Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nBkJ1MjwUfeD05W9v0g1eu4EEyA.roa
File: nBkJ1MjwUfeD05W9v0g1eu4EEyA.roa (raw, json)
Hash identifier: vmdEhS+Tp46fP9hlFcF/BOsC+kqhvCg6/EYn/BDAneo=
Subject key identifier: 9C:19:09:D4:C8:F0:51:F7:83:D3:95:BD:BF:48:35:7A:EE:04:13:20
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CCB61DFC6C0020C35770B3BD1DAFF4CC4
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nBkJ1MjwUfeD05W9v0g1eu4EEyA.roa
Signing time: Tue 02 Jan 2024 18:13:58 +0000
ROA not before: Tue 02 Jan 2024 18:13:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cb:61:df:c6:c0:02:0c:35:77:0b:3b:d1:da:ff:4c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 2 18:13:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c1909d4c8f051f783d395bdbf48357aee041320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:f8:ab:af:8f:09:7b:cf:81:e1:39:21:90:
9c:60:b9:b5:03:ea:46:6b:7c:25:8e:bc:4d:9a:2c:
ea:37:c4:76:67:71:d4:d3:c5:a6:d7:0d:06:ce:9a:
04:c1:3f:bd:f4:da:7b:16:9b:f6:88:c3:80:24:1a:
58:66:65:6d:4e:bc:27:41:94:2b:c9:78:b3:c0:d2:
26:be:82:9b:92:25:72:88:b8:13:5a:98:34:d2:23:
9a:14:5e:76:73:4a:f9:d3:36:65:38:fd:b3:70:6e:
29:8f:43:b4:8c:08:4a:28:aa:5f:d9:e4:d7:fb:52:
0d:52:7d:e8:cb:a2:d2:dc:36:f8:46:41:fd:90:56:
ef:99:3c:ad:29:71:c4:5c:3c:f7:9e:2f:c8:1e:2d:
38:16:be:c9:a1:e2:68:4b:79:79:e4:c6:11:c5:32:
32:6c:12:5c:24:5e:d7:03:20:e1:7e:b7:33:24:7c:
0e:af:7f:ac:7e:10:36:2d:8a:0a:3e:9d:2d:cf:ca:
23:10:32:f5:53:1d:13:f6:b0:94:c2:a1:da:19:8c:
63:b7:3d:df:78:ee:5c:4d:68:58:90:60:82:42:fc:
fd:01:56:16:f3:e1:99:d4:fe:81:26:1f:8f:ac:73:
bb:64:56:c5:0f:68:cd:f2:59:fc:56:4c:b7:02:3d:
f9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:19:09:D4:C8:F0:51:F7:83:D3:95:BD:BF:48:35:7A:EE:04:13:20
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nBkJ1MjwUfeD05W9v0g1eu4EEyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:9b:91:d8:bb:a7:56:ea:08:9a:c6:5a:ea:d7:99:a8:bc:c4:
ce:05:03:ec:0d:6f:f2:9f:6d:b2:ac:4f:7c:a8:91:5e:50:cb:
86:f8:c6:b4:bf:fa:7c:85:d1:99:8c:2d:cb:91:79:94:5e:b5:
2e:dc:87:ec:df:08:b9:53:44:4c:c8:a4:2c:35:fb:13:9e:4f:
10:af:83:76:03:23:3a:f8:4c:12:5d:26:16:4d:c8:8c:6d:ed:
27:03:e7:5e:a4:03:5b:22:58:66:6a:0d:cc:70:c6:e8:1d:46:
54:71:81:c8:4b:19:fd:80:0f:ab:d6:81:3e:70:08:b2:d2:de:
3a:4b:0b:95:6d:f1:76:15:4e:7e:99:49:fd:54:d4:34:20:31:
b7:a1:3a:ec:09:32:03:ad:fe:6e:c5:a5:b8:0e:49:af:2d:3f:
33:2d:9c:0a:36:db:b4:29:80:07:02:cc:32:38:1a:57:05:86:
ff:43:fc:58:82:de:ec:63:81:07:bf:c2:d7:3c:13:17:64:ce:
e5:8a:72:83:6c:dd:32:cf:74:39:07:f4:29:9a:5a:f3:50:0f:
b2:93:c9:eb:e1:23:c9:1d:5e:21:1e:9a:f5:a8:05:b5:94:c9:
b6:f1:36:5c:7a:20:3b:45:11:f6:7b:b5:43:15:80:ca:74:c0:
18:2e:0a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:58 2025 by rpki-client