Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VHZyS0dAHUi_ZWkpe6VlHQrlFgY.roa
File: VHZyS0dAHUi_ZWkpe6VlHQrlFgY.roa (raw, json)
Hash identifier: XuJde4MyJGxDGTIpAdbi8JfVZwO8zSPEKjUGVwNf/2A=
Subject key identifier: 54:76:72:4B:47:40:1D:48:BF:65:69:29:7B:A5:65:1D:0A:E5:16:06
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9DE2890D74D6190B42680DB3C4BD6C87
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VHZyS0dAHUi_ZWkpe6VlHQrlFgY.roa
Signing time: Sun 24 Dec 2023 22:11:58 +0000
ROA not before: Sun 24 Dec 2023 22:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9d:e2:89:0d:74:d6:19:0b:42:68:0d:b3:c4:bd:6c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 24 22:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5476724b47401d48bf6569297ba5651d0ae51606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:98:a0:64:fc:47:04:a7:cd:76:75:42:1a:
54:99:09:33:56:58:23:10:83:2a:0e:c7:a5:45:2e:
eb:06:5f:22:d1:20:d8:68:dc:00:a6:8f:96:bf:8a:
b9:28:34:29:8d:f7:ac:a7:d7:2e:34:42:ff:f6:9f:
e9:4d:a4:27:bc:a8:ee:b6:a8:cf:cd:61:60:81:04:
b2:12:1a:bf:ef:2f:07:92:5f:05:a8:e0:3a:b5:9e:
64:c4:48:36:35:57:7a:04:7f:ad:b4:31:fe:b4:24:
48:df:5e:ce:42:3e:3b:f4:ef:6b:10:ee:3d:96:39:
72:b2:07:3f:de:b2:7a:9b:61:c7:e8:a3:8b:06:f1:
5f:d2:7a:48:f0:38:8a:11:43:65:42:10:bf:a7:f0:
35:9a:0f:60:0e:c7:71:4e:23:50:e1:e5:40:ce:f3:
7d:5a:48:27:3d:46:d3:c6:c7:56:a2:1a:3e:f4:17:
f5:e1:97:36:1e:43:77:12:e8:40:0e:89:2c:84:73:
cd:f5:12:3f:5e:cc:8b:51:fe:b2:30:c3:dc:60:ec:
22:be:28:0b:9e:9c:aa:e0:d6:a2:41:4e:d4:17:11:
e0:90:96:c6:eb:fa:78:bb:4b:56:1d:7b:a5:9a:9f:
77:2b:c2:5a:56:c9:b4:d5:12:ac:53:4c:32:4d:b3:
a4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:76:72:4B:47:40:1D:48:BF:65:69:29:7B:A5:65:1D:0A:E5:16:06
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VHZyS0dAHUi_ZWkpe6VlHQrlFgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:e5:bf:bb:09:55:cf:11:ac:c6:64:cc:95:7a:ac:0e:8f:1f:
11:92:c0:ec:1d:50:1a:98:04:77:b2:3a:28:74:fc:9a:87:4c:
00:ff:5e:0f:a1:7e:1a:bb:6c:18:d4:fb:38:d6:06:b3:0e:61:
1a:d4:51:97:8e:c5:3a:a1:95:dc:d7:40:b5:ee:88:3a:c9:2a:
8c:df:b9:d2:c3:b5:e7:b6:f7:6d:85:91:4b:9b:ac:59:d4:3b:
6b:99:2f:b1:1f:4d:a4:67:30:7c:38:1b:fe:2f:d4:b5:4c:6c:
f5:7b:43:b0:2c:9c:51:3a:6b:33:72:36:8a:f4:3b:f8:a5:8b:
46:b3:24:96:44:18:44:34:d7:15:cf:95:be:b9:84:fe:19:cd:
3c:66:fd:8d:ac:d7:29:2f:4f:1e:f8:cb:86:e8:9b:e8:3e:cd:
70:f8:a3:8d:84:97:91:4e:34:70:4b:a6:39:1e:2b:cd:af:2f:
96:3d:b5:eb:10:26:e5:eb:0e:06:72:47:d4:86:8f:aa:9e:72:
cc:e9:ba:1e:fd:fb:60:5b:6d:94:ad:b7:95:a6:68:79:e2:0e:
cc:37:49:aa:78:41:7c:80:3c:2b:76:07:35:58:19:5e:84:4b:
6d:83:69:b0:3a:c9:84:8f:6d:10:50:6d:b5:1c:15:75:22:87:
fe:e0:f6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:29 2025 by rpki-client