Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jS4YV1I8HCCzWrFzghKl0vNMtEA.roa
File: jS4YV1I8HCCzWrFzghKl0vNMtEA.roa (raw, json)
Hash identifier: rJ+hpj/irDIlgESOuo7AZTySSRTS39dSRqfMpSMeZcY=
Subject key identifier: 8D:2E:18:57:52:3C:1C:20:B3:5A:B1:73:82:12:A5:D2:F3:4C:B4:40
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9A75762CA61C7BA1A37D3E2C73558700
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jS4YV1I8HCCzWrFzghKl0vNMtEA.roa
Signing time: Sun 24 Dec 2023 06:13:58 +0000
ROA not before: Sun 24 Dec 2023 06:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9a:75:76:2c:a6:1c:7b:a1:a3:7d:3e:2c:73:55:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 24 06:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d2e1857523c1c20b35ab1738212a5d2f34cb440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:51:ed:19:85:2c:db:3b:23:4c:4d:d3:14:ab:
24:ef:7e:36:74:6d:b9:a6:fa:4d:cb:b1:1e:ae:76:
c6:49:e9:57:69:bb:0b:25:ed:59:b2:5b:8c:d1:3a:
78:fd:e5:49:88:c5:b2:75:13:71:6c:ab:c2:c6:cf:
53:02:88:62:6c:a9:a0:f3:f1:b1:fc:20:10:cc:39:
5b:eb:07:5b:80:23:9c:d3:c4:7e:36:7b:b9:3a:65:
11:9c:f5:23:35:72:1a:2e:58:df:30:b3:e6:1f:c9:
f5:c4:03:b3:26:7f:5c:28:92:36:0f:1d:1b:fd:ce:
b5:d9:85:07:bd:d9:50:73:50:ce:bf:d7:bf:94:8a:
10:23:cf:dd:ae:1b:81:d6:ff:5b:da:9d:6a:bf:57:
20:ad:ae:12:21:18:93:1c:6a:d3:98:77:3c:95:a2:
fe:78:85:9a:1f:cf:c6:ac:4c:42:cc:34:35:8f:96:
c7:d4:4a:49:1d:2e:79:f3:66:21:ff:d2:07:68:e4:
55:6a:56:b8:bf:98:09:eb:f4:52:88:41:4d:ac:cf:
66:4d:68:12:7c:c3:ac:cc:bd:82:9d:6d:b3:f6:fe:
f0:ef:07:97:c2:22:74:bd:3b:bd:b4:2a:b4:23:1d:
1f:a2:ff:67:44:4a:64:e2:7a:a4:30:e3:05:75:27:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2E:18:57:52:3C:1C:20:B3:5A:B1:73:82:12:A5:D2:F3:4C:B4:40
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jS4YV1I8HCCzWrFzghKl0vNMtEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:7e:6b:86:c2:16:bc:a8:40:be:31:ca:bb:45:b6:78:7a:b1:
e8:38:c6:db:f6:02:43:73:0b:9f:33:e6:de:7a:94:f6:14:8a:
9b:61:c4:5b:72:87:d5:bb:bb:70:06:d7:9b:9a:82:bc:57:41:
2a:f1:2f:75:ae:4e:14:f6:aa:fb:21:89:c2:bc:dd:24:e4:02:
6d:f9:38:1f:da:53:97:05:9d:bc:1b:fa:11:f7:95:37:38:b3:
ab:6d:36:a6:b8:bd:c6:13:b3:ef:e2:00:03:6e:9a:f4:86:69:
75:a2:b6:8b:48:42:0b:b9:2b:57:dc:e4:e1:36:2f:09:52:99:
b9:f7:21:71:b0:bb:88:18:af:0b:23:dd:e2:ad:7e:b1:6a:34:
27:96:be:7e:87:24:09:65:cc:a6:e8:28:f6:f1:ee:07:2e:9c:
62:5c:30:38:4d:22:dd:05:aa:de:ce:b0:1c:77:ea:fa:65:80:
0e:b8:d3:18:a8:62:f7:f1:67:d6:9c:79:96:6a:65:55:c3:bd:
c5:87:31:6e:11:8e:29:cc:16:45:ed:13:10:5b:74:65:55:74:
75:cc:e0:20:e9:69:f4:85:48:f1:23:02:34:82:ab:b0:a0:80:
69:9a:e9:a0:ac:96:42:98:e6:8c:36:4e:91:13:71:74:da:1f:
dd:7a:c1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:23 2025 by rpki-client