Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Mc01dddL_xgWf_YFtTn0f9JbxI8.roa
File: Mc01dddL_xgWf_YFtTn0f9JbxI8.roa (raw, json)
Hash identifier: VkkhUidI8hPsZYYUZAjDpFBK8FbPn9z4d6EWoMVctkE=
Subject key identifier: 31:CD:35:75:D7:4B:FF:18:16:7F:F6:05:B5:39:F4:7F:D2:5B:C4:8F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D56A26494E9A1823277385EB5B5E0915D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Mc01dddL_xgWf_YFtTn0f9JbxI8.roa
Signing time: Mon 29 Jan 2024 19:11:39 +0000
ROA not before: Mon 29 Jan 2024 19:11:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:56:a2:64:94:e9:a1:82:32:77:38:5e:b5:b5:e0:91:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 29 19:11:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31cd3575d74bff18167ff605b539f47fd25bc48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a7:c7:8f:6c:74:de:b4:b7:2a:64:a3:31:2d:
d9:99:8d:45:6f:b8:26:ab:55:40:02:13:85:cf:a1:
90:fb:8a:ae:dc:31:16:8a:80:1b:7c:0a:60:da:34:
3e:1d:8e:70:db:84:bf:28:d2:eb:69:71:c4:5e:ab:
7b:77:93:31:d3:48:4b:ea:00:23:53:11:ce:69:96:
a8:73:a7:98:2a:b0:4b:7b:93:b9:7c:7f:c1:5c:ec:
87:24:12:64:78:1f:0c:51:fb:dd:84:e0:8e:57:c3:
38:15:55:60:e2:f0:05:b9:93:66:14:1d:c6:9a:99:
d7:50:80:0a:e3:02:96:8f:40:0a:bc:a7:08:70:42:
d9:e0:3c:e1:4e:7e:aa:5f:64:d4:5d:83:08:36:85:
ce:73:4c:2f:e1:fd:8d:be:f3:5f:57:dc:8c:e7:d0:
86:af:3a:db:40:b2:06:5e:ab:5c:0e:72:58:67:92:
79:c5:44:7c:86:50:0d:54:84:af:47:58:bb:4e:32:
f9:67:69:36:c5:5c:14:8a:00:5e:73:2e:b8:06:48:
75:6e:d0:4a:94:ee:f8:b4:b1:5a:0b:0f:7f:3e:20:
79:e3:4c:d6:12:57:aa:c7:ea:b0:31:05:e6:aa:2e:
81:74:0d:1b:45:32:08:e6:bb:d0:0b:57:a9:94:dc:
3c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CD:35:75:D7:4B:FF:18:16:7F:F6:05:B5:39:F4:7F:D2:5B:C4:8F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Mc01dddL_xgWf_YFtTn0f9JbxI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:df:cf:60:dd:2b:04:73:4a:d2:e7:09:bb:88:e8:dc:9e:98:
7b:53:65:50:0f:75:a1:a5:b2:8d:c4:54:a5:17:1a:a7:74:ce:
df:7e:15:d0:f3:05:9d:a5:73:76:80:48:94:9f:fa:22:21:62:
90:2e:3b:f7:a1:d6:b5:9f:76:89:d7:13:6c:a8:84:5d:f6:77:
7e:2f:dc:57:e1:76:a7:a8:85:9a:fe:28:53:cf:ad:e6:29:02:
2f:1a:77:98:da:65:5d:00:0f:a6:60:e7:9f:a8:ce:71:21:9d:
1a:ba:0c:c9:ac:f1:57:fb:f3:2e:12:eb:3f:3d:f9:b3:83:e7:
01:36:41:99:c7:78:67:e9:a6:d9:a2:b3:bb:91:2b:a1:74:78:
3e:6f:41:2f:18:d3:b9:22:9d:fe:88:22:4c:af:3c:20:23:a3:
7d:e0:a5:e8:96:c7:97:98:23:14:3b:28:c8:57:cb:f1:8f:40:
b3:0c:d2:e9:af:43:14:8c:95:b9:46:f3:d1:ed:9e:96:86:01:
da:aa:54:e0:53:9e:2d:3f:6d:5d:41:95:91:0b:4a:6a:86:fd:
34:32:a5:d6:2f:85:c5:28:a5:7f:57:f7:57:0c:40:31:54:2a:
22:ef:f0:3d:2d:12:b6:60:ae:da:94:43:af:36:85:be:12:81:
13:53:43:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:49 2025 by rpki-client