Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/b9KuCq0oJF8Z80S2CzKBbMcVS7s.roa
File: b9KuCq0oJF8Z80S2CzKBbMcVS7s.roa (raw, json)
Hash identifier: 4oBzFtmo72HUZQOX3nm3zA10dVU0F9J5rwaQV1UoxNw=
Subject key identifier: 6F:D2:AE:0A:AD:28:24:5F:19:F3:44:B6:0B:32:81:6C:C7:15:4B:BB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8C14201424364DB7B48295CA033934E1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/b9KuCq0oJF8Z80S2CzKBbMcVS7s.roa
Signing time: Thu 21 Dec 2023 11:12:58 +0000
ROA not before: Thu 21 Dec 2023 11:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:14:20:14:24:36:4d:b7:b4:82:95:ca:03:39:34:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 11:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fd2ae0aad28245f19f344b60b32816cc7154bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:cd:80:e1:23:a5:b8:30:4f:5e:92:17:99:
a9:0a:b2:b1:1f:6f:80:d6:82:13:77:9c:1b:fb:58:
1d:c1:bb:6f:5a:c0:e8:fc:4a:57:93:02:27:5c:39:
5b:b6:a8:88:5e:ca:3b:de:52:98:39:97:da:f6:71:
ba:5a:59:53:f1:8f:ea:14:3c:63:78:e2:57:ea:9f:
e3:2f:df:76:cc:7e:91:13:84:a8:a7:38:04:66:a2:
4d:bb:00:97:9f:14:5a:f7:a1:d1:a0:8b:54:4d:48:
b8:d1:c5:af:38:f0:5b:54:a8:d7:ef:f4:07:d6:7f:
ab:c4:73:30:b3:99:cb:a4:18:5c:80:5d:6a:4c:ec:
ca:6a:8d:73:da:4a:ec:20:94:e9:19:fe:20:4c:9d:
11:88:58:24:a0:e0:0e:25:59:38:fc:06:f8:5b:22:
59:2e:ed:83:00:7e:0a:88:6c:f0:34:e8:1e:2c:c2:
18:ec:ce:48:d6:e7:97:74:af:48:1b:05:7e:62:ed:
23:42:98:cc:00:de:5c:4a:25:73:39:dd:49:ea:ae:
8e:13:e0:9d:a3:25:9a:0f:5e:43:ea:9c:b3:d1:da:
b5:59:72:d1:43:f9:b8:e0:ab:c6:22:1e:b7:db:b3:
43:a2:1f:12:4b:67:d4:79:c4:08:63:7c:7c:22:a3:
59:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D2:AE:0A:AD:28:24:5F:19:F3:44:B6:0B:32:81:6C:C7:15:4B:BB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/b9KuCq0oJF8Z80S2CzKBbMcVS7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:6c:2d:43:4e:31:74:dd:58:82:df:e1:90:af:4b:1d:53:b5:
e9:b4:71:0d:dd:22:4b:39:b3:e3:a9:31:70:fe:ad:e6:e4:1f:
79:1e:f0:76:7c:fc:22:7d:f0:e7:b1:6e:86:ec:c0:71:73:43:
05:9f:fe:e4:de:d8:72:d3:5e:f1:93:20:77:e7:8b:2a:7c:69:
21:a0:c5:b3:44:e2:5c:0e:6f:d0:69:67:e7:22:16:06:5b:f7:
fc:eb:5c:53:65:be:ac:f1:de:8d:41:43:ed:d5:34:43:ec:80:
ad:e6:46:49:9a:1c:63:3b:b4:ef:ef:08:35:aa:ea:94:f7:e2:
a3:16:91:ee:80:44:c5:9f:0c:26:b8:e7:08:cd:ce:7e:12:b5:
43:f7:bd:5a:d3:b3:92:f5:ab:1a:bc:c3:28:95:b4:51:19:df:
96:30:b2:39:d1:4c:85:ba:b8:f0:69:54:7a:50:02:6d:b4:a6:
2e:53:41:8b:62:8d:78:03:ba:8d:a5:d1:14:a5:d0:29:22:ed:
1a:fe:f8:cd:c1:54:9f:37:99:73:7f:d9:10:f2:96:82:e5:6a:
4e:5e:42:96:28:ab:22:80:19:32:4d:70:ef:3c:92:1f:16:7f:
61:c8:8f:a6:61:52:cc:1b:8d:5d:1a:71:b6:88:63:12:dc:3b:
29:80:3a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:30 2025 by rpki-client