Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PN5L7T3qpyMEPqFYouogMb_xfPs.roa
File: PN5L7T3qpyMEPqFYouogMb_xfPs.roa (raw, json)
Hash identifier: TO6plqAAb+tbvpI5lLCxFV9jkGwDNjzGFKkU2mxbtDc=
Subject key identifier: 3C:DE:4B:ED:3D:EA:A7:23:04:3E:A1:58:A2:EA:20:31:BF:F1:7C:FB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D6FF6B753EFB8E973FA58893EF2552114
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PN5L7T3qpyMEPqFYouogMb_xfPs.roa
Signing time: Sat 03 Feb 2024 17:14:16 +0000
ROA not before: Sat 03 Feb 2024 17:14:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6f:f6:b7:53:ef:b8:e9:73:fa:58:89:3e:f2:55:21:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 3 17:14:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cde4bed3deaa723043ea158a2ea2031bff17cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:70:a3:8b:93:33:bd:0e:8b:68:13:fb:b5:
47:92:22:c9:9b:f0:99:f7:b9:45:6e:39:79:f2:5b:
5a:27:fc:82:a4:7b:4c:96:7d:85:d7:b8:b8:f1:16:
0b:3a:39:06:d3:4e:c7:e8:e6:78:1a:c7:7f:da:88:
c0:d0:98:1d:8f:cb:b4:e5:6a:7b:89:8a:23:77:65:
85:c9:49:f4:01:2f:e9:f5:3b:7c:6e:aa:91:3f:08:
f5:60:a1:b8:45:e7:46:13:ee:0d:fa:86:1c:67:15:
fe:5f:8b:d6:8a:7e:c2:33:fe:cd:4a:aa:6e:ec:94:
91:48:07:a7:d1:5e:d4:ed:d7:51:b8:89:a8:ef:f7:
79:90:c7:b2:76:bd:bc:f8:c7:d0:dd:eb:20:78:e8:
15:c1:de:ab:c7:9a:16:1b:06:43:ab:ab:23:b4:7c:
02:b9:8d:81:d6:80:2b:27:72:10:0e:09:8c:ea:a7:
7a:55:fb:74:77:2b:e0:37:c6:ed:d7:34:ed:1c:36:
9c:45:0d:45:6f:03:0d:6e:8e:6d:a6:8a:79:c2:ee:
7e:59:21:57:a9:8a:bc:15:77:03:40:6b:8c:b4:8f:
15:04:5f:9e:82:0d:58:e0:26:50:1d:d9:d5:42:40:
60:06:e6:57:65:51:10:8f:e0:8f:fd:8e:0c:42:4c:
92:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DE:4B:ED:3D:EA:A7:23:04:3E:A1:58:A2:EA:20:31:BF:F1:7C:FB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PN5L7T3qpyMEPqFYouogMb_xfPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:ce:5b:16:83:6c:e1:8d:5a:08:ed:a0:6e:52:52:9b:a8:09:
ec:a1:b0:b1:50:1f:56:f1:ec:04:4e:2c:df:86:ea:9d:79:33:
d2:6c:38:e9:15:79:54:c9:80:d0:9c:d3:1b:6c:9b:38:bf:70:
91:e8:5e:f9:65:3f:28:67:29:4e:c8:6d:92:6a:4f:4f:56:63:
ad:31:f6:91:4a:53:dc:35:8f:55:43:f8:af:79:5f:63:11:df:
5d:f3:ac:fc:de:d4:6d:88:85:f9:29:63:49:13:bc:14:96:d2:
ce:ef:92:e1:cd:64:b2:70:b3:e4:a1:88:29:12:1b:9c:a2:90:
22:4f:4c:77:a1:08:ec:99:a4:11:66:2d:4a:56:d4:4d:9c:97:
41:ee:c5:6f:bb:76:50:d1:12:5b:fe:bc:e5:71:af:83:7c:db:
2f:38:dd:14:33:d3:fd:43:24:58:45:c8:97:31:3d:dd:b3:86:
c0:48:a6:b7:64:ed:38:a6:97:1f:b3:e0:15:89:1b:27:fd:5b:
a5:3f:c2:42:7a:d9:1b:df:c2:ef:a2:47:b7:26:42:fe:41:76:
e1:f6:ee:37:6e:e2:31:b5:15:9e:29:97:c2:37:ed:73:11:5d:
43:54:1e:d5:62:97:53:b2:65:40:74:88:21:b6:7d:b8:32:e1:
b5:5e:a4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:51 2025 by rpki-client