Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/d7kxNhlpOJ93Fr5woJmMSWH1nVQ.roa
File: d7kxNhlpOJ93Fr5woJmMSWH1nVQ.roa (raw, json)
Hash identifier: 1LlNqsf6OW6gs1CmPgSF7ijGM0/c3BkNxMd6poDTLUM=
Subject key identifier: 77:B9:31:36:19:69:38:9F:77:16:BE:70:A0:99:8C:49:61:F5:9D:54
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9397A56E240E0F4FE244E36B3CFF8BAE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/d7kxNhlpOJ93Fr5woJmMSWH1nVQ.roa
Signing time: Fri 22 Dec 2023 22:13:58 +0000
ROA not before: Fri 22 Dec 2023 22:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:93:97:a5:6e:24:0e:0f:4f:e2:44:e3:6b:3c:ff:8b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 22 22:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77b931361969389f7716be70a0998c4961f59d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:d9:4b:cf:56:e2:cd:9b:33:08:47:40:bc:
33:07:22:00:0d:24:b5:2d:3f:57:1f:0a:66:d8:c8:
a4:c6:46:3e:25:8c:c7:57:f8:68:5e:8c:f0:66:57:
9d:8d:99:84:1f:ed:50:3a:7a:f7:87:47:ea:44:90:
4c:59:18:fd:90:80:fb:7d:b3:78:71:7a:00:98:b3:
c7:c2:36:59:8c:95:38:b8:58:a8:f2:92:e1:df:1c:
56:7c:86:4e:f6:ee:aa:2d:12:5c:fe:4c:eb:6b:3f:
d3:74:39:01:64:fa:25:4a:32:9e:5d:e0:4e:6e:12:
00:90:c4:e8:b9:dc:fa:47:76:c5:83:c8:7c:75:d9:
d9:8a:45:ed:79:1d:04:77:1b:27:4b:50:4e:ef:7d:
68:b5:62:25:22:d1:8c:72:e6:4d:e2:7b:47:f5:91:
7b:d0:52:46:64:94:f4:7c:d6:1f:a7:62:bf:f3:4e:
94:66:6d:92:9f:f6:46:a3:3e:8c:5b:2d:3b:77:24:
b2:08:e8:cf:d1:6d:07:75:22:3c:05:fa:8c:e0:81:
fc:e9:b3:40:fb:b4:6d:62:15:c1:2a:43:90:ec:7c:
a7:e3:c8:a6:ab:98:09:98:66:33:7b:2c:78:d1:44:
29:1b:c9:dd:8b:99:07:b6:64:1e:2b:3b:08:dc:8a:
41:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B9:31:36:19:69:38:9F:77:16:BE:70:A0:99:8C:49:61:F5:9D:54
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/d7kxNhlpOJ93Fr5woJmMSWH1nVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:e9:75:2f:59:64:bb:bd:31:c5:3e:68:43:0e:1a:3e:35:51:
f0:64:82:6f:bc:d8:9f:b1:57:2f:32:6a:cb:9f:2a:86:db:33:
ce:2b:80:b6:fb:c8:e3:08:9f:72:24:fe:24:77:04:a2:aa:45:
58:2d:90:da:20:c2:ec:4a:d8:e9:6e:b1:b6:c3:ce:07:21:01:
cb:c4:f1:6d:08:0a:44:13:20:09:ed:d6:c0:c6:db:28:58:01:
30:60:41:5e:4d:5c:89:ad:0d:4c:a2:b4:e8:74:8e:99:c2:5d:
04:9b:41:88:b4:9e:48:ae:25:21:cc:e2:55:97:7e:6b:4f:e6:
1c:55:39:91:04:f7:d0:2d:6b:2e:3b:77:d9:5f:64:4d:12:92:
55:2d:87:13:19:a5:df:86:af:89:1d:96:db:d5:c7:03:36:8d:
e5:b9:f1:b9:96:89:ed:c1:c2:a1:f2:b1:95:40:88:57:0b:52:
3d:0b:7d:1d:fe:14:7a:78:7a:8d:6a:56:50:d9:ab:38:59:bd:
88:db:66:c2:9b:ea:d1:96:09:53:01:70:81:1a:47:9a:c6:f4:
f3:df:5d:63:df:c9:ba:25:e2:57:49:15:b6:eb:3e:17:06:e4:
12:3e:04:53:37:ec:0f:db:2d:3e:31:af:78:99:2e:d3:eb:b7:
11:73:81:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:24 2025 by rpki-client