Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JV2BcxzPFPCjhGWjLAZyGdIR9d0.roa
File: JV2BcxzPFPCjhGWjLAZyGdIR9d0.roa (raw, json)
Hash identifier: orlbOCrkSPy13tI7zkVneC0XJJjMmNG+SY92RRO7ifc=
Subject key identifier: 25:5D:81:73:1C:CF:14:F0:A3:84:65:A3:2C:06:72:19:D2:11:F5:DD
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D265E03188B337F89A61A00F75A6FCB75
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JV2BcxzPFPCjhGWjLAZyGdIR9d0.roa
Signing time: Sat 20 Jan 2024 10:15:11 +0000
ROA not before: Sat 20 Jan 2024 10:15:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:26:5e:03:18:8b:33:7f:89:a6:1a:00:f7:5a:6f:cb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 20 10:15:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=255d81731ccf14f0a38465a32c067219d211f5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:fc:53:c2:1e:46:8b:a3:fd:ce:f3:5e:da:
ad:b9:31:19:36:0c:c2:98:00:9b:0c:bc:05:5a:4d:
8a:94:9f:8e:9e:0f:c7:b7:7c:88:1e:b0:f0:3b:86:
df:47:73:5c:28:fb:9a:54:e8:35:49:fb:dd:95:ac:
64:15:4b:6e:cf:6e:2e:7a:40:10:21:92:4f:d6:e4:
70:c5:b1:0e:76:67:01:ba:b3:30:4d:78:7a:b9:08:
82:b5:de:86:ed:04:ae:e0:26:e5:b3:94:74:20:84:
91:c4:f3:2c:3f:8b:fb:d0:7b:c4:35:c6:45:25:87:
89:0f:96:f8:ba:66:e1:34:ba:60:a9:5a:0f:6d:e8:
07:f1:45:43:4e:02:19:27:69:3b:d6:ee:fc:31:88:
9e:a7:c9:e9:6f:72:70:30:bc:43:23:c7:16:7b:33:
d3:05:54:3d:f9:aa:13:7d:f0:cd:f0:6f:0f:78:82:
ac:55:47:c5:61:e9:bc:90:cc:7a:77:aa:2b:c2:a2:
29:09:2a:69:c3:53:29:81:a7:59:b2:ed:8b:27:2d:
3b:cd:8b:c7:62:2c:a1:26:94:82:9f:78:d9:a8:85:
cc:06:c4:1f:4e:e0:fe:21:12:13:ab:fe:5e:57:33:
aa:aa:4d:f3:24:42:6e:19:4a:29:b8:30:20:2a:1d:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5D:81:73:1C:CF:14:F0:A3:84:65:A3:2C:06:72:19:D2:11:F5:DD
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JV2BcxzPFPCjhGWjLAZyGdIR9d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:bf:5b:95:9b:ba:b7:ae:22:fc:ed:d1:2d:17:82:40:75:ef:
41:99:a3:80:d3:18:c4:7a:7f:6b:86:55:14:04:a0:1e:8d:1f:
8b:22:b1:ca:46:5e:03:3f:12:ac:67:2c:0b:93:df:52:7d:ac:
85:e3:84:03:da:e2:70:5d:f8:14:2b:23:9f:38:2b:aa:54:39:
86:43:25:cb:f9:ec:ee:54:c6:f0:e4:9c:79:88:69:df:f2:70:
da:70:e0:8a:18:f7:ee:ef:79:aa:b0:90:00:b3:99:94:30:cf:
e0:68:f7:ad:16:ff:c6:7f:13:e1:95:03:d9:8e:55:14:82:95:
90:94:aa:b4:1e:77:17:d5:d9:4c:cb:cb:a0:04:d7:67:45:94:
11:64:8f:ef:46:ed:2a:c8:7f:1c:13:f7:cb:1e:e0:7c:70:67:
b6:8f:46:d3:ed:c2:24:85:b4:df:2a:fe:11:24:ff:5a:f5:67:
96:8b:b9:74:3b:df:39:92:1a:74:be:41:65:a4:6b:4f:7d:fe:
94:6c:ed:5b:20:e8:3e:e9:ac:97:7f:cc:04:67:42:9c:d1:2f:
ce:b1:f3:1f:16:a2:a0:c7:64:83:68:06:eb:3e:a7:dd:aa:1b:
37:3c:80:b5:67:4a:83:aa:77:23:4b:0f:b4:f7:d5:d0:e1:a4:
9b:85:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:47 2025 by rpki-client