Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/o_bIbpoBOPAyl89RFAr6gZESpgg.roa
File: o_bIbpoBOPAyl89RFAr6gZESpgg.roa (raw, json)
Hash identifier: 4Gr4TRVhmqT1plPBWQT+5c89ig9SJh7+FXY9YKozhHY=
Subject key identifier: A3:F6:C8:6E:9A:01:38:F0:32:97:CF:51:14:0A:FA:81:91:12:A6:08
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9E1B4C37223D848C1EEAC19DC6F721B1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/o_bIbpoBOPAyl89RFAr6gZESpgg.roa
Signing time: Sun 24 Dec 2023 23:13:58 +0000
ROA not before: Sun 24 Dec 2023 23:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9e:1b:4c:37:22:3d:84:8c:1e:ea:c1:9d:c6:f7:21:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 24 23:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3f6c86e9a0138f03297cf51140afa819112a608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b8:9c:56:26:2c:96:39:d7:ac:db:92:b0:de:
03:bb:b1:53:1b:ed:e4:fd:c3:85:1b:d1:23:d2:94:
a7:4b:fc:39:7e:ad:db:71:7f:37:3d:78:86:51:f1:
b5:5a:4c:38:cb:ee:0f:05:c2:16:e8:12:b8:b3:87:
d0:32:93:e6:81:76:cf:41:db:18:08:3f:14:45:b4:
f3:1d:43:ff:8b:ba:fb:ac:7b:6b:ba:4a:25:b1:1b:
ce:46:7a:63:79:20:3b:9c:b5:78:e4:7c:f7:4e:4e:
ce:6a:f2:96:74:66:f9:ad:c7:68:c7:4d:76:ae:37:
55:ae:e0:05:eb:a5:1d:fb:df:76:cc:05:8c:8c:c6:
81:76:96:7d:6c:63:7a:d7:0b:1e:d5:63:6a:43:c6:
83:4d:e9:89:43:90:fe:8a:e5:24:da:f2:61:91:12:
58:3a:b0:65:58:ba:92:7b:b2:7b:3c:f0:c2:c0:01:
f2:56:d0:80:54:e0:d0:40:d3:ff:92:b4:59:8e:f5:
e2:3e:87:f8:6e:26:f1:9a:23:f3:12:66:48:fe:d1:
9b:40:bf:ae:60:8e:7b:f6:02:50:a9:14:66:8b:d4:
6e:b7:b3:7a:0d:47:0a:e9:9a:c1:77:5f:48:cf:2a:
f2:12:62:58:b0:6e:1b:57:1a:3d:2e:f1:a4:4e:55:
79:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F6:C8:6E:9A:01:38:F0:32:97:CF:51:14:0A:FA:81:91:12:A6:08
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/o_bIbpoBOPAyl89RFAr6gZESpgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:15:67:07:fa:8e:c2:31:19:46:70:b3:41:a9:9f:36:46:e6:
f1:21:e0:34:09:71:49:4b:77:49:50:04:8b:45:f4:9c:78:26:
25:ee:3f:4b:cc:23:7d:74:b6:48:1e:57:b5:d0:c2:7d:4d:a2:
40:42:bd:55:e0:1f:5d:1f:67:2c:c6:62:6e:f7:b3:4c:57:77:
54:23:8e:86:e2:e8:18:16:4f:67:4a:c1:a7:60:ed:03:53:50:
c5:36:e7:13:28:4c:bd:e3:2d:e7:a2:65:0d:65:91:83:e9:c7:
65:20:3e:26:64:0d:1b:00:45:c7:de:3b:c0:3c:c8:bb:dd:0d:
35:be:db:7e:84:b1:42:69:3f:9a:0a:a9:8e:97:ac:b6:f7:04:
b0:ef:5a:10:5a:89:36:ca:d5:59:fb:d0:ac:ba:c3:d8:01:9d:
6e:2a:dc:0c:68:be:8a:ce:88:23:7d:ed:6b:55:e0:f3:33:de:
54:66:9a:40:73:46:70:90:5c:46:fb:5e:b4:d2:ab:d3:6a:f4:
99:67:95:e3:f6:8e:09:ed:4c:25:52:14:c5:9e:ac:02:21:33:
49:c6:90:89:67:64:bd:59:76:5d:ec:3e:d4:56:68:be:65:07:
6b:15:b6:11:04:79:86:30:f8:b9:04:6f:90:42:b0:a2:32:34:
22:f0:86:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:42 2025 by rpki-client