Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TRBnfMNAaBLGPAxpwgniAzMKins.roa
File: TRBnfMNAaBLGPAxpwgniAzMKins.roa (raw, json)
Hash identifier: iFN5ZmDt6HIG8o/fDMYy9NJyeBAObSDt3pv9Zz8VTPY=
Subject key identifier: 4D:10:67:7C:C3:40:68:12:C6:3C:0C:69:C2:09:E2:03:33:0A:8A:7B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CC6709D072F202201A5E150500F14126C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TRBnfMNAaBLGPAxpwgniAzMKins.roa
Signing time: Mon 01 Jan 2024 19:11:58 +0000
ROA not before: Mon 01 Jan 2024 19:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:70:9d:07:2f:20:22:01:a5:e1:50:50:0f:14:12:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 1 19:11:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d10677cc3406812c63c0c69c209e203330a8a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fd:33:42:82:a1:4e:ae:11:55:cd:a1:5a:1b:
ae:f1:af:db:d2:9c:25:97:86:c4:0c:12:16:81:9e:
79:79:3c:e8:cc:cc:02:30:f8:87:d7:04:2f:b0:f9:
c7:a7:6a:4a:f2:79:95:11:ee:31:50:51:db:f0:2d:
e8:7c:a5:48:0f:48:d0:5f:76:4b:1c:c8:4d:0a:32:
81:0e:30:4b:ca:67:f0:04:ef:94:fa:d6:c1:dd:ad:
3f:0a:15:7e:ec:0d:66:de:83:f6:c5:f0:6d:d6:24:
28:7c:b6:7b:0f:c6:ae:e6:d8:b6:b0:7b:62:c0:c9:
cc:78:95:73:84:af:f0:94:46:58:20:b1:9f:1b:94:
5b:8b:a9:d6:50:63:60:e8:fd:7f:f7:cd:9f:c8:32:
6e:77:4f:e8:d3:c9:5d:b3:71:2f:7c:20:99:78:e2:
cd:3d:58:98:6a:94:cb:6a:0c:ab:f4:2b:e1:54:7f:
84:06:e3:8c:c2:17:85:67:6b:66:65:8e:3a:9f:00:
49:ef:72:10:ba:5b:39:37:a0:f6:bf:82:7e:8c:16:
15:3d:fa:02:c0:27:50:b0:d6:e2:47:7f:24:1f:05:
78:e8:b7:62:6c:cc:d7:5f:fe:d1:aa:e3:0d:eb:6a:
10:e8:fe:79:97:4c:3b:86:d2:a2:8d:ae:2e:43:0f:
cc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:10:67:7C:C3:40:68:12:C6:3C:0C:69:C2:09:E2:03:33:0A:8A:7B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TRBnfMNAaBLGPAxpwgniAzMKins.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:3b:06:fd:c5:14:a7:b7:bc:d5:29:1d:91:0e:e2:f7:0c:fd:
5d:b0:96:f6:cf:96:7c:b7:5f:90:00:52:d9:e4:1d:bf:a6:8a:
23:23:26:7c:6c:bb:cb:62:b9:45:a9:bc:0e:12:63:8e:e1:00:
34:18:1f:47:7e:4d:e8:c0:7e:77:b5:cc:1d:f8:1f:b3:09:3a:
55:b9:ab:5d:2f:0b:99:cf:07:c3:ea:38:93:f4:3c:29:ce:a5:
9b:05:08:27:52:01:2c:0b:03:5a:fa:0e:dd:6a:48:77:16:00:
da:13:1b:78:bc:31:c1:eb:19:c2:a0:65:f7:42:6c:b8:78:94:
63:21:f0:9e:fd:24:21:1b:2d:18:f8:f9:04:8f:b3:29:d4:ba:
c3:d0:fe:46:08:b9:1e:ed:14:49:db:36:69:d4:38:e6:d3:b7:
ff:f6:be:eb:50:11:e8:63:02:f1:c8:1b:7a:e5:87:47:7d:cd:
70:84:78:6b:bf:b6:a3:0c:cf:36:41:09:3d:b0:84:99:5d:6c:
00:dc:f3:bd:d8:1b:83:ca:2b:a9:33:5b:e7:1c:fc:c6:1a:60:
a9:08:d6:17:2f:a0:6b:39:d3:92:49:f2:aa:6b:a8:28:a8:2f:
f2:6f:58:d3:8f:43:17:62:0a:f8:f3:87:82:eb:9d:e0:97:76:
41:92:3c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:54 2025 by rpki-client