Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/atUaiE_07s4DenDHjYA2ymDByWk.roa
File: atUaiE_07s4DenDHjYA2ymDByWk.roa (raw, json)
Hash identifier: TAFDNc61GHGCO2hK1OT5m4YS55HVQKWeGJyL33FIBlY=
Subject key identifier: 6A:D5:1A:88:4F:F4:EE:CE:03:7A:70:C7:8D:80:36:CA:60:C1:C9:69
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CCC05C0A4A682D83183563186EFDF8571
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/atUaiE_07s4DenDHjYA2ymDByWk.roa
Signing time: Tue 02 Jan 2024 21:12:58 +0000
ROA not before: Tue 02 Jan 2024 21:12:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cc:05:c0:a4:a6:82:d8:31:83:56:31:86:ef:df:85:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 2 21:12:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ad51a884ff4eece037a70c78d8036ca60c1c969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:16:57:5d:f1:29:53:5d:af:b6:1a:0a:c6:
5c:4f:cb:1d:b8:8e:30:15:91:0f:5f:fb:f6:36:06:
2d:c1:41:b1:e8:0c:9e:ef:2b:dd:a3:36:b7:a9:35:
e5:3a:78:ee:36:f7:5f:72:dd:12:62:e7:f6:e1:70:
45:a5:62:bb:48:e7:30:8f:f6:9e:25:6f:fb:49:07:
13:c5:66:5d:db:20:24:02:50:de:e8:07:a8:54:4e:
e8:94:2a:5f:c0:c0:1f:69:37:b3:24:fb:79:0b:17:
7b:22:e8:f9:5f:39:21:29:ea:fa:be:64:66:90:46:
85:85:e5:0c:6e:94:9d:0a:29:17:d5:c4:a0:04:61:
00:65:5f:61:42:f1:f0:65:7f:86:eb:ee:6d:52:72:
51:52:0a:da:05:3c:ed:e9:43:67:de:81:fb:f5:80:
3f:29:18:cb:cb:cf:cf:07:5f:f1:b7:83:bb:c1:15:
cb:06:7f:71:dd:37:a4:ae:bc:07:2c:41:8d:45:a0:
7f:ba:5b:13:24:20:3b:d5:fa:dc:0e:90:0a:70:da:
99:c1:18:df:07:39:77:26:1d:3a:84:a6:fa:e1:7f:
98:73:7e:ed:32:43:bb:65:d0:98:4e:64:49:18:c5:
47:4a:21:38:e9:9d:bc:88:f1:16:16:1e:4f:c9:0e:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D5:1A:88:4F:F4:EE:CE:03:7A:70:C7:8D:80:36:CA:60:C1:C9:69
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/atUaiE_07s4DenDHjYA2ymDByWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:2f:00:fe:70:8a:f0:f2:d0:f6:8a:a0:62:fc:84:8d:b4:89:
1c:0d:66:7b:b1:85:53:45:12:5e:e5:d9:37:18:7e:94:81:f2:
2f:af:69:4f:b6:98:64:14:b1:2d:f8:e9:ae:81:50:57:71:42:
9c:92:9e:a7:a5:42:05:f7:d5:25:41:bc:01:e0:20:38:3a:f6:
3f:37:f0:43:63:00:98:4c:92:ab:64:46:88:f1:69:49:83:3d:
62:0f:c2:06:e1:0f:34:d5:33:59:27:4a:a6:4d:4b:7d:15:56:
ed:38:af:65:d1:3f:5d:f2:59:7f:2d:26:a3:33:a0:ae:24:ce:
e7:5a:f9:0f:a0:24:88:ef:6b:c4:82:7a:c3:d6:9d:49:39:e7:
d8:d2:cc:e1:44:c9:1a:bf:92:fa:2b:9f:b8:44:bf:3d:e8:0f:
0c:84:fe:98:1a:ff:8a:cb:24:8e:97:f2:4e:c8:37:7c:fa:e3:
b1:d3:f6:c2:a1:73:c6:c3:80:35:b7:43:0c:e0:dc:94:44:7b:
db:44:d9:8e:4c:6b:da:81:a4:bd:07:b6:74:9d:7a:19:bf:c7:
cd:49:9d:d8:a3:96:84:c8:b1:85:41:98:f7:d5:84:56:11:6d:
fd:70:81:b0:a8:0d:58:5a:3a:ce:ef:a4:49:88:35:79:7d:eb:
a5:ff:d6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:44 2025 by rpki-client