Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TTRQsrcp2wgH-Qir5TtoZiXJe4Q.roa
File: TTRQsrcp2wgH-Qir5TtoZiXJe4Q.roa (raw, json)
Hash identifier: CoSNAoDm3b3YRXhL7MUFbtDuPjFGht2npIaHSQpF7aY=
Subject key identifier: 4D:34:50:B2:B7:29:DB:08:07:F9:08:AB:E5:3B:68:66:25:C9:7B:84
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E1AFBEAE818006E4CC2F093F277C4134D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TTRQsrcp2wgH-Qir5TtoZiXJe4Q.roa
Signing time: Thu 07 Mar 2024 22:15:01 +0000
ROA not before: Thu 07 Mar 2024 22:15:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1a:fb:ea:e8:18:00:6e:4c:c2:f0:93:f2:77:c4:13:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 7 22:15:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d3450b2b729db0807f908abe53b686625c97b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5b:c2:b1:07:43:68:6f:15:8b:17:cc:c1:53:
8a:43:a1:9d:2d:0f:bb:b6:28:a2:52:f8:90:da:10:
ad:e2:05:eb:1a:93:14:b6:84:9b:ff:d0:a9:41:b1:
13:b2:e7:dd:7b:dc:4e:0f:97:56:b9:9f:cf:c9:da:
48:3d:f4:b0:6b:2a:f6:b7:ad:13:32:96:cf:53:8b:
da:5d:ab:69:2c:d6:f5:f9:df:75:f4:36:9d:51:25:
c6:59:ac:90:81:8c:ff:a3:47:9c:29:b3:28:76:5a:
db:42:34:12:89:f7:af:16:aa:2d:22:4f:66:2c:60:
c3:6e:8f:51:ce:67:0b:cd:c9:9b:68:6e:36:2b:4e:
c0:27:f7:54:88:d7:54:43:a8:b6:9e:87:22:a1:96:
aa:0b:44:0b:de:e8:45:e9:8b:63:ec:5c:f8:f4:11:
b5:31:1f:bf:f5:78:cc:6a:fb:8a:ef:6e:28:b8:1a:
64:70:93:ce:84:42:2a:9d:85:f7:24:e6:31:7d:0d:
a6:06:a8:f9:13:32:4c:54:e2:dd:e9:58:6b:d5:71:
b0:7d:e2:f2:f7:a4:a2:2a:61:98:fa:3d:5d:f3:e8:
f5:38:59:93:f0:90:95:63:3b:9e:0b:c1:2b:28:c6:
62:d6:5c:46:e2:89:8e:c6:ea:d6:a4:b1:b7:67:26:
00:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:34:50:B2:B7:29:DB:08:07:F9:08:AB:E5:3B:68:66:25:C9:7B:84
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TTRQsrcp2wgH-Qir5TtoZiXJe4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:74:49:70:29:94:18:65:50:38:5b:d5:41:5a:b1:6e:fd:a3:
6b:48:db:82:b4:85:5c:58:f7:6e:76:ac:bd:da:38:a5:23:33:
21:41:bb:bc:fe:bb:16:6f:22:27:b5:ff:de:24:bc:50:dd:f5:
be:ff:8b:99:b5:fa:11:ef:8e:a0:d1:61:c7:7c:22:ef:71:f2:
6f:d0:a4:e9:3d:f1:df:01:0e:2d:be:bd:ad:73:36:68:9d:f8:
25:f7:46:67:a8:65:4a:2e:34:35:cd:27:ab:96:30:77:cf:9d:
93:0e:d3:b9:1b:5a:da:ea:cb:f8:6b:dc:73:99:a6:34:d5:2e:
75:04:79:c4:bb:bf:5c:76:fe:85:32:d1:07:fc:67:5a:4d:bd:
21:af:3d:58:6f:e1:02:ce:78:d3:71:63:db:89:6c:b4:27:53:
13:b1:61:75:53:09:a2:c8:d3:2e:19:f8:db:53:98:96:6d:60:
72:1f:cc:d7:c3:6c:fc:6c:4b:30:dd:ca:e4:75:f0:a9:3a:99:
3e:11:75:a5:68:67:ff:53:54:59:ba:7f:66:71:e5:9e:66:9b:
98:3f:25:13:5f:82:98:9a:38:72:95:57:8a:8c:db:b8:05:40:
07:96:ab:35:71:c8:62:c8:4f:8c:db:e4:b0:d9:e6:b6:f2:51:
1c:62:88:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:41 2025 by rpki-client