Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/j3Izi_TwevlegIeR00VhqBGmwkc.roa
File: j3Izi_TwevlegIeR00VhqBGmwkc.roa (raw, json)
Hash identifier: gTR3xKx45fvaY0VGYyi1I0QFgZek4R6C597hD/n42gs=
Subject key identifier: 8F:72:33:8B:F4:F0:7A:F9:5E:80:87:91:D3:45:61:A8:11:A6:C2:47
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C98BE01AED18E9B6D482CACC5EFC0FD00
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/j3Izi_TwevlegIeR00VhqBGmwkc.roa
Signing time: Sat 23 Dec 2023 22:13:58 +0000
ROA not before: Sat 23 Dec 2023 22:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:98:be:01:ae:d1:8e:9b:6d:48:2c:ac:c5:ef:c0:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 23 22:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f72338bf4f07af95e808791d34561a811a6c247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:0a:04:ac:ee:16:3a:68:6d:45:71:93:b9:
3a:85:f4:7e:96:65:99:26:94:b6:9d:6a:51:23:e7:
a5:76:b2:2c:d9:6f:c0:0b:cd:53:ff:21:54:ac:65:
8e:1a:21:ea:b5:a8:ef:49:d6:da:ae:48:49:2d:21:
bb:af:b7:25:6d:f0:7f:20:ea:f5:25:ee:71:c2:27:
c7:93:fb:05:87:d7:44:7a:d4:da:36:ce:5f:4b:ab:
a5:30:7b:93:17:16:a6:75:ad:1b:8c:ae:af:3b:78:
a4:73:45:22:fd:f4:a0:a8:ba:91:db:c1:99:a2:9e:
bb:70:9a:a1:e0:1a:c7:eb:b9:1c:eb:1e:66:2b:2b:
ea:bf:52:38:fb:1a:5e:0a:64:c5:33:6d:5b:4e:30:
83:a3:40:08:48:36:88:a6:93:01:2c:fd:65:8e:8f:
bf:98:71:51:32:a4:42:ee:4c:56:f4:53:27:c3:12:
51:86:4e:45:16:f4:c1:f2:ac:6a:33:cd:82:30:c8:
99:a3:6c:d7:f4:9d:18:7f:a2:35:95:85:d2:51:64:
8b:46:56:1a:e0:5e:6c:26:bc:f6:7b:95:24:e6:00:
e1:6c:c9:90:72:52:3b:58:d3:b5:f9:a8:27:83:17:
72:85:00:16:1e:b4:8f:ac:84:05:eb:13:94:2f:f4:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:72:33:8B:F4:F0:7A:F9:5E:80:87:91:D3:45:61:A8:11:A6:C2:47
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/j3Izi_TwevlegIeR00VhqBGmwkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:69:38:f4:27:5b:c7:5a:f7:68:a3:0c:c6:62:ca:7d:45:f5:
01:15:cd:03:70:62:b2:fb:f9:df:37:22:cc:42:c4:85:64:2b:
a3:0c:2c:41:3f:81:4f:19:40:3d:de:23:4d:3c:42:44:a1:26:
1f:da:6e:09:e0:99:e9:66:3e:0f:ca:05:5d:18:ce:41:76:3d:
d2:78:c0:46:19:a1:b5:7a:3e:c1:20:aa:45:49:37:ec:44:cc:
c3:bb:dd:32:0c:3d:ac:64:09:e5:91:19:36:af:03:60:5a:75:
50:f6:61:2b:33:3c:ab:de:e8:ef:1f:cb:01:be:71:47:83:4c:
29:e6:be:e0:00:5c:e5:a3:bc:67:6c:bd:b4:03:8a:8e:26:a3:
b8:15:fe:44:29:35:f9:dd:bc:11:9c:7a:78:9a:50:74:d6:ad:
55:f8:9f:93:5d:6a:ea:03:b0:35:c6:2d:d2:42:c4:35:eb:b8:
3d:3c:e6:77:6a:78:5d:b3:1c:3a:c4:db:04:7e:3f:62:77:26:
69:b2:0e:16:8c:db:99:f8:55:4c:99:95:a8:ce:a5:be:da:a2:
d3:63:a8:b9:2d:ec:af:61:df:7d:58:a2:f8:bc:ec:9f:ec:a8:
a2:36:8f:b1:df:53:83:37:17:ee:c4:5f:b7:a4:96:9d:27:14:
59:33:1c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:00 2025 by rpki-client