Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GPGnOQCfk9qtBwwdvoJ8vZE92AI.roa
File: GPGnOQCfk9qtBwwdvoJ8vZE92AI.roa (raw, json)
Hash identifier: TWt9aEZIA1L2DlWPHqbbPxsvuptJyKs8b+FNQ+10ejo=
Subject key identifier: 18:F1:A7:39:00:9F:93:DA:AD:07:0C:1D:BE:82:7C:BD:91:3D:D8:02
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8B3A3A348416B39DA4F773A3502E67AE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GPGnOQCfk9qtBwwdvoJ8vZE92AI.roa
Signing time: Thu 21 Dec 2023 07:14:58 +0000
ROA not before: Thu 21 Dec 2023 07:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:3a:3a:34:84:16:b3:9d:a4:f7:73:a3:50:2e:67:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 07:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18f1a739009f93daad070c1dbe827cbd913dd802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1f:48:38:39:d3:05:cc:ba:c4:99:dd:f3:cb:
e7:9a:c4:9d:40:ab:f2:fa:83:0e:8a:d3:a7:df:11:
6b:38:48:13:d3:1d:7b:4b:1f:ef:0d:21:ba:4f:e4:
2a:03:e4:14:5c:63:94:b4:aa:68:9c:b1:65:b8:34:
51:ed:72:59:30:a0:54:8a:6f:1c:a7:98:bf:05:23:
3b:3a:63:9c:9a:bf:14:da:51:ef:50:8c:5a:8c:ef:
12:0e:4e:af:4e:28:89:50:8c:74:29:7d:2d:09:93:
6b:1a:c4:5d:53:97:65:6c:d1:f0:df:96:c1:e5:27:
99:fe:c9:fc:45:cd:02:a8:5d:4b:59:79:8c:5c:4a:
8d:1a:4e:75:f1:3f:91:f4:2a:f2:11:f2:ae:6d:57:
38:50:e1:30:14:17:a3:2c:3b:a1:b4:0e:9c:9d:ff:
43:59:95:f0:8c:ac:f2:68:4b:7d:93:b6:51:59:1b:
67:2e:50:21:2b:6f:e1:e0:65:99:d1:c2:d2:b5:21:
f5:82:b6:55:70:d1:da:61:6c:43:49:7c:75:46:82:
03:dc:c9:fe:b3:20:fe:b9:39:b5:ff:47:26:f2:71:
ce:bf:7a:8c:d3:57:bf:a2:79:03:31:1b:6a:17:fd:
1d:67:0c:67:31:28:91:9c:2d:55:53:75:3b:bf:2e:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F1:A7:39:00:9F:93:DA:AD:07:0C:1D:BE:82:7C:BD:91:3D:D8:02
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GPGnOQCfk9qtBwwdvoJ8vZE92AI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:0c:e6:46:da:2f:5b:42:a4:1c:4c:42:fa:00:06:bc:23:b3:
dd:28:fc:cf:bb:5e:3b:15:32:fa:cf:cd:50:1c:1c:e5:b3:a7:
71:e6:f1:48:3e:5d:b2:fb:ca:a1:7f:13:98:fe:c9:61:05:41:
6e:99:ca:92:08:a5:20:9c:26:2e:9a:38:f8:d4:a5:63:d2:59:
9a:b9:9f:4d:6b:bc:1e:85:57:59:8a:d8:3e:58:84:dc:e5:75:
ca:94:0b:08:11:51:73:dc:d0:ed:d6:25:f6:c8:6d:7f:cf:5c:
86:36:d7:0d:ea:f1:04:02:ba:31:33:ec:9b:a9:88:48:78:f1:
c6:0b:0b:f4:0a:13:4a:d7:86:7c:b5:cb:a3:12:65:cd:ce:3b:
70:09:13:e4:32:12:ad:a9:a9:b5:d2:08:f1:f6:d2:93:00:33:
3f:64:f0:1b:dc:95:64:5c:3d:bd:54:7b:16:68:5c:e8:cd:f3:
d6:ab:a3:86:2d:5d:de:8d:2d:8f:94:0d:f9:14:bd:97:cb:b6:
52:78:83:62:40:4f:e1:ae:3a:e8:4a:14:89:b2:bd:e3:6a:62:
fb:2d:36:67:45:e8:4b:93:f0:2f:e4:c4:8f:56:6a:63:65:06:
f7:2a:55:03:fb:9e:fe:cc:76:94:98:4d:81:ed:ac:da:78:f1:
b3:47:4f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:06 2025 by rpki-client