Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/h_ZptYvlT6aDKRs1MXnFH7WMjOs.roa
File: h_ZptYvlT6aDKRs1MXnFH7WMjOs.roa (raw, json)
Hash identifier: l8xZzEAUaNjfMV6s8D5kyD8b5zyaKDgi1TXGorrcS2U=
Subject key identifier: 87:F6:69:B5:8B:E5:4F:A6:83:29:1B:35:31:79:C5:1F:B5:8C:8C:EB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D2E18774BAAD3B33DE4090C84B5E0E3FA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/h_ZptYvlT6aDKRs1MXnFH7WMjOs.roa
Signing time: Sun 21 Jan 2024 22:16:11 +0000
ROA not before: Sun 21 Jan 2024 22:16:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2e:18:77:4b:aa:d3:b3:3d:e4:09:0c:84:b5:e0:e3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 21 22:16:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87f669b58be54fa683291b353179c51fb58c8ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:34:94:d7:c8:68:3e:83:ad:a4:84:59:2a:31:
4e:51:29:09:34:ed:a2:eb:37:8e:ec:45:87:6b:88:
e0:50:1d:35:58:1a:ad:d4:9f:77:62:78:72:e2:f1:
53:4a:56:ec:7f:68:3c:99:fc:f5:62:65:4e:9e:b8:
1b:ca:75:e2:b2:ed:68:1f:f7:0c:8b:69:24:ca:06:
b0:5f:10:7e:64:7a:a3:07:7b:a8:ca:b2:79:86:f2:
f4:28:46:96:7b:3d:3f:32:af:5b:98:2f:63:05:8c:
51:ec:0f:33:49:e7:e2:10:a7:e0:68:29:8c:ef:06:
b3:a0:5d:e9:3e:65:48:ae:90:d2:b1:32:94:83:a7:
9f:0f:8f:55:d9:0a:d1:37:46:1a:9b:99:a1:0f:97:
68:c8:81:15:1b:5a:41:26:07:74:df:89:63:17:13:
8c:90:3c:ac:c4:6f:bc:e2:a9:ad:ea:8c:61:14:a2:
3b:7f:36:c5:3e:12:24:ba:a6:73:51:b0:b6:02:46:
4b:d3:23:83:6a:39:43:58:39:45:d6:d2:03:ed:09:
d9:ee:34:37:e1:eb:2c:4c:48:39:02:56:a4:2f:1a:
e4:92:ed:82:b4:72:79:46:a4:d4:fb:b0:2a:e6:d4:
57:14:a1:8d:1a:85:e0:2b:4e:25:1a:64:10:29:db:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F6:69:B5:8B:E5:4F:A6:83:29:1B:35:31:79:C5:1F:B5:8C:8C:EB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/h_ZptYvlT6aDKRs1MXnFH7WMjOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:02:11:17:df:31:36:e8:c5:87:ed:e0:7d:b3:45:fb:55:30:
45:f9:74:86:15:26:c7:a0:57:b7:4c:22:21:00:1b:32:ce:51:
25:03:2b:94:91:cb:ca:f5:f3:87:27:cb:71:80:23:c2:cb:0c:
6d:b9:0d:a6:79:c8:ca:4e:a8:17:a2:c8:97:4f:62:31:82:59:
4c:60:79:78:cd:fb:d7:99:a6:b3:5e:30:4a:b8:4c:1b:96:da:
67:fb:60:29:93:1c:4c:5b:ee:02:e7:34:9f:25:1c:35:d1:a6:
54:a2:3a:ce:ac:12:75:f2:7a:09:55:e7:5f:13:dc:4f:7c:1d:
f6:28:cf:ac:49:d4:6c:5d:b5:23:41:dd:e3:4f:67:b2:55:3b:
8f:e2:5b:d9:80:96:9a:e3:f7:b8:d2:b3:5b:3d:f5:8e:20:42:
96:94:25:6e:62:29:33:2a:db:45:65:82:9d:1b:45:07:d7:b9:
84:51:a9:c2:e5:20:b7:de:90:05:37:4c:12:46:a2:52:c7:e8:
4d:ba:28:89:17:29:c0:a1:f7:e1:c2:e4:f3:56:05:04:e5:1b:
36:9e:d1:53:72:e8:da:03:0e:06:b4:1f:9a:fd:51:c2:70:c5:
bb:96:27:34:2b:92:5d:5a:ca:b5:58:c9:19:de:8f:39:d0:e6:
e7:7d:c9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:26 2025 by rpki-client