Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NDO3NDOHYl329LChJ3Brvw8L86E.roa
File: NDO3NDOHYl329LChJ3Brvw8L86E.roa (raw, json)
Hash identifier: zFxdE/G3jXJ3WyWzrEiHBz63YtIMBbX1wu8lC0YxZFQ=
Subject key identifier: 34:33:B7:34:33:87:62:5D:F6:F4:B0:A1:27:70:6B:BF:0F:0B:F3:A1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D3FE6DFE185D70C6D6266A3C16F2C0687
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NDO3NDOHYl329LChJ3Brvw8L86E.roa
Signing time: Thu 25 Jan 2024 09:15:11 +0000
ROA not before: Thu 25 Jan 2024 09:15:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3f:e6:df:e1:85:d7:0c:6d:62:66:a3:c1:6f:2c:06:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 25 09:15:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3433b7343387625df6f4b0a127706bbf0f0bf3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:43:f4:a8:2b:a3:26:82:f9:0b:42:a7:b2:
be:6a:cc:f2:a4:27:99:7a:22:ca:b9:09:2a:4b:33:
aa:1a:68:62:6c:1c:57:1e:ad:3c:5b:de:3c:ab:36:
97:08:64:bf:b2:38:d1:d2:e6:bf:0d:ae:ed:ef:3e:
32:42:4d:59:18:9d:a4:fd:91:25:23:93:3b:67:27:
89:c1:fc:6a:9a:5a:1f:ad:f2:fa:c3:06:cc:cc:83:
83:52:04:f4:30:f6:c2:a0:22:b9:b9:04:eb:cf:3c:
bf:a3:cb:a4:5b:9c:51:5d:9b:42:6c:ce:34:06:c4:
24:c9:0c:0e:a8:45:5d:e0:1e:53:75:a0:fd:62:da:
09:4a:48:e5:a0:90:39:f5:7e:18:ad:b2:60:be:e1:
5f:4d:f8:e7:55:33:c2:ca:fa:38:6a:ea:64:a9:f3:
51:12:0f:33:e5:40:9d:7e:0f:11:89:76:b2:e4:97:
90:d6:ed:30:bd:a5:be:03:1a:30:9e:5c:e0:a4:49:
85:45:88:7b:a6:3f:54:57:b6:61:4e:f4:39:bf:74:
55:b6:f4:5f:e2:f6:d5:93:9d:75:31:23:1a:82:9f:
65:fc:6b:50:a8:0e:d9:bc:25:f9:35:8d:b0:24:5b:
1d:c1:c8:05:fc:8e:ce:0f:5c:fc:dd:21:e7:14:94:
dc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:33:B7:34:33:87:62:5D:F6:F4:B0:A1:27:70:6B:BF:0F:0B:F3:A1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NDO3NDOHYl329LChJ3Brvw8L86E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:aa:4f:d2:b3:b8:c6:53:75:cd:91:dc:3f:43:6d:e9:91:eb:
1d:e7:bf:7e:28:b6:e9:95:c5:4d:f7:0c:e8:b1:2f:20:fb:38:
65:95:5b:0d:b3:26:f5:67:24:d8:41:74:cc:df:fa:00:d0:9b:
f3:be:f4:9b:e0:99:27:84:06:f6:9d:dc:68:10:e8:6d:77:f9:
e9:1f:9e:99:34:b6:52:4a:c1:13:70:96:fe:7f:bb:f3:14:92:
1f:38:cb:39:74:7b:6c:ef:91:a8:53:4b:f8:71:99:ed:a9:90:
53:9c:1d:4d:fa:0b:ba:44:ea:02:3b:21:a8:2d:82:de:17:97:
3a:cb:e1:b9:70:08:6e:99:a9:70:ac:1b:87:b1:27:3b:d4:78:
80:08:96:1b:42:8e:f4:31:2d:29:bb:4f:34:7a:d7:bd:d2:89:
79:a7:a1:3a:5c:54:d9:6a:cf:3c:8e:54:3a:5c:23:d8:97:dc:
a6:c3:ed:4a:b8:e3:5b:a7:5a:8a:2a:32:b3:d0:c2:a9:59:82:
bc:85:fc:90:fc:6e:f2:16:7b:a5:81:bd:83:a9:ea:0d:c5:20:
49:e7:ef:8b:07:71:a7:bc:3b:6c:78:3e:88:fa:7a:cd:be:e9:
a6:5b:75:79:db:ff:be:3b:ca:4a:e8:97:b3:e7:b9:ae:2b:0c:
6d:80:e0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:10:30 2025 by rpki-client