Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YyAko4KwTEOp-vPs6ai5-_FI11Y.roa
File: YyAko4KwTEOp-vPs6ai5-_FI11Y.roa (raw, json)
Hash identifier: 0T1oA+SG3bLmKmLZYqyZQh2swB/zdsFYSb/cclug/cQ=
Subject key identifier: 63:20:24:A3:82:B0:4C:43:A9:FA:F3:EC:E9:A8:B9:FB:F1:48:D7:56
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB94E353D314FC4F272E8B9AA63DDCBC2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YyAko4KwTEOp-vPs6ai5-_FI11Y.roa
Signing time: Sun 07 Apr 2024 16:04:54 +0000
ROA not before: Sun 07 Apr 2024 16:04:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:b94d:9702/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b9:4e:35:3d:31:4f:c4:f2:72:e8:b9:aa:63:dd:cb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 7 16:04:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=632024a382b04c43a9faf3ece9a8b9fbf148d756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:af:1a:d0:2f:7f:0a:46:77:b8:a0:ba:5d:f3:
6e:a0:f7:d8:58:42:fb:02:ba:e8:16:8c:eb:60:9f:
91:ec:85:3c:f8:7a:e9:8f:db:4d:43:66:bd:4d:d4:
97:f0:c9:32:09:ba:a3:2d:db:43:8a:7c:13:32:13:
52:f2:4c:e1:06:7b:e8:fe:12:c0:d2:23:5d:9f:d6:
c6:74:2b:46:d2:c9:e1:03:3a:35:b2:41:f0:2e:b3:
cc:f8:7b:a8:1b:9e:d5:3e:d8:26:08:c4:a0:46:61:
38:fd:f9:fa:aa:c2:ca:59:33:00:ed:75:1a:93:e1:
f9:94:22:bd:cd:59:05:07:bd:b2:0e:b2:52:b9:3a:
00:c2:93:74:18:bf:d9:aa:b4:aa:95:2b:ac:b3:a0:
ff:bf:72:d4:b9:b2:10:f9:53:07:be:ac:b5:a6:e1:
73:96:f9:99:c1:e1:0f:7a:5b:69:da:b8:7e:83:0e:
47:92:08:38:d4:9a:2f:06:f7:74:69:e5:ed:da:3f:
f3:0f:37:c9:b3:77:de:40:cf:5a:5b:f5:32:5a:ed:
37:e5:5d:c1:e0:56:56:63:63:be:3b:8b:14:fa:a6:
e2:97:03:c3:68:7c:31:8a:8e:c8:b5:83:1d:bc:4f:
2f:94:44:c1:1d:62:8b:5c:52:41:b8:7f:14:85:34:
e7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:20:24:A3:82:B0:4C:43:A9:FA:F3:EC:E9:A8:B9:FB:F1:48:D7:56
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YyAko4KwTEOp-vPs6ai5-_FI11Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:dd:43:1e:42:57:12:f4:b7:68:5e:d7:75:b0:82:38:f2:a5:
8d:41:37:9d:14:95:20:f6:a1:5a:0e:36:2d:f2:82:30:4f:df:
bf:f8:12:90:ac:cb:47:ca:f8:ae:ec:a4:ac:f4:c4:1f:e4:0c:
b7:e4:d9:6e:c2:ff:8a:33:12:65:44:98:2b:8d:5c:4c:0b:13:
6d:64:32:2a:36:1a:49:14:20:a9:f7:f8:94:f1:aa:1b:88:95:
84:52:77:00:03:db:eb:e9:8b:38:80:69:40:71:3e:ae:84:43:
df:32:73:8a:33:f0:29:1d:37:fa:fe:ad:86:b9:b7:e4:c3:d1:
c9:b6:1a:4e:3f:12:c1:90:3d:0b:05:fa:a4:85:aa:05:88:c0:
6c:cb:d9:ba:66:75:2b:84:06:bf:8c:7c:e4:8c:67:18:bf:f4:
93:9f:a5:60:d4:8b:96:8b:91:b2:31:36:40:c6:0b:ef:a0:ac:
23:dd:be:d5:c0:80:20:86:db:a4:34:bf:8f:2b:93:16:0d:76:
b9:16:f8:f7:dd:c3:e8:01:26:35:0b:66:5d:e7:fc:39:97:6e:
c5:54:7a:25:1f:d3:ee:08:fa:07:1a:91:c0:72:ca:33:3f:76:
cb:da:eb:bb:9f:4e:be:b1:11:b8:97:f1:b3:5b:a0:12:ab:0b:
31:56:98:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:19 2025 by rpki-client