Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ppndlQFyuGXCKRzVbVR7epujahQ.roa
File: ppndlQFyuGXCKRzVbVR7epujahQ.roa (raw, json)
Hash identifier: JTqe3d6DDlLwWUOKLEpg4w0CAQrWltrVdnRIyWtI060=
Subject key identifier: A6:99:DD:95:01:72:B8:65:C2:29:1C:D5:6D:54:7B:7A:9B:A3:6A:14
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CDB447E3B89545476F6A38E7C302D5DF2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ppndlQFyuGXCKRzVbVR7epujahQ.roa
Signing time: Fri 05 Jan 2024 20:15:48 +0000
ROA not before: Fri 05 Jan 2024 20:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:db:44:7e:3b:89:54:54:76:f6:a3:8e:7c:30:2d:5d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 5 20:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a699dd950172b865c2291cd56d547b7a9ba36a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e8:f4:3c:fa:0f:96:44:33:d7:36:36:cf:e1:
38:0e:17:21:e6:f6:e5:bd:79:5b:6d:63:65:e1:9d:
6c:52:dc:9b:7f:53:5c:88:76:92:21:96:21:c7:b5:
73:19:c3:bd:b2:89:d5:12:20:52:c7:6f:f9:fc:f3:
0b:2e:a1:9c:77:c8:44:e0:51:c7:e1:4c:86:b1:33:
81:39:79:45:9e:a0:5a:68:b4:a9:2e:4e:b4:09:86:
79:66:97:64:27:55:43:b6:6a:50:63:8c:e5:66:38:
7f:cf:c0:71:82:f8:ba:05:8d:bb:7c:52:8d:78:fe:
cd:b8:77:61:96:6b:c2:5a:71:e4:46:4f:79:0e:97:
92:1c:75:ff:08:c1:f6:b2:d6:08:bf:33:36:77:70:
f1:6c:b8:ae:d4:7c:48:c0:9c:7e:95:0a:79:62:fa:
64:60:d3:31:d8:f7:30:59:64:94:26:51:a8:c4:d5:
c0:bc:64:7c:16:1c:dc:b0:ea:cc:da:69:f9:23:fa:
f4:64:bc:84:a7:c7:01:c3:2b:fb:fa:bf:e1:24:77:
60:05:43:e7:b3:09:4d:03:1b:2c:54:b4:43:dd:49:
ea:20:9f:e9:2c:44:84:af:59:fe:cf:f2:10:3a:54:
5e:64:30:c0:c9:b6:5c:31:3a:98:e5:d0:15:4f:da:
ab:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:99:DD:95:01:72:B8:65:C2:29:1C:D5:6D:54:7B:7A:9B:A3:6A:14
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ppndlQFyuGXCKRzVbVR7epujahQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:b2:64:76:9d:6c:56:ef:52:c4:74:31:81:58:f5:c7:9a:38:
5d:a1:64:df:49:3d:01:1c:53:10:51:60:49:c7:a4:db:57:59:
c3:fa:8a:8d:2a:25:d9:8b:65:3d:53:37:e6:83:f9:e7:aa:b8:
66:86:2a:ad:0e:b2:24:b9:31:de:2f:0a:08:7e:98:72:b6:ea:
78:a2:04:74:89:3b:2f:99:fd:7a:59:f8:06:93:8a:0f:3e:44:
74:13:e6:9c:67:cb:8d:cd:bf:86:d1:94:fa:53:43:1d:40:d0:
70:c1:6b:8d:ae:82:72:6d:13:39:bd:92:75:17:d0:5d:e0:06:
df:a4:1c:7f:e8:90:1a:99:16:25:c8:4e:75:b6:e9:a2:a6:69:
25:fc:d7:d3:5e:7e:69:c8:89:f3:8c:06:85:6d:cd:1e:e4:8e:
eb:56:8f:83:9b:c4:63:ef:ee:ab:8d:08:f7:90:91:b0:81:73:
cd:9e:ba:53:61:b1:0d:8a:4b:35:a1:b1:93:3e:23:2c:42:30:
16:60:08:ec:fc:2b:da:29:22:d7:64:30:76:68:e5:af:fc:d4:
64:bc:82:f8:33:3f:d8:e8:11:40:c9:52:bc:66:ca:40:e8:b0:
85:1b:0f:97:71:44:99:f6:89:a9:29:10:19:3c:69:e5:8b:68:
35:13:be:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:14:56 2025 by rpki-client