Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_MH07hC5iDVphhGyWEI6yKwqNq4.roa
File: _MH07hC5iDVphhGyWEI6yKwqNq4.roa (raw, json)
Hash identifier: Ey/1CgyxSYkNjVv9gx5x8sj9uQTP1g8qTKniLhorxq0=
Subject key identifier: FC:C1:F4:EE:10:B9:88:35:69:86:11:B2:58:42:3A:C8:AC:2A:36:AE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C924C39C6F800677B6F588CA39188076B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_MH07hC5iDVphhGyWEI6yKwqNq4.roa
Signing time: Fri 22 Dec 2023 16:11:58 +0000
ROA not before: Fri 22 Dec 2023 16:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:92:4c:39:c6:f8:00:67:7b:6f:58:8c:a3:91:88:07:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 22 16:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcc1f4ee10b98835698611b258423ac8ac2a36ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:c8:bd:ef:c5:c5:74:ee:d9:07:db:6a:c6:
1c:24:6f:25:28:11:32:3b:99:eb:66:59:19:ad:0c:
72:6f:1a:b1:1b:65:88:a0:de:d3:be:81:25:d7:7a:
dc:62:f0:02:97:73:86:a8:a7:92:54:33:cd:8a:a4:
6c:30:d2:2d:6e:b3:81:d1:35:7c:8c:42:f9:99:b0:
bb:61:bf:32:62:f2:1e:07:f8:d8:64:fc:b0:ac:ed:
e3:ab:ea:60:0f:b0:75:1d:87:30:8d:c7:2a:ac:2c:
c9:16:ed:2c:eb:45:87:cd:5d:f1:e9:34:8c:20:56:
27:8c:8c:20:5c:29:76:ff:0e:d1:fb:65:72:d2:c9:
c0:12:ba:a9:74:7a:f8:8c:55:09:f9:9b:68:76:e5:
58:87:1b:c5:07:9d:36:75:01:af:2a:dd:01:6a:f7:
20:7f:a3:14:e4:27:3d:00:0b:48:e1:25:94:5f:73:
8d:f6:ce:0b:8e:4e:f1:57:bc:de:fe:b9:78:12:ec:
1a:2b:8f:d6:d5:25:9d:e0:2b:57:83:29:4d:1b:aa:
83:a1:17:4c:54:83:ea:1f:ea:25:d9:5a:6b:47:74:
b8:ce:e3:3b:89:3b:3c:6f:d4:7c:ba:aa:4d:d1:16:
db:28:cd:a4:2e:0a:0b:04:57:88:b7:3d:c9:90:c0:
cd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C1:F4:EE:10:B9:88:35:69:86:11:B2:58:42:3A:C8:AC:2A:36:AE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_MH07hC5iDVphhGyWEI6yKwqNq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:1d:35:5d:5c:fa:4c:fa:a5:2d:1e:59:a7:f6:35:83:6d:3f:
5f:62:e5:7f:44:e8:2e:2a:d5:af:4a:79:d3:37:1d:94:d2:1a:
03:64:c8:ab:ad:ab:d0:c5:0e:8d:a2:38:b5:7a:7a:fb:a5:c1:
05:62:ea:90:55:43:0a:10:15:d7:bc:c5:0f:11:74:cf:f7:69:
8f:bd:cc:c7:00:c8:2d:02:e6:e8:a9:f6:60:40:ba:25:0c:ab:
e9:10:f1:a3:48:5c:37:d7:94:1c:53:ee:d7:83:7e:f2:61:0c:
7d:85:21:88:ae:40:a0:16:e5:d1:e9:c2:a5:9f:e7:af:a0:65:
9b:fc:fc:27:b3:76:f3:af:6d:19:dc:da:9d:63:84:e6:1a:aa:
8c:52:81:dd:62:dd:77:98:80:1b:01:88:9e:7f:71:e5:22:79:
a9:de:20:a3:69:84:61:f5:a5:a3:bb:37:d9:88:88:45:8a:99:
f9:31:03:14:9f:3b:ba:69:4d:4d:a1:57:ad:19:6b:69:77:b2:
10:48:10:52:74:6b:63:71:62:88:3c:c8:fd:f7:23:1c:be:0e:
2d:2f:61:45:e9:9a:0c:7a:b0:aa:db:ac:da:e1:62:43:3e:7c:
6f:5d:64:f4:74:19:dc:e6:44:a4:7b:bd:7f:f2:fe:fd:3e:c9:
60:58:cd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:11:14 2025 by rpki-client