Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/f-kuAmr9fMuo_T6eKyIDXmiMCKs.roa
File: f-kuAmr9fMuo_T6eKyIDXmiMCKs.roa (raw, json)
Hash identifier: 6W7Aaz4wpz99hVcenLhLESTvy/6A56nHWFMvLW/s/JM=
Subject key identifier: 7F:E9:2E:02:6A:FD:7C:CB:A8:FD:3E:9E:2B:22:03:5E:68:8C:08:AB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D0B8DD45CA593521ED36C981E6046DD79
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/f-kuAmr9fMuo_T6eKyIDXmiMCKs.roa
Signing time: Mon 15 Jan 2024 05:17:40 +0000
ROA not before: Mon 15 Jan 2024 05:17:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0b:8d:d4:5c:a5:93:52:1e:d3:6c:98:1e:60:46:dd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 15 05:17:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fe92e026afd7ccba8fd3e9e2b22035e688c08ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c7:5e:45:e7:fa:61:93:41:56:32:f9:fd:cd:
39:39:a3:64:59:c1:c4:a7:85:0c:dd:43:ce:fd:10:
6b:ad:e5:5f:34:2f:fe:c4:a7:05:bd:96:8d:3e:8a:
40:4e:59:ae:cb:02:dd:99:fe:f4:10:5f:b8:5d:05:
e3:c0:2b:d4:da:54:d9:5d:69:09:a9:bb:ac:66:35:
b4:e9:27:e6:a7:e5:ba:ee:b7:a9:e3:5f:b7:7d:a2:
10:d3:d1:26:5b:6b:d7:76:8c:a6:ca:3c:f5:e6:72:
2b:cc:40:74:44:20:61:90:01:cf:dd:df:42:55:62:
07:b5:fd:99:c4:98:a3:96:e0:24:09:f2:e0:40:92:
b8:63:3a:48:a9:2d:cf:96:c9:1a:b2:14:d5:26:9f:
f6:93:32:20:9a:be:62:73:df:b8:30:56:1f:11:17:
1a:8f:8e:5d:c4:ae:0d:10:76:72:98:e9:31:12:58:
4c:a0:64:84:8f:70:8f:0d:1f:01:8b:ba:2f:10:26:
23:7e:92:ab:99:e8:2d:58:cd:62:4f:b5:1d:20:4d:
c6:67:b0:4a:7a:a5:c7:64:f1:16:63:a4:d9:ea:ca:
dc:bf:85:34:83:a3:98:91:19:a6:23:f5:c1:57:c8:
e8:7e:07:5e:f0:0d:a5:ae:fd:3a:06:74:27:77:fb:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E9:2E:02:6A:FD:7C:CB:A8:FD:3E:9E:2B:22:03:5E:68:8C:08:AB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/f-kuAmr9fMuo_T6eKyIDXmiMCKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:ef:99:2a:2e:68:c8:a2:f5:2e:f5:8c:d2:ff:47:3c:fc:74:
91:07:1e:4b:8f:af:4c:92:a0:72:53:1a:92:b2:51:13:20:67:
f4:1f:29:0c:12:c3:69:32:63:e2:90:11:97:42:35:a7:ea:f2:
cc:ae:c3:a2:6b:27:a8:2d:8c:dd:55:40:e6:f8:79:c5:72:15:
17:39:6d:ac:f8:75:49:82:ef:78:d8:68:ae:6a:d6:a8:ed:04:
83:87:c9:8a:b2:d0:f5:ec:95:c1:16:4e:f8:31:ba:6d:e4:75:
df:4c:78:55:f2:6a:f6:ad:10:32:5d:2a:9c:55:30:57:eb:0d:
95:42:26:ca:0e:9e:3f:ea:88:1c:5f:ee:22:f3:b9:c6:ce:bf:
60:6d:12:32:3e:d4:d4:74:a6:e8:5d:c7:c6:eb:db:08:b7:8b:
5e:2c:e9:e3:1f:15:23:06:49:81:62:1d:10:7d:a9:66:73:68:
7e:8e:2f:e8:11:fc:88:5a:0a:63:24:83:dd:a4:b4:12:f4:80:
ee:98:2e:ac:4b:e7:7d:93:c4:75:70:98:ce:3d:de:4e:27:36:
36:83:91:02:79:5e:3c:5f:9a:3c:ec:6b:2d:55:ed:8b:f1:82:
ae:59:67:a6:ca:c8:c1:c6:8b:c5:fc:38:7f:b4:bf:31:69:e3:
a8:9f:f4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:15:31 2025 by rpki-client