Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JbJyX_TMUtveRnWRkScKwUKgr8Q.roa
File: JbJyX_TMUtveRnWRkScKwUKgr8Q.roa (raw, json)
Hash identifier: Y/j1VHQ8Z0rhKMK0Y78KYcBoeTJ6pRcBvCLLUJpwWwo=
Subject key identifier: 25:B2:72:5F:F4:CC:52:DB:DE:46:75:91:91:27:0A:C1:42:A0:AF:C4
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CC113528BD4850ED2A304DA13EDB2EC75
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JbJyX_TMUtveRnWRkScKwUKgr8Q.roa
Signing time: Sun 31 Dec 2023 18:11:58 +0000
ROA not before: Sun 31 Dec 2023 18:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c1:13:52:8b:d4:85:0e:d2:a3:04:da:13:ed:b2:ec:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 31 18:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25b2725ff4cc52dbde46759191270ac142a0afc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:43:58:35:6e:2f:3e:36:12:9f:ef:ad:99:
a8:c3:e7:ce:63:4c:2e:f2:b8:70:28:e4:f3:19:3f:
de:3d:d8:1a:1b:a3:84:c2:44:f6:21:99:a6:a1:b8:
7f:56:00:43:9e:47:1f:6d:ce:1a:fe:60:26:c1:38:
cd:b5:66:0b:1e:d7:d4:f4:8c:be:1f:79:15:a2:a5:
13:84:be:7c:7e:19:bf:26:24:f7:02:ea:21:0d:b1:
38:54:eb:d5:5e:02:7f:62:70:cf:0c:01:f5:b6:15:
3f:17:dd:a3:5c:18:0c:3c:7e:2b:44:52:34:7d:e6:
0c:85:6b:c1:de:a5:dc:a3:af:31:de:db:ef:b7:3d:
77:6f:2a:33:ae:8b:50:8f:bf:b2:cc:96:1d:22:44:
cc:d9:82:9e:36:83:f5:40:bf:9d:f3:ce:84:23:9d:
f9:c8:19:81:ea:e1:d0:55:a6:13:34:0e:5e:c8:59:
4b:c7:a9:ac:b7:6f:38:61:cb:c0:5b:cb:b2:ff:4a:
59:ed:00:cc:34:c3:62:60:3c:d2:a7:b5:56:b2:a4:
a9:3c:dc:61:ae:b3:f8:31:92:3f:57:2b:60:0e:a9:
d8:e3:e8:2a:12:c2:d9:ae:20:3e:7b:99:33:d9:ed:
1c:22:be:27:14:ac:45:29:38:6c:4e:74:71:21:1f:
e8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B2:72:5F:F4:CC:52:DB:DE:46:75:91:91:27:0A:C1:42:A0:AF:C4
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JbJyX_TMUtveRnWRkScKwUKgr8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:81:9e:e5:d9:f0:fd:61:b7:b8:2b:9b:39:c0:42:ed:34:1f:
91:28:c8:9a:03:09:7e:b0:1c:f7:36:e3:e1:6d:10:f1:8b:49:
02:9f:d7:fe:7e:7d:4d:d4:c1:10:41:59:d8:9d:8a:72:e4:b4:
f6:5b:5b:fd:f4:ac:13:34:56:05:7a:08:a5:56:3f:58:4c:92:
01:67:b1:d9:7f:35:46:cd:be:5f:72:96:12:46:a6:1f:1d:91:
34:80:10:6b:19:ce:98:5f:93:0a:42:c3:cf:9d:8a:19:a4:24:
e8:b1:0b:9e:3f:59:9e:f3:f8:a1:c0:b9:51:4d:21:37:41:4f:
57:0e:ea:29:28:1b:d4:d8:d8:1b:d7:ca:de:3f:5a:b5:b9:f6:
c0:4f:1b:f8:29:74:c7:63:63:0d:e3:af:f3:27:75:29:7e:33:
97:49:76:c7:b4:12:a7:f9:52:5e:8e:fb:93:41:26:a6:48:94:
d6:95:e6:5a:32:cc:a4:13:d3:6b:de:4f:15:fb:57:99:bf:a0:
15:07:6b:29:11:d0:cf:f6:43:75:91:45:3f:a1:9e:eb:1d:7a:
25:61:05:75:41:95:eb:85:e0:5b:f7:2c:7d:11:9b:91:c9:f9:
1a:5f:4f:8e:a8:cf:28:44:2e:59:9d:fd:13:84:cd:51:40:33:
17:ea:3e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:35:43 2025 by rpki-client