Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JGTJ38Dz1lP-AKrcvoY8WOrlagQ.roa
File: JGTJ38Dz1lP-AKrcvoY8WOrlagQ.roa (raw, json)
Hash identifier: R3SODE4VVbV/32raRYxz7TvFtTkvcW+eRGkALnWx4tA=
Subject key identifier: 24:64:C9:DF:C0:F3:D6:53:FE:00:AA:DC:BE:86:3C:58:EA:E5:6A:04
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D70CEC8968BE3141E94E1B926B30E9A1F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JGTJ38Dz1lP-AKrcvoY8WOrlagQ.roa
Signing time: Sat 03 Feb 2024 21:10:16 +0000
ROA not before: Sat 03 Feb 2024 21:10:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:70:ce:c8:96:8b:e3:14:1e:94:e1:b9:26:b3:0e:9a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 3 21:10:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2464c9dfc0f3d653fe00aadcbe863c58eae56a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7d:a5:52:6c:16:b8:5a:f2:74:65:e5:4f:f8:
00:99:ac:34:3c:a7:f8:6a:0e:35:ab:be:62:90:92:
b3:c3:61:4a:61:05:9b:a9:3b:d4:7d:62:79:06:58:
47:49:88:95:1b:e2:44:97:47:90:6e:ec:c0:74:1c:
bd:e3:b6:e1:2e:47:fd:94:0b:25:2d:50:ee:26:3d:
ea:ab:d5:f9:47:07:93:53:c0:64:13:f8:ad:e1:1c:
9f:ec:c7:6e:01:95:ed:22:bd:ae:b1:98:29:e1:b0:
01:cb:fb:27:2e:90:e4:20:6c:83:ab:78:d5:4a:62:
9c:a7:9f:35:d6:fd:ef:ac:62:77:ba:dc:ac:16:3a:
c6:c3:f4:cf:bb:20:7a:90:4b:28:6f:62:6f:88:26:
79:a0:5b:a1:da:d2:c1:f5:67:c5:ce:53:e2:97:09:
08:45:f2:7b:17:af:3a:a5:8f:2e:00:6a:ef:62:d1:
fa:84:4c:b8:d8:93:c0:46:b1:4c:40:94:a2:4d:0e:
70:08:76:3e:1f:6a:8d:e7:9f:33:09:ba:64:c9:4f:
ca:77:fc:9f:bc:91:35:9e:1e:50:a9:94:96:79:2b:
bf:dc:07:e5:9c:6f:bc:28:d1:f5:32:b6:fc:9a:ef:
82:c6:d5:bd:85:69:bf:18:99:c6:79:25:5a:f9:27:
94:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:64:C9:DF:C0:F3:D6:53:FE:00:AA:DC:BE:86:3C:58:EA:E5:6A:04
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JGTJ38Dz1lP-AKrcvoY8WOrlagQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:80:fa:36:5f:6c:83:90:21:d5:52:86:11:a0:a6:d1:0d:e0:
02:14:3a:c1:81:62:82:b6:a5:f3:ed:25:09:88:66:25:da:36:
eb:49:8d:48:d1:ac:b9:ba:25:fc:46:82:e4:94:d5:03:d6:3f:
11:3d:02:7a:54:8e:cf:46:22:36:01:cc:70:89:1c:59:11:d3:
a9:72:21:20:8c:22:f5:bf:83:1e:7e:ec:d9:04:52:88:37:ce:
7c:5e:92:c8:2d:81:bd:3d:1b:15:92:e6:1b:91:92:9a:c3:42:
49:89:96:27:ac:0a:88:5e:88:fd:22:87:46:55:fe:13:3c:65:
0b:93:d3:2e:9e:ff:4b:a1:57:64:60:99:df:43:98:93:e5:e2:
5d:32:59:a4:1d:a5:1f:fc:e8:19:59:f3:b5:d5:b4:e4:39:87:
c2:f9:61:5b:84:a7:44:dc:ab:fe:f9:47:cf:f5:ee:b7:8f:87:
aa:4e:70:5e:8b:cc:04:bf:df:9c:f1:f6:0a:35:09:7e:15:86:
72:73:87:47:f3:58:b7:0e:1e:85:74:77:41:05:bd:f0:e5:ef:
12:25:a8:f3:eb:b6:c0:3b:06:75:2d:90:3a:88:b4:33:49:16:
cc:4f:31:f4:e1:54:26:a0:ab:a6:72:60:eb:ab:b8:6d:66:1f:
03:96:48:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:21:38 2025 by rpki-client