Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/INP_PM7aydhXMS_UgtTK0HmgmIs.roa
File: INP_PM7aydhXMS_UgtTK0HmgmIs.roa (raw, json)
Hash identifier: f5XdH2WhcSEgPcJOLM3YqITVymvzDNcdXvwxeyJwuyc=
Subject key identifier: 20:D3:FF:3C:CE:DA:C9:D8:57:31:2F:D4:82:D4:CA:D0:79:A0:98:8B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CBEB628D5E53476798C81D2C5BCB232A7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/INP_PM7aydhXMS_UgtTK0HmgmIs.roa
Signing time: Sun 31 Dec 2023 07:10:58 +0000
ROA not before: Sun 31 Dec 2023 07:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:be:b6:28:d5:e5:34:76:79:8c:81:d2:c5:bc:b2:32:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 31 07:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20d3ff3ccedac9d857312fd482d4cad079a0988b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a9:3d:df:12:5c:9d:c8:37:1a:7e:fb:07:7a:
a2:fe:98:6a:77:7f:bf:ac:18:66:bf:d3:16:56:5d:
55:6b:9d:4f:36:2e:b3:67:c6:71:88:68:51:8c:ff:
cd:e5:18:a6:83:7b:24:5a:e2:be:87:0f:68:11:62:
8f:01:0a:30:77:b2:13:d4:4a:1b:92:87:12:37:ee:
19:bf:71:02:1e:9c:97:c9:91:db:11:75:79:f9:03:
7a:40:80:fc:48:46:ce:7a:dd:16:7d:97:d4:6f:7e:
26:70:a2:d9:b9:ca:eb:37:9e:9e:76:8f:6a:64:b0:
6d:88:6d:2e:b8:f3:20:03:db:da:59:90:dc:63:d5:
08:8f:58:46:ad:ff:3f:fd:63:75:4f:0a:35:e1:12:
e0:3f:ba:02:28:3f:e3:19:ae:67:e3:d1:41:ad:67:
18:87:97:57:2f:f5:f6:1b:9d:9b:2f:37:60:13:98:
82:00:d8:81:e8:13:38:40:9e:98:42:38:fa:d2:a1:
fe:d2:c6:52:59:09:e4:9d:df:d4:fd:48:fd:39:de:
2b:dd:c0:93:10:2c:58:03:27:73:51:44:c8:eb:01:
d9:db:3f:b3:da:25:e0:7e:ac:ff:90:ff:04:6b:a7:
6e:7e:86:f0:37:39:b6:28:2a:00:90:93:e2:3c:9d:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D3:FF:3C:CE:DA:C9:D8:57:31:2F:D4:82:D4:CA:D0:79:A0:98:8B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/INP_PM7aydhXMS_UgtTK0HmgmIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:26:07:a6:76:77:82:bf:77:47:f9:44:82:75:97:20:21:2b:
90:46:50:6b:26:ed:02:73:4b:72:f2:89:52:a4:8b:a6:16:75:
84:72:54:86:3f:fd:61:61:8d:e5:7b:23:bc:fb:e1:1b:af:a6:
83:d4:25:65:9c:9e:98:6f:81:29:4e:61:f3:95:b1:3f:12:03:
5b:0c:d3:1d:fd:f6:7a:60:96:aa:42:cc:26:56:a9:ca:41:80:
6b:2d:f1:24:df:d4:03:12:19:4b:0f:c6:80:2d:15:fe:0a:aa:
84:a0:3a:50:ce:05:4c:a0:ea:6f:8c:58:53:fb:08:9b:17:e0:
ca:94:3a:c0:d4:7d:46:2d:e6:be:1d:b6:2f:1c:be:71:42:86:
7c:ad:04:e1:fa:0b:1e:5d:ee:ca:7d:b0:af:e2:32:54:24:99:
5d:70:f5:6f:f7:c3:03:b6:fb:40:c9:42:e5:a2:96:a6:e8:86:
12:cf:7c:00:ae:09:8e:4a:12:36:e2:71:d4:85:75:93:b3:44:
1b:e6:fc:c9:0b:1f:73:02:c1:40:76:bb:65:26:03:21:50:28:
70:3f:a3:93:4d:a3:0c:e7:bc:89:5d:07:b3:f1:47:7f:e6:e5:
56:2f:84:78:64:78:c3:ff:85:a4:71:ed:23:a6:45:9e:62:b4:
4e:d7:4b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:18 2025 by rpki-client