Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JyW0GWCvpEsz05jujrS9e-AFbLs.roa
File: JyW0GWCvpEsz05jujrS9e-AFbLs.roa (raw, json)
Hash identifier: Am3d0pB6UeBNcXFtOFVo/19YL3A1IFbQYbyuHXu+hUQ=
Subject key identifier: 27:25:B4:19:60:AF:A4:4B:33:D3:98:EE:8E:B4:BD:7B:E0:05:6C:BB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE7B77219731DBF9895A3ED2810FA3291
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JyW0GWCvpEsz05jujrS9e-AFbLs.roa
Signing time: Mon 08 Jan 2024 06:16:48 +0000
ROA not before: Mon 08 Jan 2024 06:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e7:b7:72:19:73:1d:bf:98:95:a3:ed:28:10:fa:32:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 8 06:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2725b41960afa44b33d398ee8eb4bd7be0056cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1d:a4:d5:bb:f9:32:fb:ea:97:08:79:4a:9b:
fe:84:06:60:b9:c5:8d:84:ce:49:4d:d9:fe:e8:e8:
c3:3a:f5:78:58:1f:b4:b8:57:2a:46:b0:cd:4a:a0:
40:7a:74:28:f5:27:2a:c5:c2:fb:99:6a:a0:eb:40:
95:95:58:99:5a:73:bf:35:e7:fb:ff:c2:08:d2:15:
17:4d:c9:81:a2:3a:a9:d8:49:ef:15:e2:13:f9:56:
e3:ce:d8:4b:d9:5a:23:2f:fd:98:20:19:81:66:19:
c2:be:2a:2a:20:21:ef:cf:65:1f:e1:e5:50:d8:0e:
46:8d:1f:81:0a:26:24:7e:1e:91:53:99:7b:8f:2a:
4d:fd:4f:d9:5f:96:ed:e3:ab:b0:f6:b0:27:95:ac:
52:1b:8f:e7:d7:ca:b9:24:33:c6:65:7a:f5:b5:5a:
f3:62:ec:01:5c:c7:ff:65:62:9f:35:51:40:7d:a9:
b6:df:6f:d4:03:46:ce:42:63:13:b4:d1:f0:13:79:
16:87:6b:d0:80:b5:aa:e5:47:8a:b6:3a:08:c7:6d:
c6:cc:84:dd:46:62:6c:5c:e6:f4:8c:94:7d:a0:5b:
cf:c6:66:f7:ba:e3:c4:50:a1:c9:51:83:46:79:2e:
27:1b:c9:c3:82:5e:95:34:65:47:28:cc:e1:3d:3e:
1f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:25:B4:19:60:AF:A4:4B:33:D3:98:EE:8E:B4:BD:7B:E0:05:6C:BB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JyW0GWCvpEsz05jujrS9e-AFbLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:19:2e:e0:7b:06:1d:f8:5f:08:a7:1c:60:46:da:ae:2d:4e:
df:c4:19:75:66:63:30:6a:0b:b1:3d:9f:31:9b:5d:8e:cb:83:
e9:17:d9:9c:fd:89:95:ed:e8:41:df:a3:32:50:39:0f:1e:a9:
2b:f6:4a:8f:10:6a:2d:81:c2:0c:78:80:cb:e7:74:3b:d4:f0:
48:2b:ca:39:53:c3:b4:69:89:de:52:25:e8:fe:32:54:7b:6a:
aa:5b:ef:95:54:1e:e6:b1:66:8d:ea:a1:21:5a:3f:29:80:33:
83:f0:90:ba:94:69:99:e3:d0:4d:21:e1:32:17:e6:89:9c:f2:
32:95:c4:43:36:2b:10:27:5e:e2:81:b8:30:b6:50:24:19:f8:
1c:cd:ab:1a:f0:5f:d9:59:3b:c8:6f:67:67:7b:5d:14:09:91:
2b:49:6d:fa:d4:20:0c:b2:1e:23:50:cc:7c:d0:86:e6:5e:5e:
9b:18:48:b7:ce:82:5f:bb:fc:71:48:b6:52:07:46:66:7f:ba:
8d:62:f9:ed:39:75:c2:14:13:6a:90:fa:62:3d:a7:0d:f8:1a:
e4:22:15:86:53:0d:23:d0:f1:d2:21:26:c8:83:3c:f5:e6:d6:
60:8e:3c:04:3b:3e:0d:09:05:f6:a4:dd:c1:45:3f:7e:dc:02:
67:bd:4d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:10 2025 by rpki-client