Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cahZgCXtbiWhvWSP5P_pUdQYCog.roa
File: cahZgCXtbiWhvWSP5P_pUdQYCog.roa (raw, json)
Hash identifier: ivgyFDwetvUzN3NHDuzDLKs1VRZ7Mtots0wEEiAwqs4=
Subject key identifier: 71:A8:59:80:25:ED:6E:25:A1:BD:64:8F:E4:FF:E9:51:D4:18:0A:88
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CCD177F2A7F871B36240DCA6D0083BCAE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cahZgCXtbiWhvWSP5P_pUdQYCog.roa
Signing time: Wed 03 Jan 2024 02:11:58 +0000
ROA not before: Wed 03 Jan 2024 02:11:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cd:17:7f:2a:7f:87:1b:36:24:0d:ca:6d:00:83:bc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 3 02:11:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71a8598025ed6e25a1bd648fe4ffe951d4180a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:af:60:33:7e:16:39:f4:57:07:39:cb:27:d6:
d4:90:aa:3d:0f:35:75:c9:ab:61:51:44:97:a6:43:
5c:15:fb:63:b7:84:06:3a:45:38:1d:1b:0a:da:1b:
11:fe:ee:11:d5:50:c6:97:09:f5:16:dd:5f:c1:61:
c8:de:39:87:74:5e:57:2b:93:25:9a:95:74:69:11:
a0:74:e5:ab:65:d3:87:42:bb:61:7a:6f:7f:81:97:
be:d8:ab:3a:0a:c8:7e:d6:68:dc:4d:b3:2c:cf:97:
15:4f:aa:ea:55:06:a6:2b:fe:79:f4:70:06:6e:3f:
38:c1:a4:40:22:db:26:d1:7d:40:48:18:5d:a1:fd:
2c:f6:df:67:0c:63:09:74:0a:28:69:0a:ea:d5:4e:
fe:9c:40:6c:8e:e2:f4:ce:72:b7:ec:7d:c8:a5:89:
c5:e2:44:f9:b8:2e:f8:8c:e4:6d:61:5b:6f:55:3a:
36:f6:46:a9:78:fb:5f:2e:aa:7b:8b:a3:8d:ad:ca:
04:7a:fd:23:d8:b0:73:62:09:47:dc:29:03:dc:b5:
4c:71:fc:4c:0a:ae:57:03:18:1c:59:28:b0:54:64:
85:3a:82:c9:c4:e3:85:d6:71:77:11:3c:c5:8c:dd:
33:b0:1d:6d:7a:a7:85:ca:4c:8d:fa:f0:51:d8:bb:
06:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A8:59:80:25:ED:6E:25:A1:BD:64:8F:E4:FF:E9:51:D4:18:0A:88
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cahZgCXtbiWhvWSP5P_pUdQYCog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:e6:f8:f7:c2:77:7c:be:e8:bf:14:65:63:01:fd:7d:00:bb:
e0:2c:0b:4e:05:89:98:05:7b:d7:11:25:b6:e2:0e:f7:40:ad:
62:c3:22:cd:1b:80:a5:f4:28:28:9e:24:47:fb:8a:e8:ad:80:
53:b9:54:ca:d2:f4:84:49:e6:be:f3:23:12:ac:1d:70:5f:53:
ce:d4:4b:8c:eb:22:05:ae:c1:22:c5:d2:b3:27:ef:e3:c5:35:
da:41:e8:f4:da:96:ab:ea:1b:93:f1:73:81:1d:b2:75:b1:e0:
79:3d:38:26:ea:02:0d:62:51:d5:f5:8a:cf:89:41:10:67:9b:
74:76:03:fc:ec:71:b1:0e:8f:ca:a7:c1:af:96:da:da:33:5c:
2b:65:64:84:8e:4e:d9:ed:a3:aa:3b:4e:2e:5e:13:4e:4c:69:
a6:e0:03:88:92:5c:fb:9f:90:2f:54:a4:68:61:30:74:8a:86:
a4:32:70:08:8f:0a:22:2f:f7:59:ef:bd:2d:0c:d5:69:8d:1b:
a2:67:0d:35:c6:76:c3:a4:c4:a6:63:8c:cc:04:c9:dd:e6:13:
39:f6:c0:ed:49:ce:bc:88:66:32:58:2e:94:62:55:1d:20:b3:
f5:c8:29:b3:d7:6a:52:27:f3:4b:cf:49:41:40:21:87:46:b1:
93:34:1a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:53 2025 by rpki-client