Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Tx-WW0PazW6wHIxXQ07IPJawGHA.roa
File: Tx-WW0PazW6wHIxXQ07IPJawGHA.roa (raw, json)
Hash identifier: MWvxQPPrSkG2VJHXC0mofuBhPDz3A8o/DYnXsKvbH9Y=
Subject key identifier: 4F:1F:96:5B:43:DA:CD:6E:B0:1C:8C:57:43:4E:C8:3C:96:B0:18:70
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C90969ADD1534B74FEC0EFB4407444221
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Tx-WW0PazW6wHIxXQ07IPJawGHA.roa
Signing time: Fri 22 Dec 2023 08:13:58 +0000
ROA not before: Fri 22 Dec 2023 08:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:90:96:9a:dd:15:34:b7:4f:ec:0e:fb:44:07:44:42:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 22 08:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f1f965b43dacd6eb01c8c57434ec83c96b01870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ea:b3:ec:b7:fe:36:8c:dc:11:99:e5:88:aa:
0b:32:0d:16:8b:cb:93:c0:22:55:6f:ae:20:25:94:
67:4d:78:9e:ee:9b:36:29:57:a8:d7:7d:ba:d1:92:
8c:db:81:99:5f:04:3e:e9:e7:98:7b:5d:e9:fd:79:
7c:d6:61:d9:f1:27:45:8a:7a:cb:e3:ab:41:96:05:
b3:2a:62:ed:d7:81:fb:a0:a4:b7:43:ab:34:61:41:
4c:c4:2e:1c:72:66:2c:61:25:7e:79:89:fb:9e:65:
88:7f:1e:dd:89:2e:27:c3:2d:f2:84:15:f1:26:cd:
0e:96:5f:5c:80:ee:e0:e8:21:32:f6:ae:a4:85:0c:
38:14:62:28:aa:f2:7a:83:23:bb:6d:a9:da:b3:f2:
c0:f9:4f:ed:39:ed:30:0a:bf:c1:49:ca:66:f8:ed:
17:b0:3f:7b:a1:c1:38:d4:86:53:d6:1d:bc:00:19:
9a:ec:90:ed:99:04:97:5c:72:1e:aa:a9:d6:49:27:
4d:9d:7e:bc:6d:ba:f4:e3:7a:00:e6:24:2e:56:68:
5c:1b:77:46:18:ae:3b:4a:4f:14:c7:72:11:a4:64:
55:f8:7a:33:b9:30:7d:05:42:64:89:56:0b:ab:ee:
39:64:ee:c6:b5:b2:d3:4c:11:4b:13:43:bd:1a:e0:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1F:96:5B:43:DA:CD:6E:B0:1C:8C:57:43:4E:C8:3C:96:B0:18:70
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Tx-WW0PazW6wHIxXQ07IPJawGHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:c0:0a:d4:93:34:a7:d3:a4:3a:a9:1c:6c:7a:0c:1c:3d:89:
17:2e:db:0b:88:be:20:15:21:6d:91:1c:e2:ea:21:bb:12:d9:
97:99:aa:a6:ac:f8:ab:75:25:d3:92:9f:b8:f6:5a:3b:b3:61:
1b:88:ce:c9:66:6c:80:6d:fc:b2:66:66:e5:36:57:7b:6e:ff:
82:38:86:c1:4b:42:99:8c:a0:97:05:43:2f:6f:a7:23:ae:f8:
ca:06:42:15:62:2a:70:53:e0:e6:d9:fc:d1:6f:aa:cf:d4:fa:
41:4a:a2:47:30:3c:99:94:0c:e7:90:f1:f4:0e:5b:dd:cb:ae:
98:d4:cb:25:3b:b3:ee:65:8f:7d:c2:23:16:6f:51:cc:ab:7c:
c4:14:1d:24:45:1b:6d:11:4d:54:43:a7:4d:77:07:be:5c:c1:
f3:7f:f6:9b:55:d1:13:5f:ba:37:b4:dc:f2:12:2e:19:05:1c:
63:d4:c7:8e:74:33:e3:f3:1d:6c:50:af:ef:4e:32:76:58:3e:
c5:27:ef:5a:e7:13:9e:ea:42:8a:5c:bc:de:05:f9:f4:c3:5e:
12:91:68:2d:3e:69:71:68:c9:9d:a5:0b:7a:3a:7f:57:d3:23:
c8:4e:7d:fb:d4:9d:49:6b:3c:19:04:a8:a2:fd:a3:34:59:71:
f1:cb:85:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:06 2025 by rpki-client