Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/T-bD2NWU2AUuVLEEb1oP7GcZRsQ.roa
File: T-bD2NWU2AUuVLEEb1oP7GcZRsQ.roa (raw, json)
Hash identifier: l50as9HOn85zQ8MjatvBeMUkUkhZYGbcJwyC+k8M9ac=
Subject key identifier: 4F:E6:C3:D8:D5:94:D8:05:2E:54:B1:04:6F:5A:0F:EC:67:19:46:C4
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C894918FD909EF95FBF1300F42BDF89B5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/T-bD2NWU2AUuVLEEb1oP7GcZRsQ.roa
Signing time: Wed 20 Dec 2023 22:11:58 +0000
ROA not before: Wed 20 Dec 2023 22:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:89:49:18:fd:90:9e:f9:5f:bf:13:00:f4:2b:df:89:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 20 22:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fe6c3d8d594d8052e54b1046f5a0fec671946c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f1:e7:48:ff:46:ff:56:91:41:51:6e:c8:02:
fb:b1:c7:55:33:de:b4:4f:33:f7:7e:ba:97:08:39:
2b:55:7b:a9:28:c6:cc:35:b4:4a:e1:8f:fc:fa:6c:
41:01:f7:c0:00:42:5d:53:0f:b7:68:6e:ae:a5:57:
eb:9d:7c:39:6d:67:d6:9c:e6:2f:1b:c4:6b:6a:1a:
72:eb:94:e1:05:cb:3c:60:32:63:86:7f:83:0f:2e:
50:41:00:8e:bf:68:10:1b:4b:b0:1f:f2:dd:98:50:
9f:49:54:ee:a0:c5:7a:4e:e5:1d:35:c8:79:2f:55:
2c:67:ab:49:95:2b:92:ca:9f:62:6e:88:23:2b:6e:
19:5d:f6:2d:eb:86:a6:15:7c:f7:ed:02:b9:19:22:
9f:7e:b7:17:1b:67:a2:40:c3:dd:68:1a:51:9f:29:
3c:73:31:1b:8f:bf:ed:a7:79:28:13:6e:d3:57:59:
85:37:89:d5:61:55:74:7d:cb:63:fd:64:50:3b:d6:
d1:f7:da:d3:7b:fb:9f:86:7a:c6:9b:84:5c:dd:32:
9b:be:63:8e:20:6f:3d:33:8e:d8:fc:0f:79:22:cd:
bc:10:b8:42:b9:ae:75:2e:46:c1:4b:5e:14:e4:08:
3d:0f:a7:ee:12:42:33:3c:66:71:6a:8e:44:0c:ae:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E6:C3:D8:D5:94:D8:05:2E:54:B1:04:6F:5A:0F:EC:67:19:46:C4
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/T-bD2NWU2AUuVLEEb1oP7GcZRsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:dc:41:f9:5c:ec:58:42:ba:25:d6:cc:be:94:30:1f:53:6b:
e8:0e:e4:39:64:c6:ab:c9:0f:49:e8:72:5d:11:b4:e1:95:1f:
53:96:d4:7b:eb:ac:f9:3e:ef:b1:1e:9e:d9:87:77:93:2a:14:
9c:6e:36:a7:fd:10:26:c0:9e:f6:2f:57:ee:3e:cc:3e:a6:db:
48:24:63:77:e6:4b:f4:37:18:d1:ec:56:c8:0b:0d:dc:10:12:
6f:8a:9b:75:af:42:4e:3f:a2:9e:3d:88:c6:09:c2:bf:37:10:
b6:e0:f1:24:c4:b9:c1:1d:c3:df:7f:76:44:42:89:f7:8e:43:
09:10:31:ec:90:17:af:19:63:98:7a:b1:33:bb:07:20:5b:72:
d8:c9:a4:5d:40:6e:d6:01:42:0b:9e:9b:6d:28:78:63:eb:92:
66:58:77:7c:03:e6:2a:8c:ba:aa:29:aa:a5:dc:9f:a4:c1:f3:
8d:65:0d:8a:eb:d7:b3:2d:64:c1:e7:eb:cf:b9:48:b3:0d:27:
10:70:ac:fe:34:c2:19:96:2f:95:60:cd:cc:8c:8a:af:55:2d:
ff:31:2c:ae:24:aa:ce:cc:a2:91:a0:20:00:ad:e7:ea:5f:90:
5c:72:a6:7f:42:66:39:3a:26:09:be:ee:3b:12:9d:df:92:47:
6e:9f:d1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:35 2025 by rpki-client