Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UzT_j7cScC6-FJLnNsrdPC22CCY.roa
File: UzT_j7cScC6-FJLnNsrdPC22CCY.roa (raw, json)
Hash identifier: Isau2jVir89PfBr/BzPdt1maD3zIIfR0qTC0hzC0Deo=
Subject key identifier: 53:34:FF:8F:B7:12:70:2E:BE:14:92:E7:36:CA:DD:3C:2D:B6:08:26
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EC47CBB8231FBBA6B1926D54F85B160DB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UzT_j7cScC6-FJLnNsrdPC22CCY.roa
Signing time: Tue 09 Apr 2024 20:11:32 +0000
ROA not before: Tue 09 Apr 2024 20:11:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c4:7c:bb:82:31:fb:ba:6b:19:26:d5:4f:85:b1:60:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 9 20:11:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5334ff8fb712702ebe1492e736cadd3c2db60826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ab:09:9d:df:4c:7a:17:81:b1:ec:08:2f:b4:
e4:e6:f0:41:47:36:71:dc:cb:1a:48:a3:55:e6:6c:
1b:19:d7:86:0b:e9:b0:37:86:c9:5e:22:e0:d0:22:
1e:38:54:b7:57:df:e2:a3:c8:35:d6:27:7f:3e:32:
d0:c9:0d:05:01:1b:a2:ff:22:a3:3b:a4:92:f4:92:
92:55:3e:01:70:13:c7:f6:1e:0c:0f:9b:c6:d7:a0:
75:4b:83:d6:c7:70:49:5d:4a:4e:3d:c3:4a:4d:fc:
44:08:be:fc:02:ea:e4:48:6c:54:c2:60:aa:56:dc:
7a:7e:9a:97:3b:f5:22:6d:95:05:00:e6:34:dc:a7:
a9:c0:b9:fb:c1:91:cb:ab:81:22:80:67:7c:cf:a3:
eb:c5:69:ad:e0:ad:67:33:0c:6c:80:f5:2b:24:55:
26:00:b4:8a:b0:ac:93:ab:21:3e:0d:ff:af:25:99:
db:47:80:70:1e:5f:a6:ac:79:41:35:7d:87:2b:2a:
d4:7f:9c:e9:ea:53:bd:9a:fd:e7:f8:c5:d8:b1:82:
8d:0d:56:19:28:1c:ea:21:3f:83:7a:46:76:cc:41:
e6:62:69:b6:f8:fd:f3:91:da:73:da:46:04:03:a5:
0b:d3:3b:28:ee:28:c2:24:cc:b0:bd:fb:16:57:33:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:34:FF:8F:B7:12:70:2E:BE:14:92:E7:36:CA:DD:3C:2D:B6:08:26
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UzT_j7cScC6-FJLnNsrdPC22CCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:55:d7:30:6f:dd:a9:de:d2:3c:a9:30:7a:08:7d:42:de:c1:
d5:be:9c:46:34:c9:ac:0e:16:2c:4a:83:ec:f3:2b:09:27:23:
d0:bc:cd:f3:c3:ea:30:bd:79:90:62:a4:6c:81:8a:88:28:94:
b8:34:4e:d0:47:a1:cf:31:f9:c6:e0:96:cd:59:e2:65:fd:20:
16:80:89:41:f2:43:06:63:b6:10:79:97:78:80:f8:1d:34:de:
03:6a:68:44:ef:97:29:4c:dc:f7:39:ef:17:f0:30:5a:f2:f4:
27:0b:64:ee:68:05:be:75:00:bf:43:a3:da:27:d6:9a:63:4e:
63:18:d3:b6:02:33:12:0c:46:f1:92:02:c6:31:01:e3:c1:a4:
fa:f0:61:e8:b8:0f:c2:62:8e:dc:b9:18:29:57:80:72:83:3b:
71:86:72:9b:7c:94:46:54:6e:49:70:cb:c4:a2:3c:e3:f2:d9:
54:a2:d0:cc:4b:2a:56:3d:1a:c3:14:93:26:7e:de:20:a2:90:
52:8f:a7:ba:e2:d1:e8:86:7d:69:9d:58:9e:b0:c3:f4:3a:3f:
f5:97:12:55:52:b8:1f:a7:b3:59:62:bb:8d:83:76:d9:d0:4c:
42:b1:da:23:70:2c:40:49:4c:1e:ce:40:82:55:c1:33:84:f5:
95:a0:58:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:09 2025 by rpki-client