Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jjvpNK2Jwjf2SPjCabjZYPhkZjU.roa
File: jjvpNK2Jwjf2SPjCabjZYPhkZjU.roa (raw, json)
Hash identifier: zvVb66p4qSfUfCofoUMF0iyzdK56UN/5hGABHQ7NISw=
Subject key identifier: 8E:3B:E9:34:AD:89:C2:37:F6:48:F8:C2:69:B8:D9:60:F8:64:66:35
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DC442B216BE4EB723B2F956238F7FC1C0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jjvpNK2Jwjf2SPjCabjZYPhkZjU.roa
Signing time: Tue 20 Feb 2024 02:05:21 +0000
ROA not before: Tue 20 Feb 2024 02:05:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:c441:dbab/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c4:42:b2:16:be:4e:b7:23:b2:f9:56:23:8f:7f:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 20 02:05:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e3be934ad89c237f648f8c269b8d960f8646635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d2:b7:52:f3:99:72:a4:c7:9d:c5:84:75:1a:
0d:31:d0:4f:88:9a:cd:50:da:69:b1:82:1a:3c:93:
23:b4:cf:31:de:b9:8e:7a:4a:d3:91:ec:6b:18:be:
4d:f5:73:b0:37:ce:ff:ef:4b:d5:91:da:3c:8c:00:
13:14:71:34:0c:9f:d5:37:a3:a8:35:49:72:a6:ba:
80:4e:6f:33:da:0b:c2:13:94:9c:6d:06:d3:02:45:
72:4d:0d:d7:cd:b3:e5:2a:89:9b:ba:3b:fb:1a:d8:
96:cd:31:18:b8:07:cf:74:8f:6e:81:81:8a:ff:69:
2c:8e:6d:08:9e:58:04:fd:58:90:86:06:aa:70:57:
f7:4e:3e:b0:3e:14:be:72:90:82:17:ef:0d:eb:fa:
d7:56:ef:92:aa:51:47:57:75:14:c5:6d:09:cd:bf:
58:4e:28:f7:24:5f:04:81:6d:71:3b:93:8c:39:97:
42:99:22:7d:fd:2d:cb:fa:3c:8b:c4:44:c0:7e:10:
02:df:ec:78:63:b0:57:5f:d7:89:b4:97:97:2a:b4:
fa:08:eb:95:e9:de:8f:2e:2c:88:f3:de:c7:99:67:
87:e6:10:72:b4:c0:23:06:be:3b:e2:08:15:20:2d:
2d:c9:d9:9a:05:e8:c3:c2:a9:02:fe:02:32:0c:36:
d3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3B:E9:34:AD:89:C2:37:F6:48:F8:C2:69:B8:D9:60:F8:64:66:35
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jjvpNK2Jwjf2SPjCabjZYPhkZjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:a3:fb:20:7b:02:07:21:f2:d5:41:d1:26:9c:9e:c2:6a:42:
26:1f:bd:73:9d:a1:f5:3c:94:a0:99:2a:b7:f3:d2:5a:d2:fd:
60:2b:81:24:18:31:3a:73:f8:b8:4b:0e:74:e5:22:49:9d:20:
7d:d6:78:8e:36:1c:0d:ed:d4:cb:ee:13:86:30:ee:3b:85:94:
d9:10:43:bc:73:e3:af:b8:06:7e:04:d0:55:8a:1c:27:b6:78:
82:bc:23:d6:62:a0:c2:30:54:6c:82:96:e6:18:94:1d:09:d4:
95:56:fc:0d:fc:ef:5d:2b:6f:38:9c:60:9d:62:3a:e0:22:1a:
62:2f:bd:5c:c2:26:86:00:f7:e5:64:83:1e:d8:ba:6b:7b:fc:
57:a0:93:61:9e:75:fe:d2:2b:13:35:99:eb:e1:a3:a4:da:dd:
df:29:10:c3:77:29:c0:7c:91:46:71:1d:dd:a8:55:84:2d:08:
d6:12:59:88:d3:e1:a4:81:c4:08:ac:ed:fc:95:76:14:f4:f8:
24:02:50:27:1f:54:2d:87:b9:43:4c:40:ac:9d:86:66:47:58:
6e:e8:37:5e:2e:dd:5c:5a:0a:21:7f:aa:c7:6c:b1:45:76:ce:
9c:17:bc:e6:4d:39:59:8c:70:20:6b:fa:e1:71:84:63:ac:98:
ea:a2:08:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:34:35 2025 by rpki-client