Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/So5NkEM_oOpXmIJO47O6AZJJPEM.roa
File: So5NkEM_oOpXmIJO47O6AZJJPEM.roa (raw, json)
Hash identifier: Eycn0nujRI+IJJjCGuMlad2SiCGtxnl2BsBfYSWE6Yw=
Subject key identifier: 4A:8E:4D:90:43:3F:A0:EA:57:98:82:4E:E3:B3:BA:01:92:49:3C:43
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8A5E8028D690119CB0D190A9E681A95D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/So5NkEM_oOpXmIJO47O6AZJJPEM.roa
Signing time: Thu 21 Dec 2023 03:14:58 +0000
ROA not before: Thu 21 Dec 2023 03:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8a:5e:80:28:d6:90:11:9c:b0:d1:90:a9:e6:81:a9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 03:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a8e4d90433fa0ea5798824ee3b3ba0192493c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:9f:b6:73:1e:e3:e8:a2:c5:8d:a5:27:11:
aa:c0:89:ac:6b:2d:1c:a4:4f:9b:a8:21:03:64:b6:
9f:80:67:6a:47:f6:cb:99:16:3c:83:c5:88:db:ad:
b8:8a:5a:ba:14:f3:bb:02:2d:77:b1:e5:db:1b:b0:
87:80:56:c1:02:50:7b:c9:14:b9:0e:a1:73:60:36:
c5:0e:c4:c9:6c:6d:1d:e4:95:8e:af:4c:5d:e1:d2:
ef:a4:35:db:33:f6:12:0d:1a:4f:da:4b:f1:7f:33:
72:bf:1c:4f:f6:f9:1e:e1:27:ce:48:c0:45:a3:2c:
11:2b:c6:4c:d1:b7:04:d8:22:49:58:8c:d5:69:8d:
85:c0:be:86:f3:21:ed:fa:ab:87:9d:10:3d:62:2b:
e7:7d:ec:c0:8e:f2:ed:24:7d:52:2c:06:4c:4d:1f:
be:15:d4:7e:cd:d1:bf:39:93:7b:a3:10:5c:93:50:
89:4b:79:0e:6b:8f:11:df:2b:24:7d:2b:bb:80:2d:
61:b7:99:22:f9:3d:40:1d:e6:14:0f:c5:4d:35:bb:
6e:e0:d4:05:df:3e:b0:d0:22:85:e9:49:6b:dc:22:
c7:ed:1b:68:e6:4f:b6:89:9f:a0:7d:2b:23:5c:23:
18:9e:9e:c2:be:00:94:f8:24:e2:64:d4:e6:6d:62:
46:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8E:4D:90:43:3F:A0:EA:57:98:82:4E:E3:B3:BA:01:92:49:3C:43
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/So5NkEM_oOpXmIJO47O6AZJJPEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:21:41:53:17:1b:de:10:88:89:2c:b0:fa:ef:ba:6c:b8:f6:
89:bc:b5:67:66:eb:c7:b0:ca:0b:81:df:ea:82:80:f6:66:c3:
12:78:97:f5:b8:14:fa:6b:c9:27:59:e5:9d:e5:1c:8c:2f:5b:
1d:03:0f:bd:fa:4e:e9:ff:fc:a7:a1:d0:72:5e:4b:61:ec:69:
4c:86:17:6a:00:34:f4:fc:ac:93:ff:4d:37:3a:42:c3:9c:16:
5d:9b:0e:a0:57:1e:6a:20:e3:d6:10:6a:28:8d:7c:b4:d3:33:
44:03:bf:fb:76:36:b5:15:b4:08:79:b0:45:5e:51:79:50:e0:
c1:0b:e0:f1:41:0c:a2:5d:20:5e:a8:08:8c:c3:51:a5:fb:5d:
2b:de:76:13:f1:45:4a:4c:c4:74:bc:8d:0e:fa:8e:c4:4e:82:
c4:20:33:19:4d:c7:31:cd:9a:be:9f:66:84:56:68:92:04:0a:
85:9a:33:6b:32:7a:0e:2d:18:e2:79:17:b9:5a:ba:e5:eb:d6:
bd:63:12:41:24:48:5c:a0:4d:96:a5:64:7f:09:47:86:3a:be:
30:56:05:70:c6:77:11:3a:02:9f:60:d8:08:1a:c5:44:17:a8:
b1:9f:6a:23:41:e4:d0:a4:e8:0d:f8:84:c5:82:60:f7:d3:c2:
53:e8:49:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:20 2025 by rpki-client