Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jgCvaeeJgM43DId4_g_VIxn_Y-o.roa
File: jgCvaeeJgM43DId4_g_VIxn_Y-o.roa (raw, json)
Hash identifier: Msqz4v9oqfdFF3e37MXk6aVLLlWewWt5MbkfeG6d3HQ=
Subject key identifier: 8E:00:AF:69:E7:89:80:CE:37:0C:87:78:FE:0F:D5:23:19:FF:63:EA
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D374FC7800F879DF11DC688E8FCCEAB9C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jgCvaeeJgM43DId4_g_VIxn_Y-o.roa
Signing time: Tue 23 Jan 2024 17:13:11 +0000
ROA not before: Tue 23 Jan 2024 17:13:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:37:4f:c7:80:0f:87:9d:f1:1d:c6:88:e8:fc:ce:ab:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 23 17:13:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e00af69e78980ce370c8778fe0fd52319ff63ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d7:3d:03:7d:03:22:85:96:08:c6:c0:a5:ca:
62:d4:e1:7e:a9:1b:0a:63:0e:90:7c:1f:de:b2:9f:
5d:a9:43:7f:ab:4b:89:d7:da:95:76:0b:fa:ed:33:
b3:4c:5e:8b:c2:21:53:2f:84:c9:7e:77:c0:44:59:
c1:cf:c6:9b:c2:05:15:63:03:5c:a0:d4:c9:fd:05:
14:f7:a7:87:b8:54:05:72:5d:7b:54:9f:0d:32:37:
71:7e:c9:8a:07:5e:6e:0c:08:c6:7e:7e:43:f5:29:
8c:2b:4c:cf:a5:88:bc:42:1f:a9:1f:70:18:c6:70:
28:09:fd:3a:03:4f:ca:5f:96:b6:0c:d2:52:d8:e1:
63:66:3e:83:52:34:50:f2:c7:7e:62:63:4b:1d:cd:
f8:6e:dd:23:07:d5:f6:5f:2a:06:c9:da:c6:c9:9f:
69:54:3f:57:d9:ee:ea:be:e7:5b:4c:2e:77:a5:26:
18:43:29:eb:7c:5b:d4:03:72:d1:e3:07:d1:50:39:
10:0d:f3:29:7c:de:91:ef:84:94:0d:e3:76:2e:b0:
4c:d3:81:e5:9e:d4:2e:4b:e7:1a:9c:70:7d:d1:de:
88:c9:95:1a:0b:ee:67:76:6f:b1:71:70:2f:1f:8a:
51:c1:54:77:b2:2c:38:84:65:dd:4f:62:a4:e3:7a:
cb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:00:AF:69:E7:89:80:CE:37:0C:87:78:FE:0F:D5:23:19:FF:63:EA
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jgCvaeeJgM43DId4_g_VIxn_Y-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:a4:c3:72:94:8b:38:75:9d:41:a3:b0:e1:96:0b:04:e8:e7:
c4:14:bb:96:6c:03:d6:9c:74:72:ac:88:29:0f:d4:76:ac:c2:
f1:47:7f:46:52:64:a0:d4:f8:3e:c2:57:48:4e:43:9f:ba:fc:
5c:06:0e:15:f2:da:45:a9:1c:b6:de:dc:c0:70:08:cb:8e:58:
16:a7:5f:87:f1:ac:9e:85:3c:cb:49:e8:00:76:43:5f:de:4c:
77:8e:cc:c3:b2:16:ce:e6:ae:a5:01:41:66:59:a0:11:7d:0a:
24:62:3d:5e:64:9a:1e:f3:90:5e:f7:65:20:52:c1:7e:30:af:
1e:ed:5a:f7:d2:e0:03:aa:9a:0d:72:c7:76:79:69:1c:e2:86:
e8:32:19:ea:11:a3:52:f5:ff:14:e1:1a:94:45:2f:7b:96:24:
30:05:f5:91:e3:8b:b2:8a:d9:e4:b8:6a:4d:30:d2:2d:fb:4e:
46:e0:8e:3a:88:8b:7e:58:5b:95:a7:2f:96:19:0b:bf:b3:df:
ca:4b:6f:17:ee:5f:3a:c3:12:3e:9f:50:cc:ae:b0:f9:18:48:
0f:a8:29:43:d2:11:68:68:d9:db:d3:2f:61:6d:01:a8:ff:3e:
94:41:c9:04:8e:b9:10:75:8f:f1:2b:93:a1:a2:87:65:cb:7d:
ba:de:79:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:17:44 2025 by rpki-client