Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YW921drfpuDu-5FVZjmgK1omxpM.roa
File: YW921drfpuDu-5FVZjmgK1omxpM.roa (raw, json)
Hash identifier: XSSmLChn5VsgckM60my1a5iiwVJcgLv2ntkrJg6kBu0=
Subject key identifier: 61:6F:76:D5:DA:DF:A6:E0:EE:FB:91:55:66:39:A0:2B:5A:26:C6:93
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D5ECBA11C8AE03C44587335B63925EF95
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YW921drfpuDu-5FVZjmgK1omxpM.roa
Signing time: Wed 31 Jan 2024 09:13:39 +0000
ROA not before: Wed 31 Jan 2024 09:13:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:cb:a1:1c:8a:e0:3c:44:58:73:35:b6:39:25:ef:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 31 09:13:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=616f76d5dadfa6e0eefb91556639a02b5a26c693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:76:89:7a:c1:58:2e:b9:f9:f0:d2:0d:58:32:
87:bf:ca:fc:e5:db:6b:fa:a7:7f:48:6e:17:85:ca:
7f:81:27:4e:b1:ee:a6:3f:b6:2f:c4:e6:f6:b6:b4:
11:2d:37:99:e9:b6:92:86:3b:d6:6f:bc:85:ed:bb:
05:75:29:2b:17:ab:3b:c5:c8:df:6a:3a:ae:47:b9:
0c:46:01:cc:5c:8e:c9:51:5a:b0:bc:0e:90:a3:77:
26:2b:d4:f0:b2:0d:d6:5f:d3:19:69:82:6b:35:49:
f2:ae:4d:68:dd:4e:2f:8f:b2:0e:e3:50:f8:ff:53:
e2:aa:09:1a:cd:49:80:9e:dc:d1:b6:9a:e3:aa:46:
b9:ac:d5:8a:09:80:74:29:f0:72:7a:b0:d4:f9:d4:
0d:4f:12:b7:03:49:d4:ff:cb:91:18:bf:16:59:e5:
b7:20:8b:df:cd:8c:06:07:94:e4:00:b3:fa:8c:77:
af:99:54:8b:c3:2a:67:b6:7c:71:d2:ff:db:5b:ae:
20:f1:17:b3:82:ec:97:1c:54:bf:51:7a:9d:58:66:
0f:04:82:ab:3d:4f:dd:28:03:49:60:e9:12:0a:3f:
72:2b:73:7c:66:e9:20:d7:dd:33:a5:9f:0a:3f:be:
df:89:d9:4d:fe:86:ca:dc:8c:a7:73:82:02:ee:bd:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6F:76:D5:DA:DF:A6:E0:EE:FB:91:55:66:39:A0:2B:5A:26:C6:93
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YW921drfpuDu-5FVZjmgK1omxpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:31:c3:16:6f:11:de:b4:0a:04:ea:ae:ee:42:0b:59:87:e1:
67:55:9b:91:d8:34:8b:96:8a:70:58:1d:4b:ff:95:bc:cb:6d:
e1:df:b7:37:92:f4:b1:6b:0e:68:e0:57:db:3d:25:8f:0d:fc:
35:59:0a:85:12:e0:93:6f:a9:d3:dc:37:af:88:4b:f6:48:f4:
83:c4:5a:17:0b:f4:5a:3f:b1:76:45:1e:06:97:9b:88:4e:49:
f5:48:90:da:55:af:6b:29:f3:eb:f3:13:63:03:3f:c8:8d:61:
20:c7:b8:69:fd:e5:b5:ad:c1:16:83:38:38:4a:74:31:89:cc:
bf:67:df:58:37:57:9e:54:21:b0:f8:02:f5:29:d4:ad:a7:81:
3e:47:14:37:89:7d:b7:50:08:14:5c:fb:15:e6:f7:d5:b0:aa:
49:93:0a:c7:25:cd:9e:97:e1:30:ac:64:a4:64:9a:72:70:fb:
ba:27:fe:0d:fa:89:2a:87:ca:2d:74:7e:2c:fc:51:1a:07:d9:
37:90:cc:12:4b:e5:93:c8:06:b3:d6:56:09:a7:ef:c1:50:e9:
d7:14:50:ad:d0:4a:c7:13:39:9a:e9:0d:5d:1f:e3:81:fb:87:
da:21:da:0c:7f:c0:8a:a2:41:69:f5:7d:76:14:a2:e1:c9:70:
05:ed:26:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:22 2025 by rpki-client