Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_rNov1TTrtYmifbNsJKyYNwd34A.roa
File: _rNov1TTrtYmifbNsJKyYNwd34A.roa (raw, json)
Hash identifier: pYoKI7ULnnx0PXLxgwAYa4RAXIrQIbkn4RlznclQ+qo=
Subject key identifier: FE:B3:68:BF:54:D3:AE:D6:26:89:F6:CD:B0:92:B2:60:DC:1D:DF:80
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D224B38CEEAE0BD3021B9F47854EC6001
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_rNov1TTrtYmifbNsJKyYNwd34A.roa
Signing time: Fri 19 Jan 2024 15:16:11 +0000
ROA not before: Fri 19 Jan 2024 15:16:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:22:4b:38:ce:ea:e0:bd:30:21:b9:f4:78:54:ec:60:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 19 15:16:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=feb368bf54d3aed62689f6cdb092b260dc1ddf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4d:f3:78:e4:55:d0:e9:8c:10:0f:cf:77:0f:
4a:4d:6f:07:69:cf:32:98:8a:9d:5c:36:27:62:7f:
93:3b:9c:9c:8b:2d:54:37:37:b2:40:ae:12:d2:5a:
f1:45:28:0c:bb:d7:c2:ef:9e:c1:51:61:2a:fb:e9:
c2:54:bb:38:36:e5:ba:97:d1:0d:22:ef:19:26:2d:
1c:f9:91:dd:b1:89:ea:20:16:76:78:99:fa:7b:c2:
c6:69:d3:d5:95:e7:a3:41:0c:a9:51:12:68:65:da:
b7:61:ad:d5:42:42:96:4f:74:aa:78:ef:42:c0:9d:
1c:1f:30:47:08:77:b1:4d:02:e0:ea:78:35:6d:bf:
54:ef:c6:b3:8f:e4:e0:5d:f3:34:5a:db:26:e0:39:
ca:7a:b4:ca:c0:c0:48:96:58:5e:59:d8:17:36:d2:
85:b8:69:4f:03:69:12:9e:cb:0e:8d:ec:28:ec:0c:
09:d4:99:35:02:fa:91:8d:8e:0d:22:87:d7:b6:11:
da:b9:73:90:8b:c1:64:62:a3:77:3d:ed:00:13:35:
10:29:21:a2:20:bb:11:9e:eb:19:69:2e:d9:9d:e4:
1c:48:4a:43:74:24:f1:7c:0a:da:3f:8d:56:ca:84:
fe:65:f1:26:14:00:4a:de:95:a2:68:bb:c0:4d:7f:
c5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B3:68:BF:54:D3:AE:D6:26:89:F6:CD:B0:92:B2:60:DC:1D:DF:80
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_rNov1TTrtYmifbNsJKyYNwd34A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:fa:19:3e:6e:a2:22:5f:ce:86:f9:b3:35:fc:79:1b:08:24:
48:6d:2a:69:80:5f:0e:fc:75:fe:21:83:e9:03:c0:4a:b3:a5:
8e:27:4a:a6:9d:62:c2:47:73:a9:4d:1a:3c:01:e6:c2:04:8b:
e1:24:08:56:7b:a1:03:12:eb:c6:59:c8:3e:e7:0d:a3:bd:4a:
31:42:11:39:bb:77:71:9b:31:d9:7b:b8:fe:bc:4a:e4:bb:30:
4c:a6:73:e8:15:8a:4d:64:8b:65:5f:64:33:24:a5:17:12:1b:
b1:0e:8b:db:1b:37:2f:fe:b1:db:42:a2:e8:c7:b5:de:f7:57:
26:ec:b2:80:c8:c4:34:ff:7a:28:26:f2:d3:15:60:d9:40:f4:
94:6d:c1:87:5d:73:b5:32:8c:66:34:b2:84:1a:fe:b1:91:5e:
b8:17:ea:1f:0e:48:73:7e:b2:88:42:c6:a6:5a:a4:df:57:c8:
15:3c:d4:61:8c:d5:58:d7:fc:97:7e:74:3a:78:6d:68:29:78:
93:9e:31:05:97:53:23:9c:75:de:2f:60:b2:d4:8f:70:a0:49:
74:26:e7:5a:33:69:b6:03:ea:0a:68:75:68:af:1b:ac:78:bf:
80:0b:a1:70:18:92:d7:f8:db:0c:75:31:8d:04:23:78:1c:ad:
3e:55:49:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:13:30 2025 by rpki-client