Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YSTlpFQ4JVNztb6-EA93iiSR8qg.roa
File: YSTlpFQ4JVNztb6-EA93iiSR8qg.roa (raw, json)
Hash identifier: +SzQz5teq1TIMRO8gvjVBLLvOkObQknFvOCkmIO7P2U=
Subject key identifier: 61:24:E5:A4:54:38:25:53:73:B5:BE:BE:10:0F:77:8A:24:91:F2:A8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CFBD7EAE1376B04F8D6F776E75944DCF1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YSTlpFQ4JVNztb6-EA93iiSR8qg.roa
Signing time: Fri 12 Jan 2024 04:04:40 +0000
ROA not before: Fri 12 Jan 2024 04:04:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:fbd7:bb3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fb:d7:ea:e1:37:6b:04:f8:d6:f7:76:e7:59:44:dc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 12 04:04:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6124e5a45438255373b5bebe100f778a2491f2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:92:ad:39:df:7c:bb:78:07:55:dd:b4:e9:3d:
cf:45:33:1d:e9:df:1a:98:f6:76:3e:c0:0b:f9:22:
06:e9:40:fd:b0:4e:62:42:fe:e9:a7:67:15:94:1f:
26:83:9f:09:11:95:f0:98:19:62:3a:cb:7f:7d:5b:
b1:89:93:db:16:b5:91:89:de:65:c8:8d:56:b2:83:
d5:37:dd:be:53:c4:b5:f8:db:bb:68:09:60:8d:9a:
7a:40:f5:a6:0a:ba:8d:fa:62:c4:5c:df:68:ac:68:
d8:21:e8:ff:da:20:25:f3:36:e9:7a:7e:25:b4:4b:
f9:c6:a7:0b:2c:fa:60:77:10:99:18:6c:29:24:ca:
23:24:d7:e8:63:4b:2a:9c:db:18:54:c3:bc:a6:54:
86:50:29:df:2d:70:ea:14:89:d7:4b:83:48:43:94:
89:f3:55:c6:2e:40:ce:e8:02:45:aa:9e:8b:db:fe:
4c:33:c8:74:c0:37:14:8b:12:91:7c:89:1a:7c:81:
8c:51:f2:61:90:f7:d1:93:e0:ca:2f:9d:5f:87:37:
e7:81:28:66:78:23:c6:63:14:57:11:6e:ed:86:42:
04:23:ea:07:96:9f:8b:02:95:30:ff:ae:1a:dc:9b:
fe:be:be:f3:19:81:5d:47:4d:b5:75:55:19:55:61:
b2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:24:E5:A4:54:38:25:53:73:B5:BE:BE:10:0F:77:8A:24:91:F2:A8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YSTlpFQ4JVNztb6-EA93iiSR8qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:88:77:13:75:88:55:1b:2b:67:68:af:17:43:3a:0a:85:36:
9c:c3:de:b6:9b:58:03:2f:e8:c6:d8:99:50:55:d9:4c:47:b7:
3a:99:ba:5b:93:2e:d5:69:d1:85:9b:2e:ce:15:88:be:6c:34:
4f:b6:e3:80:33:8a:40:fa:ab:dd:b2:91:56:1f:fd:83:d5:1a:
3a:d7:d5:45:50:01:06:98:84:68:5d:05:e4:a5:b7:fd:1d:0e:
e7:61:d1:e1:59:10:a0:64:b3:e0:07:26:bc:fc:53:55:10:76:
a1:af:76:c5:c5:9f:5f:da:c7:b4:e9:2f:df:e4:5e:7b:65:36:
e3:2c:99:b7:09:9f:f1:56:ef:cc:2a:c7:cc:81:23:4b:33:b4:
97:e1:2b:a4:fc:4d:01:87:ba:3c:38:54:e0:ae:39:af:b3:5d:
5a:03:7a:dd:e2:d3:e0:1e:9f:5c:72:b0:e9:bc:cd:7c:42:a6:
2c:7a:6f:d1:fc:70:71:d5:2e:81:17:74:b8:4f:8b:de:fa:e4:
9b:97:9e:e1:96:ad:d5:54:72:f1:ed:17:29:3b:5f:69:30:53:
27:fd:b7:92:af:5b:ce:47:45:58:f2:1a:2a:f1:2a:1b:32:cd:
29:61:de:5d:45:9b:4c:e0:c0:e0:e7:5d:ce:6f:59:d8:fc:0b:
d8:2e:88:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:05:01 2025 by rpki-client