Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/c1107rZe2FVIK0-Red9AdaYsrWA.roa
File: c1107rZe2FVIK0-Red9AdaYsrWA.roa (raw, json)
Hash identifier: NbDhr2UbOOmw3X4f1prcemFMw9afV++lrt+o7ZbcTwA=
Subject key identifier: 73:5D:74:EE:B6:5E:D8:55:48:2B:4F:91:79:DF:40:75:A6:2C:AD:60
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA342925B33772D321028AAE7A695E383
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/c1107rZe2FVIK0-Red9AdaYsrWA.roa
Signing time: Mon 25 Dec 2023 23:14:58 +0000
ROA not before: Mon 25 Dec 2023 23:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a3:42:92:5b:33:77:2d:32:10:28:aa:e7:a6:95:e3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 25 23:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=735d74eeb65ed855482b4f9179df4075a62cad60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f7:6a:ed:19:9a:77:aa:40:79:a4:d1:6b:66:
ad:4f:c5:96:2a:12:4d:bb:38:c3:ab:58:48:b0:40:
64:65:80:56:10:e7:ff:66:58:ac:ea:14:fc:97:dd:
60:b3:0d:1b:55:20:4f:33:79:45:46:39:26:fd:f5:
58:3f:40:e1:45:b6:7f:b4:7b:01:9c:df:91:22:c7:
5d:42:ad:66:a9:07:d5:87:ea:2e:c6:33:f6:18:90:
83:f4:4a:c8:e3:ef:3d:fb:96:61:f0:80:24:fb:33:
38:50:fe:73:e7:16:1a:8d:3d:26:d7:57:8c:fd:47:
75:59:59:4e:6a:e7:96:87:be:7a:81:6a:83:5b:96:
ce:8f:1f:c9:ed:c1:1f:63:f5:f0:66:48:da:ed:c2:
61:c3:ae:aa:d6:a7:56:c7:9f:9b:d9:c6:7b:c6:ff:
8d:e8:3a:35:29:14:00:8f:92:5f:df:de:35:76:e4:
c6:3b:cd:35:57:4d:78:82:32:45:80:39:fd:e8:93:
29:81:c2:c6:e9:ca:f8:8e:ad:bb:e7:80:13:fb:23:
c5:44:bc:71:11:c5:e8:b0:a6:9d:fd:7a:96:54:42:
20:7d:70:73:bc:13:d5:34:3f:1a:97:e4:43:83:f3:
88:5d:d2:9a:41:db:4e:4a:db:b1:9e:90:3d:07:36:
0d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5D:74:EE:B6:5E:D8:55:48:2B:4F:91:79:DF:40:75:A6:2C:AD:60
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/c1107rZe2FVIK0-Red9AdaYsrWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:da:1c:47:9b:10:65:7c:8f:88:e0:db:e2:54:b8:75:02:be:
da:a5:be:0a:03:f3:42:a8:be:b0:cf:92:6d:af:10:ef:28:8f:
ed:ce:6f:f8:15:4e:84:9d:65:6c:67:67:08:4e:1f:6a:a4:8c:
e0:74:71:42:9d:5e:08:71:a9:47:85:a6:ed:49:d0:62:04:1d:
ea:5d:37:1e:a1:d0:28:12:7b:53:5e:65:a3:dd:97:44:b7:03:
52:e7:00:89:3e:7b:33:e0:a9:f2:a9:ee:a1:f9:9a:f4:0b:c1:
09:ff:7d:9b:fd:50:f8:78:7e:c3:bd:4d:f3:71:6f:a5:91:cf:
97:b2:97:7a:cc:49:1e:91:c8:0f:74:06:ba:95:0e:2c:14:7d:
cc:8c:c4:44:86:ae:42:f2:92:f7:32:63:33:64:a4:7d:c5:98:
16:89:bc:d7:c9:ca:f1:c4:31:c0:4b:1e:4f:c8:8a:9f:38:2f:
f5:68:6a:83:57:76:b4:f2:08:42:28:ee:91:3e:d8:88:c7:0e:
8e:4c:d9:07:19:29:a6:dc:48:11:07:38:0c:7a:42:2e:16:56:
3f:8c:8f:90:ee:08:18:4b:42:fa:65:b0:e2:c4:d0:96:f0:a7:
d7:d6:17:e0:0c:99:60:c6:a1:8c:f5:76:a9:f2:b5:96:bd:e8:
5d:b7:47:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:19 2025 by rpki-client