Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/I0qGPoBGx8Y2a6HqCK_GX5rm3vc.roa
File: I0qGPoBGx8Y2a6HqCK_GX5rm3vc.roa (raw, json)
Hash identifier: jmymB234nBDMIGq2CYkSbaDkd0F5wg34JJal9tg+PFo=
Subject key identifier: 23:4A:86:3E:80:46:C7:C6:36:6B:A1:EA:08:AF:C6:5F:9A:E6:DE:F7
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB848F4DFF3D7BCC1C2738FA8A04D1FF3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/I0qGPoBGx8Y2a6HqCK_GX5rm3vc.roa
Signing time: Sat 30 Dec 2023 01:13:58 +0000
ROA not before: Sat 30 Dec 2023 01:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b8:48:f4:df:f3:d7:bc:c1:c2:73:8f:a8:a0:4d:1f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 30 01:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=234a863e8046c7c6366ba1ea08afc65f9ae6def7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:66:fc:b3:77:fd:c2:2a:6c:a7:60:36:fa:10:
d9:fa:14:aa:ac:bb:46:7e:99:80:bf:e0:41:a0:25:
0d:44:93:8a:1f:a1:96:26:1d:d1:47:42:3e:36:fb:
3e:07:98:ce:fc:e0:96:21:1c:83:79:d1:56:49:28:
db:80:64:72:03:0b:73:fe:06:95:e9:96:69:ff:d3:
0e:f3:7d:74:e2:12:ee:14:8c:27:c0:33:46:db:77:
86:84:34:6d:43:93:72:e9:f7:6c:19:a7:3a:d6:a9:
7e:27:25:20:3c:5f:68:ab:3f:e5:aa:33:df:ab:6a:
78:b0:0c:32:7f:f8:b9:95:c0:09:88:b6:5c:2e:35:
93:0c:70:50:d8:fb:21:df:00:f6:61:80:49:8c:84:
7d:e6:45:94:c7:0e:e8:f4:1b:4a:7d:c3:ce:7b:50:
fe:75:49:73:b0:31:1f:6d:4b:7b:16:ee:77:b4:37:
c1:f1:90:12:50:c6:f0:b3:06:a7:60:67:df:07:d4:
5a:32:b4:09:87:65:7f:db:b2:f3:83:7e:e8:78:23:
b1:d0:5c:e9:37:14:7d:58:9c:13:61:0b:f5:5b:db:
0a:d8:0c:20:dc:53:44:9e:43:fb:1d:19:ee:66:7c:
7f:7e:58:12:5e:53:f7:fe:96:14:75:ba:e3:ed:0f:
60:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4A:86:3E:80:46:C7:C6:36:6B:A1:EA:08:AF:C6:5F:9A:E6:DE:F7
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/I0qGPoBGx8Y2a6HqCK_GX5rm3vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:21:6b:8d:55:d2:70:3f:4b:57:74:28:75:45:a2:de:56:72:
a3:6a:6d:5c:3f:43:21:1f:b2:e0:ba:02:b9:7e:94:f9:87:fd:
2e:0a:82:71:be:ff:5c:8c:22:4f:55:9e:88:b4:bd:f4:59:c1:
62:64:f1:dd:f4:9c:50:14:a9:ea:f7:c1:8d:de:09:75:2e:78:
99:49:02:4d:8a:dd:d3:97:29:ca:5e:0a:28:a4:75:ed:b4:7a:
14:fb:4e:8c:9b:86:80:57:57:02:58:b9:b2:e4:bf:30:eb:3c:
12:a0:1f:de:c8:db:bc:52:98:46:ef:ff:f7:c7:45:ba:c8:65:
bb:1d:2a:59:e7:4f:20:ae:1e:26:8c:4f:46:89:c3:51:64:ab:
86:b1:17:88:45:ac:63:d1:1e:2c:44:fe:d9:0c:ce:ec:40:34:
57:f3:6e:04:0d:ae:ef:c1:41:fa:3b:2b:be:ce:ed:5e:fc:19:
6d:01:d8:15:e2:41:52:01:91:35:f0:d4:5f:60:1f:6b:64:58:
6f:db:bb:12:4d:ac:25:18:f9:01:eb:de:f0:4b:42:cf:48:51:
c8:0f:5a:3f:41:8d:1c:9f:bc:81:de:ad:b9:6f:40:1b:2f:16:
37:41:0e:bb:fb:87:c1:96:de:7d:11:85:84:a1:12:7d:c9:e5:
87:35:bc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:21 2025 by rpki-client