Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/njed1lnHb5kj3CxlYqtxuUiZauc.roa
File: njed1lnHb5kj3CxlYqtxuUiZauc.roa (raw, json)
Hash identifier: 2Y4DzyRcvW93fWuGdx5C7sgaAaGeiCORuPFf7S5pBbM=
Subject key identifier: 9E:37:9D:D6:59:C7:6F:99:23:DC:2C:65:62:AB:71:B9:48:99:6A:E7
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CED7CFD650578D5C4DCE65C07AB6248F8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/njed1lnHb5kj3CxlYqtxuUiZauc.roa
Signing time: Tue 09 Jan 2024 09:10:40 +0000
ROA not before: Tue 09 Jan 2024 09:10:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:7c:fd:65:05:78:d5:c4:dc:e6:5c:07:ab:62:48:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 9 09:10:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e379dd659c76f9923dc2c6562ab71b948996ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d1:3c:34:bd:36:5f:69:11:7a:2b:a7:09:ee:
3f:d7:89:e3:7f:d2:cf:1f:1a:b7:4e:4d:20:a6:85:
d9:8a:6d:f5:41:3d:c1:91:f0:84:9f:10:b8:a6:34:
2d:0b:31:20:00:79:a4:d2:c6:dd:49:d1:71:2e:ef:
6c:57:60:73:30:80:fb:e0:69:fc:08:17:3e:ef:ea:
3b:78:c9:85:0e:09:68:db:b6:68:37:89:2b:c7:c9:
fb:d8:3c:0b:35:60:df:b7:70:38:fa:ff:9f:ea:92:
b5:98:13:29:0f:41:72:6a:38:41:10:f8:c7:a9:35:
36:1e:7f:7c:2a:8c:b3:d7:e2:d1:59:94:fd:c6:e7:
8d:41:82:c5:38:37:a0:bb:54:b8:29:49:07:1e:e0:
76:23:7e:cc:01:58:54:37:7c:d4:74:2c:5b:71:6e:
5b:51:87:f1:4c:fc:63:b2:64:dd:90:c7:1a:72:f9:
d0:7b:d2:cb:a0:97:27:cc:42:87:20:55:35:88:d1:
bc:da:68:0c:2b:e6:db:57:5c:30:2f:2d:4b:5f:4c:
96:2f:43:79:7f:93:f2:8d:e6:54:ad:21:76:cf:3e:
ee:05:ba:6e:b0:f9:e5:c4:81:e1:29:38:ad:c6:7a:
a1:51:2e:18:a3:6a:a5:75:e8:24:32:ff:82:ad:05:
ad:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:37:9D:D6:59:C7:6F:99:23:DC:2C:65:62:AB:71:B9:48:99:6A:E7
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/njed1lnHb5kj3CxlYqtxuUiZauc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:03:d4:8a:53:f1:2a:31:f4:0b:d3:08:c6:d7:41:ff:c0:66:
d0:d4:2c:6d:d9:c5:ca:57:8c:4c:40:48:85:48:c5:de:e6:ed:
76:e0:a3:1e:c5:52:4b:a2:80:3a:d7:87:98:75:39:87:80:4e:
36:2e:07:27:22:63:af:ae:0f:d8:11:9b:99:50:1b:16:a2:66:
c9:7f:7d:9a:2c:4b:4a:80:cd:fe:53:e3:23:33:51:45:63:68:
b5:7e:ad:66:e1:5a:42:84:a6:a7:30:09:9a:e1:cc:07:57:96:
4d:31:be:96:6b:32:d9:d6:13:20:b3:c4:7b:01:5d:44:c3:ae:
ec:c4:e8:d3:e1:e5:4c:f6:cd:37:ee:37:9a:a4:38:4e:54:dc:
74:be:2b:b8:f1:e7:91:d6:5a:78:61:f9:ce:67:e2:c4:db:43:
05:de:50:ad:4d:83:3c:f6:93:fe:1b:22:0b:c9:2d:28:2d:7b:
fb:35:74:33:6d:72:da:c5:0a:1c:20:5f:77:24:4b:5c:50:fb:
4e:bc:89:ca:22:a1:4d:8b:f8:6a:39:57:11:11:23:e2:a9:b3:
7f:7f:e2:a7:1b:aa:fd:84:b8:b0:74:28:d6:91:71:04:49:c0:
14:c2:35:a0:b5:82:2e:22:3e:d2:6d:ee:42:fb:b6:02:72:08:
e4:da:da:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:58:33 2025 by rpki-client