Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JDZyg4DwkwXHXh7r7u6HeuWOZUw.roa
File: JDZyg4DwkwXHXh7r7u6HeuWOZUw.roa (raw, json)
Hash identifier: qp2omV25KUCxt4CDRaiS9aQdHRZBjxJwWtpuujwL+jc=
Subject key identifier: 24:36:72:83:80:F0:93:05:C7:5E:1E:EB:EE:EE:87:7A:E5:8E:65:4C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DF26DA59831E7948E54CB8807F417D269
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JDZyg4DwkwXHXh7r7u6HeuWOZUw.roa
Signing time: Thu 29 Feb 2024 01:14:48 +0000
ROA not before: Thu 29 Feb 2024 01:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f2:6d:a5:98:31:e7:94:8e:54:cb:88:07:f4:17:d2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 29 01:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2436728380f09305c75e1eebeeee877ae58e654c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a8:01:b9:9a:10:f5:0c:be:d5:de:f6:49:52:
f6:45:3a:24:64:43:4a:4a:ba:15:7f:22:c4:3f:6e:
b3:4f:4f:0b:dc:76:f2:90:14:eb:1c:26:46:c2:e4:
12:be:67:ca:69:05:87:d5:ea:03:10:15:ca:12:98:
91:53:dd:c6:da:31:35:cb:3e:c2:6b:20:7d:99:2d:
16:1b:9b:e5:3f:6d:95:2c:0a:51:af:11:df:b9:07:
9e:3a:c6:b6:4d:0e:86:49:1b:61:86:61:df:2a:a4:
32:32:03:61:cc:b1:8e:22:e6:ab:65:04:3b:8b:53:
c2:6f:e7:e3:25:cd:62:60:68:00:28:74:3b:84:99:
c2:88:ae:e6:7f:e5:9e:64:99:2b:3a:3d:9a:6d:7a:
f9:b5:f3:f3:1e:63:8a:2e:fe:f9:d0:7c:5a:55:c5:
7c:56:bf:f4:e8:a3:fe:3f:f1:f4:bd:e8:51:ee:17:
6b:8a:5b:d3:89:7e:46:53:fc:08:61:22:79:d1:f9:
6b:88:e8:f4:ce:7a:e2:11:63:a2:03:2a:ff:1f:0d:
44:4d:67:5d:0d:c7:76:85:37:11:4c:95:da:bb:a3:
ed:1c:fa:90:b4:1f:04:84:88:d9:b9:34:fb:03:5c:
fc:f4:17:cf:f5:01:92:ba:1c:ed:f8:63:b0:26:58:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:36:72:83:80:F0:93:05:C7:5E:1E:EB:EE:EE:87:7A:E5:8E:65:4C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JDZyg4DwkwXHXh7r7u6HeuWOZUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:a2:44:5e:fd:a0:41:92:fa:9e:48:45:7d:75:10:74:05:c2:
9f:5c:61:d4:49:4c:3b:ea:92:5d:6d:3e:67:01:83:e8:f8:b8:
5a:d0:34:bf:f1:55:71:34:10:24:4a:89:c6:49:ae:42:54:63:
37:d4:57:e6:2f:1d:5a:b0:1a:22:a7:7d:79:3b:12:64:ae:87:
fc:d9:53:5d:b2:1d:dd:0d:4c:05:44:f7:b2:f7:73:91:a5:23:
2c:77:1c:ce:f7:51:43:09:80:42:45:e6:33:51:45:ec:d7:5e:
00:6e:70:9a:14:11:48:51:56:41:f2:60:55:fa:43:53:8f:c4:
13:ca:15:a6:e0:98:db:e5:6d:55:42:83:b1:9d:cb:9a:57:45:
19:54:97:1a:a1:e5:54:c8:b0:7e:13:db:33:10:6c:70:e4:c4:
bf:73:81:c6:18:32:a7:4a:cd:88:e9:4c:f8:86:b5:b1:c4:93:
04:ce:25:04:94:49:08:c2:81:cc:8d:19:ad:0e:aa:58:c8:55:
09:f2:ff:2a:20:35:bd:fa:fc:30:a2:70:35:45:7d:ec:94:82:
7d:5d:21:b9:eb:23:ae:82:2f:53:da:c1:e2:02:89:20:57:60:
f3:15:f5:8e:48:59:c1:f9:eb:b2:d4:bf:63:93:63:5b:11:29:
d2:87:cd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:45:11 2025 by rpki-client