Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YThd-AqHi5EgrystO2sWZ5ZT-_A.roa
File: YThd-AqHi5EgrystO2sWZ5ZT-_A.roa (raw, json)
Hash identifier: oaFCUtPP3CGeiU9/1/Qxjx18Oc1DCwRlqjzx/7AXzAg=
Subject key identifier: 61:38:5D:F8:0A:87:8B:91:20:AF:2B:2D:3B:6B:16:67:96:53:FB:F0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018ED7974D7428C2BC75C7C2B04CAE9C26AC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YThd-AqHi5EgrystO2sWZ5ZT-_A.roa
Signing time: Sat 13 Apr 2024 13:13:20 +0000
ROA not before: Sat 13 Apr 2024 13:13:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d7:97:4d:74:28:c2:bc:75:c7:c2:b0:4c:ae:9c:26:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 13 13:13:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61385df80a878b9120af2b2d3b6b16679653fbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:23:be:6b:87:3c:f3:42:48:29:e8:d9:83:
1e:34:cb:48:82:9c:3e:05:86:56:43:5e:ef:fe:3b:
f7:a0:5b:7c:e8:53:f4:c1:e6:8d:c8:be:45:6e:d9:
85:cc:33:78:79:d3:37:84:3f:f6:cd:77:d0:a7:b0:
0d:9e:85:52:ef:86:ff:f3:bc:1a:c6:0d:ec:fc:b6:
33:e2:ef:e1:d8:78:36:eb:00:69:0e:99:26:8b:70:
17:96:80:65:8a:56:cf:fa:8b:d6:0c:1c:b5:d6:35:
b4:84:6d:e3:2d:89:a3:d9:5f:4a:4d:9f:e8:25:b8:
40:aa:38:eb:08:b2:61:c4:24:93:92:06:6d:c4:55:
87:6a:8c:21:4a:4b:e9:80:60:5a:6e:06:86:92:b4:
a8:de:33:77:bf:a3:67:72:8d:4e:98:4b:7c:56:53:
a5:af:c1:dd:67:bb:35:11:f3:7f:34:28:88:54:0f:
be:fc:9e:f6:31:28:ac:66:48:d5:ed:12:e4:b9:c7:
2c:06:69:82:ac:4c:02:bf:e1:3b:33:2c:95:15:b9:
14:1b:69:eb:09:fe:f6:b5:01:1f:c6:26:db:e4:b3:
fd:c4:fb:4a:44:e9:47:3e:05:13:f6:19:04:d8:e4:
87:93:04:3a:bf:7e:73:9f:a8:52:63:1f:fc:ed:29:
d3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:38:5D:F8:0A:87:8B:91:20:AF:2B:2D:3B:6B:16:67:96:53:FB:F0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YThd-AqHi5EgrystO2sWZ5ZT-_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:95:a8:b5:8e:8e:c3:d7:78:67:7b:49:33:31:6f:51:84:48:
3f:69:98:33:8d:20:3a:1f:81:4a:9a:aa:68:cc:63:99:d8:a8:
0b:98:5e:ef:a5:83:05:f5:02:c0:17:9c:40:0b:48:04:83:d6:
0d:77:f6:89:c2:ea:02:7c:9f:ef:54:2b:c6:bc:e8:c9:61:64:
d2:00:4d:a2:12:13:a6:e7:90:ee:53:19:13:a6:74:1e:7a:e4:
c9:f5:9d:d2:d4:49:fa:b0:29:da:e2:39:44:46:7f:4d:07:ae:
44:0b:b0:cc:42:72:35:ea:10:16:0f:88:ea:05:c6:eb:14:74:
ef:d8:83:45:5a:6b:18:91:79:c3:29:75:2d:97:8c:32:c2:fa:
7c:f7:34:ce:5c:fc:57:85:05:35:bd:60:42:21:b9:9b:e3:71:
93:2e:6b:ab:f2:21:97:97:c1:ab:5e:23:d8:3d:70:8c:50:65:
a8:c9:3e:f3:65:bd:d2:7e:80:65:2b:85:e0:63:6e:fe:ee:6d:
ae:b2:fb:4e:51:e1:23:3f:2d:1b:bc:d7:20:4a:90:cb:13:9c:
58:54:a4:ff:4f:01:13:eb:01:25:7f:f3:77:ee:96:b8:81:3a:
53:77:34:52:d7:fe:cb:93:95:b8:ed:53:05:dc:24:d2:03:9e:
14:e9:36:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:22 2025 by rpki-client