Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KXFTTf_zNSx75dHTgyH3l2r2EuM.roa
File: KXFTTf_zNSx75dHTgyH3l2r2EuM.roa (raw, json)
Hash identifier: T+gJntlI3hNe9zsnzwJKrkVX/OcLVHKBwXoPQlUDpZY=
Subject key identifier: 29:71:53:4D:FF:F3:35:2C:7B:E5:D1:D3:83:21:F7:97:6A:F6:12:E3
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EDD63283B4B1454E201D305389D53D21B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KXFTTf_zNSx75dHTgyH3l2r2EuM.roa
Signing time: Sun 14 Apr 2024 16:14:06 +0000
ROA not before: Sun 14 Apr 2024 16:14:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:dd:63:28:3b:4b:14:54:e2:01:d3:05:38:9d:53:d2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 14 16:14:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2971534dfff3352c7be5d1d38321f7976af612e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:12:ad:2d:2d:53:cd:d6:7b:c0:a0:1c:13:
13:63:85:55:da:1f:7a:4c:a1:11:52:fa:21:48:8b:
88:d5:3b:df:53:51:77:8c:79:92:65:66:22:eb:3b:
bd:75:61:da:e0:c6:34:8d:9b:eb:1c:8d:0d:9d:85:
e2:94:17:45:90:ff:90:88:a6:03:7b:0e:90:eb:42:
20:70:be:14:ad:02:d5:0c:be:22:cb:88:6e:d5:d3:
82:aa:cc:12:99:a5:8e:4a:43:36:82:c2:ec:44:53:
80:1b:ab:26:9a:80:8f:a9:9d:68:d6:44:69:54:90:
1f:43:16:37:94:2d:c8:98:71:b9:ee:28:e0:3b:70:
f9:c0:ae:e2:69:6a:5a:6e:a0:d1:01:9b:24:26:1e:
bb:9d:07:8a:e5:62:f6:dc:47:f1:c6:e1:9a:50:9e:
8a:34:9a:10:86:54:6c:f5:c7:84:42:6f:bf:cd:e3:
92:11:10:f2:8a:e1:4c:75:e1:bb:b0:50:72:4b:28:
6f:de:8e:47:b8:2a:c1:b5:ee:10:b5:da:a4:b7:42:
59:67:57:b4:2c:f9:fe:c7:1a:14:ec:b4:63:00:3c:
da:f7:62:40:cc:6b:d7:d2:39:93:b7:ee:7a:93:45:
fc:f9:26:49:2b:b5:94:04:dd:28:92:00:a4:65:8e:
3c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:71:53:4D:FF:F3:35:2C:7B:E5:D1:D3:83:21:F7:97:6A:F6:12:E3
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KXFTTf_zNSx75dHTgyH3l2r2EuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:e0:40:f2:c1:c0:04:5f:75:b1:a8:8d:7b:e7:ad:14:a9:58:
1a:25:42:15:6b:61:71:49:c8:10:c5:c9:d2:2d:77:66:d8:ec:
d4:b0:b6:e1:89:dd:a6:07:9c:10:86:6b:2a:7c:36:a1:6e:ac:
59:e1:f1:43:73:af:9b:37:6a:f0:80:c5:a6:c2:18:e3:2c:c6:
2a:11:59:e3:11:50:9f:bb:81:7d:7a:95:fe:39:18:b5:53:bb:
5a:75:d1:6c:5d:32:f2:35:47:d7:cd:46:e8:a2:3e:23:87:cd:
27:9d:b7:fc:e5:c9:17:62:6b:f0:ba:fb:6a:65:f6:63:a3:fa:
70:c4:66:80:c8:d4:b8:75:b3:60:62:1e:1a:c5:e3:8f:8f:9c:
00:5a:ae:8b:1b:1e:c6:af:f7:03:d2:22:ab:6c:55:2a:11:ac:
c7:39:08:da:5b:96:cb:77:ef:24:10:fe:b7:91:0f:b3:6b:ef:
84:97:90:c6:32:1c:78:f5:ce:3f:4b:ab:47:89:db:cd:57:f5:
3d:24:7c:cb:a1:8b:1c:b4:4b:0a:8f:39:75:fc:8a:ca:26:4b:
6e:a5:90:f1:ca:6a:2c:d4:e5:a6:3f:02:a3:46:67:b9:e9:88:
b5:23:f7:d9:bf:ae:ed:90:b3:f5:aa:09:1f:1d:b8:04:13:40:
fe:c9:6f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 22:59:17 2025 by rpki-client