Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jGFWtR61DjYIHaGq-xh-jhW-6WU.roa
File: jGFWtR61DjYIHaGq-xh-jhW-6WU.roa (raw, json)
Hash identifier: DsXIo7xZIcf9ITTt2Qy/X0lV0NA0DI/zwEvGNMdOlf8=
Subject key identifier: 8C:61:56:B5:1E:B5:0E:36:08:1D:A1:AA:FB:18:7E:8E:15:BE:E9:65
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA6A8537B9884697EC5FD1ACF9A623AED
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jGFWtR61DjYIHaGq-xh-jhW-6WU.roa
Signing time: Tue 26 Dec 2023 15:04:58 +0000
ROA not before: Tue 26 Dec 2023 15:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:a6a7:90ab/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a6:a8:53:7b:98:84:69:7e:c5:fd:1a:cf:9a:62:3a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 26 15:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c6156b51eb50e36081da1aafb187e8e15bee965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e6:bc:8a:aa:12:ac:45:81:1c:14:82:23:cb:
dc:8a:43:80:d1:f8:61:3b:05:a1:2e:13:cb:5f:f4:
d6:48:79:d8:56:1c:93:83:50:3c:6a:57:28:fc:46:
cc:9b:98:cf:a1:27:93:5f:ae:92:5b:84:92:47:db:
cb:42:32:af:e0:67:0e:72:10:cf:5f:95:f5:41:d4:
63:1e:87:c0:f9:cd:a7:29:d6:aa:ac:31:84:d2:52:
59:e0:9c:2e:e3:c8:70:2e:69:b5:cc:03:b0:d6:c6:
a7:39:df:29:c6:75:91:9c:19:f9:a7:68:8a:c1:5f:
42:70:f2:8e:1a:b5:a5:9c:89:05:66:d3:f2:a6:3b:
42:6e:70:45:f0:22:aa:e8:33:5c:7f:c8:1f:57:e1:
6f:fa:ed:b0:c3:65:5c:4c:80:fc:92:51:2f:7e:70:
16:c9:0d:94:7a:0a:50:06:cd:73:cc:64:f6:e9:c0:
0f:52:8b:99:bc:61:1b:f5:fc:e1:40:ed:e0:53:ed:
02:5e:cc:da:89:4e:c9:9b:c2:ed:1e:c3:3e:e3:5d:
e0:43:f7:98:ab:83:f3:f6:a4:57:86:2c:0d:a0:6a:
2d:8b:35:3f:f4:2b:87:87:11:9d:b2:ab:01:9d:af:
8f:ef:26:e0:1e:98:37:4e:c0:a7:45:ea:5e:e8:46:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:61:56:B5:1E:B5:0E:36:08:1D:A1:AA:FB:18:7E:8E:15:BE:E9:65
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jGFWtR61DjYIHaGq-xh-jhW-6WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:98:e2:b6:1a:e5:a2:66:9d:c9:08:69:7e:d3:05:3e:d6:a9:
c0:23:9d:76:1f:1e:c3:2c:8f:cf:5e:ad:9f:e7:a2:01:99:1b:
1d:e1:b2:3a:5b:2b:7d:f1:41:c7:bc:ab:bf:5e:c2:c2:05:dc:
6c:43:e7:49:27:a7:86:11:f2:a7:cd:ac:f9:6d:8c:03:65:08:
32:73:d1:67:f0:f9:3a:c1:6f:45:c6:2d:18:c1:ea:e9:12:a2:
38:c2:16:8e:86:cb:0f:cf:b3:7f:d8:97:31:79:af:b4:46:1a:
83:a7:06:71:cc:0c:65:a4:23:3c:ac:5c:88:19:3c:0b:e6:30:
47:60:54:ec:25:7f:05:ad:77:3f:5f:94:5f:be:78:23:09:48:
0c:e6:55:aa:7e:d0:0c:85:c2:6c:b5:7d:01:ab:5c:b7:e5:93:
a1:d4:81:ff:32:ca:f8:79:0b:aa:41:9e:96:f0:83:b3:76:45:
14:f4:2c:fb:48:09:15:cb:16:dc:f1:71:d5:32:bf:5f:1d:66:
c0:64:22:1a:e2:a4:a9:ff:d7:10:e2:f4:4c:bf:b1:79:fa:a7:
f2:cc:7b:82:ab:a9:66:7a:2c:5e:d5:46:d0:0d:9d:9e:59:12:
35:f1:71:f3:97:7d:4c:4d:e2:a6:53:71:dc:9b:75:a5:59:24:
3d:40:80:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:26:35 2025 by rpki-client