e:19:b5:98:eb:32:4b:71:25:ed:ec:
7d:30:13:d3:c9:9b:dd:ff:5c:cc:f1:7d:1b:ef:48:
8f:b8:b5:28:da:36:1a:bb:e3:e2:f9:15:a4:51:cf:
3a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FF:24:29:F1:B4:C8:8D:A3:4B:5B:35:98:5E:E6:24:0D:13:96:33
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/F_8kKfG0yI2jS1s1mF7mJA0TljM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:0c:3c:d3:e0:29:6e:41:4e:bb:1d:df:ae:f0:f7:54:6a:ea:
45:83:e3:51:19:09:4e:c0:19:78:ef:cd:88:00:9a:69:d5:a9:
77:0f:fe:f6:68:5c:bc:04:64:58:70:15:d9:97:3f:c1:d2:8f:
ab:3d:46:a5:84:39:fb:c9:6d:17:81:f5:f8:26:6c:8c:1d:0c:
19:f1:e9:1b:4d:f4:2e:d7:72:f6:ae:2b:e5:a8:be:53:19:04:
0b:a2:6f:46:fc:9c:a0:a6:fb:b4:3b:e7:ef:43:17:9c:ee:0d:
5f:df:ab:16:6c:02:0a:7d:63:19:1a:bf:c9:f8:12:ba:75:01:
6e:ad:74:0d:86:b3:8c:70:d3:5b:5a:04:5f:6b:c3:73:3b:23:
71:dc:6d:34:2a:a5:ca:e8:7c:b7:51:1a:cf:e3:5d:31:3d:37:
4a:cd:49:1b:00:2c:c3:04:aa:ec:4b:fd:a4:63:b6:5b:72:d5:
96:5f:50:89:44:75:8a:07:63:c4:c8:aa:2f:2b:45:75:23:38:
17:6e:6f:4b:c4:27:a8:7b:bb:70:f2:36:89:12:d5:a2:00:cc:
bd:32:87:9b:49:cb:84:89:3d:59:b5:96:da:00:af:c3:56:d3:
1d:a3:e9:7a:8d:4e:a2:a0:cb:3a:00:ef:09:bf:85:c8:bc:37:
c7:04:06:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:44:47 2025 by rpki-client