Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YOoVxTF1Yq86dYFgK3eUB4J1a7Q.roa
File: YOoVxTF1Yq86dYFgK3eUB4J1a7Q.roa (raw, json)
Hash identifier: L4yso5UF/UBZTgFmtVtk5y8s7D6aozv+CqGwEYfSJfg=
Subject key identifier: 60:EA:15:C5:31:75:62:AF:3A:75:81:60:2B:77:94:07:82:75:6B:B4
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DBDA7493C1623167E354E4276302A44F7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YOoVxTF1Yq86dYFgK3eUB4J1a7Q.roa
Signing time: Sun 18 Feb 2024 19:17:53 +0000
ROA not before: Sun 18 Feb 2024 19:17:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bd:a7:49:3c:16:23:16:7e:35:4e:42:76:30:2a:44:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 18 19:17:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60ea15c5317562af3a7581602b77940782756bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:66:52:a4:89:47:d6:99:2c:75:4b:9f:7b:
ae:9c:34:99:04:55:3e:f1:21:b0:0e:34:72:25:26:
43:76:53:69:96:fc:b1:5e:db:d9:5b:03:63:eb:1f:
cc:95:f1:90:63:92:44:55:96:05:f4:4a:25:93:4d:
ce:37:3e:99:e0:98:fb:33:bc:a6:c9:b7:d2:81:fb:
4e:d6:5a:a8:8c:68:df:98:9f:8b:ab:08:2d:d8:11:
6e:e0:7d:04:ac:cb:c2:9d:e9:22:e6:33:d5:0a:22:
cd:c2:85:39:5e:99:fb:ac:cb:19:28:f6:d4:23:ff:
e3:2c:c4:81:ef:f6:ee:ec:f8:f9:71:90:d5:66:b1:
52:50:48:cc:6f:f4:04:54:81:50:3c:e7:ba:c5:40:
05:76:c2:08:b1:be:67:82:b3:da:23:b9:7a:08:8a:
23:b9:e6:cb:9a:3e:0f:3c:26:62:26:76:88:da:32:
a4:b8:9b:5d:4a:3d:5c:2c:26:7f:46:11:35:06:c5:
21:db:ac:26:fd:1f:df:93:a4:67:a3:e1:d2:3a:7f:
e4:06:d4:11:b9:f8:c5:67:db:b0:88:dd:54:73:a4:
b3:aa:93:5b:d1:ae:71:84:10:cd:66:f3:05:f4:ce:
79:9a:d4:10:a0:f4:c8:75:b2:2b:6d:2e:f3:9c:18:
13:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EA:15:C5:31:75:62:AF:3A:75:81:60:2B:77:94:07:82:75:6B:B4
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YOoVxTF1Yq86dYFgK3eUB4J1a7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:55:07:5d:ce:2d:80:fa:d8:b9:74:24:d2:62:63:0d:4b:e1:
93:fa:5c:d2:33:bc:4d:64:8e:9a:4d:6c:a8:0e:12:39:31:cc:
ec:e2:23:41:7e:68:71:7c:34:97:bb:30:e5:50:bd:9a:28:83:
c6:1f:d6:73:bf:74:05:33:c9:70:18:9d:05:3f:01:bb:0e:4f:
98:10:0d:ad:b2:80:8c:96:18:35:8d:9b:12:65:15:29:aa:23:
8d:52:25:b3:46:14:a1:b3:49:5e:06:a5:33:19:87:90:91:74:
a5:51:0d:08:16:4a:b2:8d:2f:29:d9:e7:b0:7f:27:d6:53:b4:
87:d3:73:45:8c:7f:82:a2:63:d6:dc:87:6e:ac:ab:57:b7:82:
f1:b5:36:65:45:0e:91:50:12:52:0f:54:13:ac:33:eb:e2:a8:
ed:97:18:f6:d0:da:6d:e9:e5:df:c5:06:04:e5:c8:1c:e6:9d:
88:55:0b:f5:e7:62:66:a0:48:55:a4:82:7b:f1:8d:1f:ec:e3:
79:ee:42:bf:cb:56:f0:59:80:d2:6c:96:e3:11:ad:d1:db:98:
40:a8:78:6e:f5:fa:39:bf:21:86:94:07:21:79:a2:8a:40:3a:
9f:36:57:a4:5a:26:9a:79:b8:82:af:9d:dc:4b:05:3d:7b:1c:
df:16:00:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:21 2025 by rpki-client