Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nzcg7nVVzy6CjBBaP_CVxugR_sg.roa
File: nzcg7nVVzy6CjBBaP_CVxugR_sg.roa (raw, json)
Hash identifier: GEPHhQzKykKQa6RG0TvDzL7yeSv6O0yBiqj24WTmflQ=
Subject key identifier: 9F:37:20:EE:75:55:CF:2E:82:8C:10:5A:3F:F0:95:C6:E8:11:FE:C8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB9C97B4E70DBE6F481CF4091B2BD33AB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nzcg7nVVzy6CjBBaP_CVxugR_sg.roa
Signing time: Sat 30 Dec 2023 08:13:58 +0000
ROA not before: Sat 30 Dec 2023 08:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b9:c9:7b:4e:70:db:e6:f4:81:cf:40:91:b2:bd:33:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 30 08:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f3720ee7555cf2e828c105a3ff095c6e811fec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:a6:2e:65:cd:9f:83:5b:92:4a:3c:99:e3:
73:f6:9b:67:b1:41:6c:5f:af:41:7b:43:92:8a:2d:
fb:c6:b3:29:d8:88:11:3b:4f:99:0b:72:fa:0d:f8:
65:25:e1:93:f5:c6:d1:ab:84:dc:3f:13:bf:03:95:
fa:ae:b5:26:92:77:a1:84:1b:1d:0b:f2:c4:db:ab:
74:66:4a:e7:2a:71:18:a1:f4:54:ab:26:85:a7:34:
d2:ef:b0:3b:7d:ad:e4:bd:6c:03:0d:6c:c2:d7:db:
a1:6e:f8:80:ea:60:54:57:1f:d3:b7:81:de:16:6a:
fa:25:b3:e1:85:56:24:bb:4d:33:37:79:22:f2:8b:
04:57:9d:99:5a:4a:c1:18:64:3f:93:33:f7:ed:dd:
26:20:e1:d6:34:0f:38:65:d7:9a:5e:5b:4a:6f:e4:
70:37:b9:e5:26:40:1d:20:fa:9c:02:d3:72:49:6b:
c5:5d:4e:d5:29:3d:6e:36:5e:cc:34:09:78:ee:f6:
be:61:70:e3:04:8f:9f:e6:40:f7:e4:07:03:90:03:
bd:f9:75:59:47:73:3a:20:71:5e:26:bc:05:83:2e:
3f:57:c7:f8:3d:b0:9c:fc:ca:36:80:17:d0:ce:05:
5f:0c:ec:dc:11:ca:54:6c:8c:4b:8f:08:8b:82:4b:
ba:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:37:20:EE:75:55:CF:2E:82:8C:10:5A:3F:F0:95:C6:E8:11:FE:C8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nzcg7nVVzy6CjBBaP_CVxugR_sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:73:1a:f3:53:2d:72:ee:dd:78:77:17:65:5d:02:aa:d8:dd:
24:8c:38:40:0e:d3:c1:b1:74:f2:05:62:59:bc:89:99:97:ed:
62:51:44:f3:8e:c1:15:37:bc:45:d0:47:98:64:83:f8:69:f2:
bc:fb:0b:68:23:92:e6:c9:66:9e:93:4f:72:ad:e3:79:25:6d:
46:7e:3d:ad:6b:69:c7:d8:11:f5:d0:dc:b6:31:60:38:94:0a:
86:54:19:4f:4a:14:67:a7:0c:76:1c:ed:72:64:7c:7e:ed:ce:
cf:f6:0f:b2:7a:51:d5:f6:00:d4:81:09:72:5d:39:48:74:0c:
7b:9f:4a:f0:8c:aa:fc:70:40:7b:1b:5f:e3:f4:f5:6a:bc:bf:
52:b9:93:ff:b7:d2:07:5a:4d:16:28:80:f2:71:fb:a9:d8:9e:
48:4d:37:9f:63:c1:9d:db:6f:41:81:67:dc:ee:a5:89:3a:af:
45:3e:74:ff:59:7c:bf:c8:34:15:1e:cf:05:9f:f9:7b:0d:92:
17:98:3f:e3:24:1f:dc:f5:63:3b:7d:de:c9:7e:b9:8c:de:3c:
72:29:d3:0b:55:3b:9d:b3:08:a9:d1:54:fa:1d:f0:f1:fd:06:
b5:94:36:a1:70:61:3d:8f:f1:d8:06:a2:96:c0:f0:3b:87:b5:
13:d2:16:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:39 2025 by rpki-client