Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YZ07MczNslLppykaMh-y-4GCTU8.roa
File: YZ07MczNslLppykaMh-y-4GCTU8.roa (raw, json)
Hash identifier: jK7MgNPpzfhWtsqnf50DxjtZ7tikipyxYuILb7/XrxY=
Subject key identifier: 61:9D:3B:31:CC:CD:B2:52:E9:A7:29:1A:32:1F:B2:FB:81:82:4D:4F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB5AEC7B707B3C8D4C4431BE1D2F3A381
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YZ07MczNslLppykaMh-y-4GCTU8.roa
Signing time: Sat 06 Apr 2024 23:11:54 +0000
ROA not before: Sat 06 Apr 2024 23:11:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b5:ae:c7:b7:07:b3:c8:d4:c4:43:1b:e1:d2:f3:a3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 6 23:11:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=619d3b31cccdb252e9a7291a321fb2fb81824d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:bc:7e:cc:d8:f5:ea:25:36:3f:27:2e:61:
f0:b2:f8:9f:67:66:28:7d:b6:db:d6:01:b4:19:19:
0e:88:5b:72:68:cb:1a:62:b7:88:0b:e9:cb:6b:38:
6b:34:df:c8:ed:17:1d:e7:0d:16:82:17:75:da:11:
2d:ab:20:cb:6b:24:4f:4a:7d:d0:93:b9:89:81:24:
9c:e9:0e:5a:8c:bf:ad:27:76:b8:78:92:f1:75:8d:
0b:e0:6b:fc:59:4d:07:7c:6a:86:a0:e0:94:ec:13:
01:22:8e:08:a3:89:05:1c:16:d6:6a:f4:e4:81:b8:
68:8e:c7:49:70:b6:e8:9d:bd:ff:cd:1f:43:2f:64:
da:e6:b0:be:b0:d3:45:49:89:de:e8:cc:78:cf:32:
1e:5a:25:df:3e:e7:b8:19:b1:4a:66:51:89:c6:7d:
6c:0c:47:e5:42:e9:74:f4:75:06:d3:02:f4:00:75:
10:26:0a:7d:1c:7c:c5:20:80:88:b8:04:08:ad:50:
3c:f6:9e:2f:43:be:7e:a7:20:63:79:d4:bd:9f:d6:
23:f3:2e:8a:9e:9b:df:0d:d2:43:b6:97:1d:ac:09:
75:c4:f4:23:41:df:26:79:e1:58:2e:98:51:55:1f:
5a:31:f0:a5:e9:3a:25:f3:a0:1c:88:05:d9:74:fe:
fc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9D:3B:31:CC:CD:B2:52:E9:A7:29:1A:32:1F:B2:FB:81:82:4D:4F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YZ07MczNslLppykaMh-y-4GCTU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:66:d4:ba:b1:73:cc:ab:b2:5b:13:6c:b1:7f:d1:75:5b:c2:
5c:b3:53:94:a4:e5:73:bc:89:4f:68:be:3b:c8:19:68:75:15:
e2:6e:79:cb:fb:e6:82:ec:80:13:c5:0f:1a:e6:11:15:0e:59:
7a:47:91:0b:f0:31:e6:e9:d0:81:81:51:ef:dd:61:b5:f7:1a:
85:63:d0:84:c1:58:72:63:d3:c1:36:89:6c:26:42:fb:ec:0c:
19:10:9f:bd:5b:98:ab:20:34:dd:2d:63:72:4a:ac:75:59:1c:
39:ff:d9:3a:78:61:8c:b8:4a:d5:88:f2:85:bc:e2:37:76:26:
7c:bf:c0:f3:a0:39:6a:ed:00:11:77:1e:56:5e:6a:a7:eb:05:
2a:52:ce:3b:a2:e9:03:73:7d:18:67:fc:4f:c0:2b:db:59:4f:
bd:5f:62:79:f0:c9:91:e8:2c:b0:97:c0:04:57:08:77:94:5c:
32:68:b8:fe:9d:f9:e0:24:c2:44:c5:26:87:29:a1:93:a3:37:
bf:5d:c5:11:a9:ec:5d:6f:05:ea:79:04:67:8c:f1:c3:55:b3:
ec:3b:5d:4c:d6:08:d5:06:5b:99:b7:29:9b:fb:fa:cd:65:b8:
3b:d1:26:d3:75:6b:91:3e:bf:a3:69:2c:2f:65:92:4d:59:3f:
72:7b:7d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:47 2025 by rpki-client