Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FyXV-TgDisLsNTyY1dBygkfXidc.roa
File: FyXV-TgDisLsNTyY1dBygkfXidc.roa (raw, json)
Hash identifier: wOIJZ6I7o7Oa2gKYKzyBB/9DsZZGGKkDFpJR9R2orSg=
Subject key identifier: 17:25:D5:F9:38:03:8A:C2:EC:35:3C:98:D5:D0:72:82:47:D7:89:D7
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EC5C6524412E8A63FCBB1E137B6546AF6
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FyXV-TgDisLsNTyY1dBygkfXidc.roa
Signing time: Wed 10 Apr 2024 02:11:32 +0000
ROA not before: Wed 10 Apr 2024 02:11:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c5:c6:52:44:12:e8:a6:3f:cb:b1:e1:37:b6:54:6a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 10 02:11:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1725d5f938038ac2ec353c98d5d0728247d789d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f7:89:9d:53:d3:03:06:9b:47:dd:c1:43:e5:
cd:0e:8b:95:f8:c0:67:e5:68:ed:a0:4c:1f:72:71:
15:3a:82:9e:7a:b1:86:ab:0b:04:21:64:c7:ba:6e:
8e:3e:06:41:4a:3f:5d:c6:25:92:c8:92:0c:3a:01:
fb:e8:f6:53:92:f6:92:79:b2:b4:3d:15:76:df:16:
8c:9a:43:21:b3:4d:ee:ca:4d:ee:54:5e:b0:84:2c:
c5:5c:18:0f:88:36:45:78:bc:8f:33:f7:9e:14:ff:
d6:a0:bb:d6:36:3c:cb:5c:2d:bd:00:05:20:b7:81:
2c:a1:20:dd:35:28:d2:8f:95:6d:8b:e5:0c:0a:d3:
f1:d0:f1:b3:9e:21:16:44:66:d5:2d:5f:64:54:0a:
ca:e2:59:72:63:fc:22:8d:87:15:d9:85:9e:cc:0c:
1e:f7:4e:1e:7c:19:11:3a:93:a8:53:5c:ab:04:73:
95:6b:d3:55:5d:61:25:d3:d5:fa:fc:9f:5b:0b:d3:
d6:67:d1:f5:17:57:64:80:de:c3:57:bf:ef:4c:ce:
a5:be:0c:56:c3:a0:43:e8:9a:28:ee:12:75:8a:f1:
5c:77:e5:5a:dd:4f:df:ef:79:68:9c:31:03:68:aa:
2e:5a:fe:53:2f:10:10:38:13:d6:48:f8:ac:ed:2c:
15:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:25:D5:F9:38:03:8A:C2:EC:35:3C:98:D5:D0:72:82:47:D7:89:D7
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FyXV-TgDisLsNTyY1dBygkfXidc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:08:70:ee:80:6c:41:0a:6f:b7:10:5e:94:f8:f7:83:14:67:
f0:6b:bc:a0:c9:7b:1c:1a:3d:5e:b5:52:3e:6a:15:ca:9c:b6:
7e:59:87:90:52:22:f7:f2:60:76:e8:ee:3a:4b:83:37:92:ae:
fa:4a:61:eb:70:ac:92:a9:b2:78:2e:5a:68:75:fe:79:16:70:
0e:5a:b4:43:ec:8b:5c:9d:22:4e:88:6d:05:76:7c:87:3e:a4:
cc:89:e8:87:1f:6b:c6:a2:28:d2:40:d0:51:cc:d0:70:2b:2a:
bc:7d:c6:3f:32:fc:1b:e3:08:4b:ce:cf:ad:34:50:86:a1:4e:
78:2c:56:50:c3:77:4c:80:2e:42:fd:fc:59:5d:11:a9:ce:91:
63:09:5b:ad:b0:f7:f3:93:46:ba:fd:e4:27:ce:22:f1:6a:46:
07:99:b2:af:d1:a6:20:a9:9e:28:9e:26:a3:10:77:b4:27:6a:
6e:8d:43:05:b7:cd:e1:e4:8c:3c:96:6f:3b:1f:cf:d6:ce:e2:
ab:0f:88:21:b1:7c:ae:da:56:dd:e0:4e:9a:06:df:a3:e2:5c:
c2:24:62:9e:3a:65:21:76:1c:86:f1:48:28:58:3a:b8:6a:f8:
60:59:c2:b1:23:5d:57:8f:90:5b:90:93:97:7c:43:e2:a5:df:
dc:d3:60:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:10 2025 by rpki-client