Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/T0Gcxjnkdx1PcTiUElHmaISsraU.roa
File: T0Gcxjnkdx1PcTiUElHmaISsraU.roa (raw, json)
Hash identifier: EbXQG74t6A0O2UfdxMN1Rz0QXWUrW5HaCN1U213njuM=
Subject key identifier: 4F:41:9C:C6:39:E4:77:1D:4F:71:38:94:12:51:E6:68:84:AC:AD:A5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8A26A7A7E31BB2E750D0CFB13B12290F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/T0Gcxjnkdx1PcTiUElHmaISsraU.roa
Signing time: Thu 21 Dec 2023 02:13:58 +0000
ROA not before: Thu 21 Dec 2023 02:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8a:26:a7:a7:e3:1b:b2:e7:50:d0:cf:b1:3b:12:29:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 02:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f419cc639e4771d4f7138941251e66884acada5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b8:45:9d:2c:a8:36:14:73:34:e2:1b:87:7f:
ea:05:24:0a:b0:d0:2b:cb:9d:c3:19:3d:da:2b:ad:
d9:6e:81:5d:9e:be:cb:8a:8b:2a:8a:b9:7e:2e:38:
bd:14:c5:21:c6:7a:b8:70:5a:07:e3:0d:b7:d9:69:
ba:43:7b:61:2d:c8:04:23:bc:70:f4:b5:1f:e7:32:
6d:b7:73:bb:4b:bf:4e:97:71:a3:ef:64:2d:4f:68:
8e:9d:08:6e:bf:a6:74:9c:82:cf:87:27:80:b4:9f:
b7:34:68:c2:6d:19:9b:f2:63:11:39:58:a3:63:8f:
00:ae:9b:3c:cf:c6:40:02:bf:a6:06:28:85:c7:80:
44:6d:c5:00:de:18:5a:a3:ba:19:0b:b9:55:0b:16:
84:bb:0e:35:cb:42:d8:15:3f:6c:31:e3:ba:29:dd:
33:69:b7:8f:95:f6:8d:6c:63:0e:17:cf:bd:0a:f0:
89:34:94:76:0e:a3:18:7b:51:1c:bb:6e:55:88:fa:
eb:81:03:43:28:6c:77:2d:8d:e1:0b:d4:b3:1a:64:
cd:c0:41:9e:9e:31:77:ce:b5:1e:36:c1:f8:80:71:
20:ef:bf:3d:38:7e:6d:bb:29:a5:41:e7:9d:e2:9e:
21:c2:bc:c5:d2:58:f7:2c:ef:09:6e:53:b6:e0:7a:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:41:9C:C6:39:E4:77:1D:4F:71:38:94:12:51:E6:68:84:AC:AD:A5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/T0Gcxjnkdx1PcTiUElHmaISsraU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:3a:11:c4:e5:36:88:fb:6b:d6:a7:57:3c:93:fb:e7:20:a5:
c8:8a:98:64:e8:aa:9d:e8:ce:4b:07:37:9b:8e:25:cc:1c:2b:
32:8e:9b:b4:4a:fa:96:40:da:92:b2:4b:ac:df:91:75:6f:05:
45:d6:2c:9f:9a:9b:85:cd:c5:9c:82:99:a6:ed:fb:43:c6:03:
8f:c7:1e:8b:78:52:d0:64:c6:d7:dd:66:2e:02:31:c9:1e:90:
76:60:21:10:0d:bf:2d:a7:60:db:51:be:c4:ec:69:9b:20:13:
55:25:1f:94:9d:3f:08:45:cb:f8:88:0f:e7:6f:b5:85:d9:48:
f8:d3:a3:79:cf:74:c3:72:a9:d9:e1:de:fb:9f:9d:3c:7d:0b:
02:90:3c:c9:05:1b:19:67:26:30:ac:70:8d:c3:c3:bd:4d:28:
0b:4d:8f:a1:a7:2a:cf:6e:e5:84:a0:0b:8d:eb:07:e9:3c:21:
a1:3f:87:60:95:38:ca:25:87:50:45:61:4b:a0:93:1d:9e:af:
be:a3:fd:9a:dd:f8:4a:5c:39:0d:85:f1:98:76:d6:8d:8d:81:
25:16:d3:aa:a3:77:c2:3e:8f:4c:f6:ac:2f:1c:46:48:93:e8:
07:e0:a7:c6:5a:17:73:be:4c:3a:fb:37:9a:df:84:ae:2e:7b:
4b:07:ee:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:54:41 2025 by rpki-client