Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/F_ccadzEuynkr4h2aS9KA_1_yE4.roa
File: F_ccadzEuynkr4h2aS9KA_1_yE4.roa (raw, json)
Hash identifier: dTQSYYw/dSwqMgf//b3n812iFiUrIqVNQ76F8P4UX+c=
Subject key identifier: 17:F7:1C:69:DC:C4:BB:29:E4:AF:88:76:69:2F:4A:03:FD:7F:C8:4E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8F16FF34BA7867DE6E93CCD39307C135
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/F_ccadzEuynkr4h2aS9KA_1_yE4.roa
Signing time: Fri 22 Dec 2023 01:14:58 +0000
ROA not before: Fri 22 Dec 2023 01:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8f:16:ff:34:ba:78:67:de:6e:93:cc:d3:93:07:c1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 22 01:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17f71c69dcc4bb29e4af8876692f4a03fd7fc84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b3:d8:91:5c:7d:ef:6c:83:d6:d8:2b:72:7d:
e3:a6:ab:25:65:c0:15:75:2e:17:5b:79:c6:ad:21:
0c:b3:a2:bd:7c:ec:a0:e1:c3:d2:1f:7d:50:bc:2a:
c2:73:76:42:32:5d:a1:a3:23:cd:82:cb:46:39:2d:
83:20:11:e7:12:d7:81:05:17:86:38:81:2b:cf:27:
b9:8d:33:1e:54:e2:48:f1:25:aa:80:60:5e:37:fc:
6c:5a:1c:98:0b:6f:9c:3f:07:00:8c:c8:2e:1f:7d:
75:98:ce:8e:26:dc:99:0a:b9:f2:63:c9:96:3e:64:
c2:1b:d8:e5:8a:97:8b:b9:e2:11:3c:10:86:f4:df:
d9:7f:d6:e4:e3:79:2d:3c:ac:6d:83:f7:72:0c:e3:
08:12:00:94:60:d4:b7:56:0f:00:20:62:43:65:29:
11:dd:66:aa:8e:25:5b:7b:13:a5:5c:00:8f:45:4f:
b0:10:67:5e:55:88:99:fc:26:ee:6d:a4:24:3d:e8:
b8:f1:59:e3:27:a6:6d:f1:ad:a3:61:dc:e7:b8:50:
4d:8a:44:d6:11:7f:7e:02:cc:58:56:3d:75:c3:cf:
ce:e0:2b:b5:fb:7a:df:24:a9:5f:b5:eb:02:ab:ce:
d5:b0:46:09:8e:21:04:41:e4:33:01:37:0b:b0:7d:
81:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F7:1C:69:DC:C4:BB:29:E4:AF:88:76:69:2F:4A:03:FD:7F:C8:4E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/F_ccadzEuynkr4h2aS9KA_1_yE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:2f:41:f6:dc:d0:db:36:53:3a:db:ee:f5:1f:a9:a3:e7:c0:
6c:0c:5e:14:1c:36:71:a9:0b:68:bc:99:91:b0:b0:89:eb:89:
71:d4:b7:ff:d8:7f:1c:4b:49:7f:6c:bc:d2:0f:e8:c7:c4:65:
1f:26:e2:6a:88:19:7b:d4:a3:bc:32:e0:a0:d2:73:9c:1b:98:
27:45:61:56:86:87:29:14:ba:11:db:c7:86:b4:0e:db:93:92:
98:2a:96:c5:d2:b8:ac:9d:dd:46:94:66:f7:1f:7e:c0:d1:09:
84:10:7b:73:f3:87:d4:d5:2b:66:00:7e:65:11:92:54:99:fa:
d6:ef:58:3c:c9:8e:a1:3c:6c:98:17:ac:3b:2f:87:84:9e:45:
9c:00:cc:5c:1e:b6:6b:fc:ab:01:10:5b:1f:a0:27:08:45:66:
75:c9:53:08:2f:f8:51:88:51:1a:2a:76:3b:6c:e7:d6:d9:24:
f9:1b:ac:3d:43:ea:aa:e3:e1:43:48:35:1a:c3:54:a1:75:a5:
52:85:fa:07:5b:e2:c1:61:f6:20:83:7b:09:e0:09:30:a0:ec:
a3:05:5f:b4:b5:45:21:31:f1:32:26:a8:f7:07:4a:2a:a2:bb:
c7:dc:e4:c3:81:ca:fc:66:dd:46:8b:11:d9:19:7c:9c:c9:3b:
f3:cb:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:05 2025 by rpki-client