Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fiLGOvaQGJC7kT4kXoXqDP8KANU.roa
File: fiLGOvaQGJC7kT4kXoXqDP8KANU.roa (raw, json)
Hash identifier: IqYDxp8B95sDMuCIoWnv8frnYcValY5tf83nwVXUz0k=
Subject key identifier: 7E:22:C6:3A:F6:90:18:90:BB:91:3E:24:5E:85:EA:0C:FF:0A:00:D5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CD95275D95A21BC32BB3E98798F47D4B5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fiLGOvaQGJC7kT4kXoXqDP8KANU.roa
Signing time: Fri 05 Jan 2024 11:11:49 +0000
ROA not before: Fri 05 Jan 2024 11:11:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d9:52:75:d9:5a:21:bc:32:bb:3e:98:79:8f:47:d4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 5 11:11:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e22c63af6901890bb913e245e85ea0cff0a00d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cf:a4:52:ee:07:da:aa:89:79:c2:8a:75:d5:
cb:f9:11:40:6c:f0:47:f7:95:68:cc:07:f2:cf:9a:
51:d0:69:bf:06:42:34:25:0b:c7:0b:12:7d:9c:56:
b6:d8:b2:ed:a7:ca:64:37:59:64:98:f1:65:7f:ce:
92:1f:3b:19:7c:0a:09:3b:07:95:15:58:7c:25:af:
1d:d3:46:b9:85:f5:81:2a:3f:4f:04:91:c7:a3:e1:
7a:e8:f2:ad:51:d5:23:55:28:71:ad:b9:07:9a:2e:
55:bc:55:a3:7b:6a:fe:db:26:c0:fa:64:38:7d:6c:
04:10:39:e7:46:f9:bf:5a:68:3f:21:ff:58:f1:f0:
95:2d:36:24:5d:37:5a:de:d1:90:f9:19:f7:5b:76:
5d:bd:b2:b9:72:9a:0c:3c:b9:9e:f9:77:f4:14:4d:
c5:f6:13:77:d6:a5:10:3e:0a:35:7b:9b:44:fa:ec:
52:fe:c4:c8:ef:e1:17:1e:14:1f:bb:34:96:a6:2a:
cf:5d:c0:da:53:3c:c4:2b:7f:89:a7:04:80:69:39:
ab:af:36:9a:6b:f4:f1:17:46:e6:d8:ee:d4:27:8f:
fd:fc:24:2a:50:6d:f9:12:1f:d1:6f:70:6d:ef:96:
a5:0d:d6:92:51:dd:20:2f:29:d8:ce:b2:06:d9:34:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:22:C6:3A:F6:90:18:90:BB:91:3E:24:5E:85:EA:0C:FF:0A:00:D5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fiLGOvaQGJC7kT4kXoXqDP8KANU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:d6:8e:d6:6b:64:23:cb:28:97:87:3a:e1:59:b8:41:71:98:
92:7d:32:f0:77:2c:9f:b9:d6:4f:65:b8:07:f2:b2:14:5e:b3:
c3:a7:fd:08:5f:d1:ab:a0:98:2f:99:8a:71:51:97:4b:67:4f:
9d:7e:61:84:c6:34:88:b0:9d:67:7b:43:f3:57:70:4c:19:29:
ea:76:18:64:85:e9:32:e6:b8:a8:65:2c:93:d0:b9:e9:d2:b3:
cf:58:94:eb:d5:8f:2f:a7:e6:bc:2a:78:65:4b:d6:0e:ec:9d:
0a:a5:9b:6b:b8:5a:f4:23:dd:ee:9e:b7:3e:13:80:ce:18:7d:
15:8e:db:6b:85:48:20:e0:fe:30:c0:73:90:ad:c5:fd:6d:93:
58:0b:5b:7e:d6:e9:25:6c:08:99:15:83:67:a0:69:0b:d0:b8:
62:70:77:61:f1:a7:92:81:b6:03:fe:d5:a7:41:3b:a0:31:42:
e0:6b:99:3d:9f:ed:e3:10:ac:29:84:b2:50:40:aa:ba:dc:2a:
84:61:fc:e0:b4:64:61:4a:f0:bb:05:23:45:17:93:49:95:9a:
41:d1:58:f0:9f:32:7c:e8:36:44:1e:98:46:69:85:5e:bb:7f:
13:2e:19:04:8d:65:d6:15:35:43:56:c9:6e:cb:38:85:10:a4:
22:3f:50:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:21 2025 by rpki-client