Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mYnnLfX974M53DlJpxDym45BWrg.roa
File: mYnnLfX974M53DlJpxDym45BWrg.roa (raw, json)
Hash identifier: wA3DaooW0Hn7oQPeo9h2oas9tSxiyDJ/nngHgZ8J3G8=
Subject key identifier: 99:89:E7:2D:F5:FD:EF:83:39:DC:39:49:A7:10:F2:9B:8E:41:5A:B8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C88701F0C7DC84B832535B97DEE648ADB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mYnnLfX974M53DlJpxDym45BWrg.roa
Signing time: Wed 20 Dec 2023 18:14:58 +0000
ROA not before: Wed 20 Dec 2023 18:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:88:70:1f:0c:7d:c8:4b:83:25:35:b9:7d:ee:64:8a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 20 18:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9989e72df5fdef8339dc3949a710f29b8e415ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0f:bf:a9:ec:d9:bc:f7:ab:80:17:6b:a0:2f:
cd:d5:71:0c:1f:0e:22:0e:91:a1:a7:5a:33:f4:2a:
1e:b2:91:95:80:08:c9:42:75:b2:1d:bf:f2:6e:15:
d6:39:d7:52:5d:4c:4e:7e:be:8e:fa:64:e4:a5:e2:
02:8f:f3:f3:f0:e8:a2:d8:0f:a1:5e:ae:92:f9:ad:
46:55:11:c5:8a:93:e9:d1:71:26:80:4d:15:81:eb:
35:1c:91:95:34:97:fa:7c:53:49:56:7d:56:9e:dc:
b6:fb:01:34:70:ce:d0:da:9f:db:ae:82:42:ae:8f:
ca:88:5f:4d:95:de:32:e5:0d:9f:c5:55:09:44:f9:
2a:47:cc:00:e4:b2:ed:13:0e:c2:ff:fa:91:2f:24:
67:77:26:3a:7d:3a:21:6a:98:9d:84:79:83:c5:2d:
9c:fd:a8:34:5f:05:fd:02:59:e5:ac:06:d0:dc:8c:
85:ce:5d:7f:08:d9:04:ed:40:6c:97:fa:ad:b9:8f:
a9:4c:dc:71:e4:6c:a1:9d:fb:49:c4:5e:21:22:61:
c4:b2:db:5e:07:3c:f7:5b:3d:4e:83:25:63:55:c1:
8a:71:4a:2a:2a:d4:4f:c4:03:85:25:13:89:73:e7:
15:4c:59:20:91:66:c1:f9:a5:c2:4b:c0:d6:cd:da:
be:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:89:E7:2D:F5:FD:EF:83:39:DC:39:49:A7:10:F2:9B:8E:41:5A:B8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mYnnLfX974M53DlJpxDym45BWrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:fe:32:b0:be:2c:f0:d4:7b:26:a6:7e:7c:20:cf:75:f1:c0:
cc:b1:9a:f3:d5:ed:ef:b5:0f:52:35:c9:3c:1b:39:1d:bb:4a:
23:6c:ff:b2:7b:41:94:4d:66:de:93:93:3c:ed:cf:9e:d9:21:
22:d3:1d:3c:27:a6:88:f2:fd:5f:24:da:58:7e:d1:3f:56:d2:
98:e5:48:b2:25:b4:f8:fe:31:f4:1e:28:bd:05:99:a6:77:50:
9f:d8:33:5c:cc:dd:91:92:e2:a9:44:a5:85:4a:28:5d:14:0d:
06:30:f4:c6:63:f1:8c:59:be:55:8a:e9:b5:ce:c9:c0:5b:27:
a1:c6:b4:54:e0:93:d2:5e:b5:9b:8f:46:e3:32:dd:d4:94:ac:
37:81:c3:48:98:74:dd:fb:17:e4:7e:32:65:0a:30:3c:75:fb:
94:a2:25:88:c8:e5:6d:c2:99:03:d2:44:e9:af:5a:21:6e:0a:
eb:00:76:a3:93:f1:51:6e:19:51:92:22:18:b4:dc:02:6b:0a:
e9:ff:9b:b8:0e:7b:cc:fc:e1:61:88:5c:62:54:19:96:ea:87:
b9:28:17:56:f2:79:60:55:5a:05:2c:78:f7:f5:85:aa:ef:04:
bd:e0:1a:4a:73:fb:42:9f:30:c8:57:f5:f3:9d:6b:35:e2:1d:
ab:07:78:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:02:47 2025 by rpki-client