Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nc76EAlIVWh8GtrY5ft9xQ5rEMI.roa
File: nc76EAlIVWh8GtrY5ft9xQ5rEMI.roa (raw, json)
Hash identifier: fnzh8xGXj4vRb0bPUp7MpmdZqclVTkEeXLOBhR0s+U4=
Subject key identifier: 9D:CE:FA:10:09:48:55:68:7C:1A:DA:D8:E5:FB:7D:C5:0E:6B:10:C2
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CDB7A830E9B4912A383FCD1D4AF42699C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nc76EAlIVWh8GtrY5ft9xQ5rEMI.roa
Signing time: Fri 05 Jan 2024 21:14:48 +0000
ROA not before: Fri 05 Jan 2024 21:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:db:7a:83:0e:9b:49:12:a3:83:fc:d1:d4:af:42:69:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 5 21:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dcefa10094855687c1adad8e5fb7dc50e6b10c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:98:b6:43:bb:e2:ed:10:b8:81:43:0f:8c:
e8:ec:22:01:20:c3:63:bc:40:99:fc:a5:12:e1:1d:
c7:1b:9f:28:67:e4:ed:20:a4:98:47:cf:75:e6:e0:
bd:5c:14:ba:23:64:0e:be:f7:04:75:f1:e2:eb:93:
b9:57:a2:81:e2:28:a0:a9:12:f8:6a:6d:3a:49:a3:
49:95:b9:8e:9d:10:5d:03:1d:43:55:6a:ff:ac:9b:
76:ee:ab:15:e7:9b:96:6c:04:2c:ff:40:b7:58:d1:
ab:f4:04:b8:62:f7:c0:85:38:e9:d5:ed:23:9b:b5:
8e:47:5f:50:9d:74:54:de:19:07:72:94:f6:ce:06:
82:5a:8b:fd:3b:80:02:93:7e:a5:ec:83:62:8d:c5:
f8:85:dd:df:73:04:22:c0:f1:32:ee:81:28:29:a8:
61:82:7b:6f:b8:70:38:b5:56:1a:6d:1f:b4:2b:c0:
e5:a4:02:98:bd:4a:05:35:15:55:63:5f:09:61:5c:
e6:3b:32:41:ea:35:40:bd:0c:18:c6:b4:7f:f6:eb:
e5:80:b3:f1:64:86:60:75:80:20:eb:89:dc:1d:fc:
d8:b9:c5:ef:d4:ce:1c:dd:c2:d4:02:d7:4b:08:37:
8f:03:cf:a6:a0:b7:c0:66:fe:c3:96:ea:c6:9e:06:
d1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CE:FA:10:09:48:55:68:7C:1A:DA:D8:E5:FB:7D:C5:0E:6B:10:C2
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nc76EAlIVWh8GtrY5ft9xQ5rEMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:6b:b8:0f:f2:2e:c6:81:82:4b:43:f6:94:d6:05:56:dc:11:
92:74:25:19:e8:23:0a:e0:68:51:7a:ea:d6:b4:7b:f4:4b:31:
1e:92:cc:1d:46:8e:78:de:c7:48:5c:79:61:82:2a:e2:55:0b:
9c:13:1e:63:5d:94:96:98:f7:11:7c:4f:1b:83:3f:e2:b6:30:
47:6c:16:e5:59:ef:8f:79:9b:33:44:c2:61:a0:9a:f4:1d:99:
29:f1:90:70:f6:77:f9:01:60:de:e2:69:a1:ad:17:8f:2d:d5:
5d:d4:81:36:14:04:ca:7d:14:2d:07:57:3e:0b:fa:20:02:70:
c2:58:dc:fb:c2:2e:4a:02:5f:68:39:35:b7:b0:ce:ab:6a:22:
b9:25:11:3e:e4:52:5e:43:5e:e4:5e:94:b1:7c:a7:e6:ea:4b:
99:50:a7:3f:fa:b0:0b:db:04:90:c5:66:75:25:f7:19:39:11:
1a:7b:8e:d0:7f:06:85:5c:2e:50:c7:15:ba:15:db:70:e7:92:
69:cb:60:a1:54:94:f0:8c:57:f3:39:23:40:80:7d:1f:82:39:
60:19:4a:13:01:89:52:2b:0f:f2:fd:a6:0e:5a:0e:d5:c0:05:
52:1a:02:7c:04:8a:38:55:eb:7a:d5:3d:88:2b:0f:ce:0b:f1:
5f:20:50:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:11 2025 by rpki-client