Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tAjc2N4miBMkR2J5fApgqK2BPZk.roa
File: tAjc2N4miBMkR2J5fApgqK2BPZk.roa (raw, json)
Hash identifier: 8OWAETIFGw3w3gVX2RM2Bqcew+C6A8cDNwBYcOt8t/8=
Subject key identifier: B4:08:DC:D8:DE:26:88:13:24:47:62:79:7C:0A:60:A8:AD:81:3D:99
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CC000AA9B7913363907D636D2C7878914
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tAjc2N4miBMkR2J5fApgqK2BPZk.roa
Signing time: Sun 31 Dec 2023 13:11:58 +0000
ROA not before: Sun 31 Dec 2023 13:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c0:00:aa:9b:79:13:36:39:07:d6:36:d2:c7:87:89:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 31 13:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b408dcd8de268813244762797c0a60a8ad813d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c5:4d:37:ad:42:a1:bb:c6:60:62:f9:ab:6b:
95:c6:f0:c4:6a:d2:ff:b2:7b:0c:e0:4d:a6:31:2a:
53:ba:7d:59:16:1b:72:2a:db:e4:9c:09:a7:40:73:
c5:ad:9d:ae:f2:fc:f7:62:7a:30:d7:ef:6d:52:35:
0a:63:a9:a1:76:c0:ab:31:a9:1a:05:bd:3c:bd:55:
4b:79:14:40:70:4b:fb:f2:5e:b1:2f:d3:f7:cb:76:
8b:10:65:fd:4a:62:bf:45:22:61:2d:a4:d4:1c:0f:
8d:19:74:8d:f8:be:69:1d:57:28:11:ab:e9:1f:18:
c2:6b:04:c3:96:d7:f3:d7:d3:16:e9:71:fe:0a:97:
c2:63:ff:64:2c:33:40:18:e8:1d:32:59:4d:35:be:
48:4c:07:62:cc:82:6d:fd:5d:90:7f:69:9f:08:10:
9a:23:44:a2:f8:4f:2a:fe:1d:8a:16:53:d6:8f:93:
b8:e2:44:ea:d5:da:70:f6:ea:f0:f5:24:6f:3d:b1:
00:a0:3a:4b:8f:83:36:7d:11:59:fb:04:ce:6c:a0:
5e:73:2b:87:b0:eb:ff:32:b4:37:a6:e6:9d:11:14:
97:3a:7e:a0:f4:ee:73:6b:af:ab:9f:ab:6f:36:01:
2d:6e:a2:6d:9e:5d:95:2f:7d:94:97:7e:35:79:be:
62:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:08:DC:D8:DE:26:88:13:24:47:62:79:7C:0A:60:A8:AD:81:3D:99
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tAjc2N4miBMkR2J5fApgqK2BPZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:85:1e:3f:e9:94:03:ca:96:1b:25:67:00:5c:34:ab:38:b9:
1f:d6:47:d1:aa:c0:5b:83:99:78:67:a6:7a:88:48:45:9e:1b:
4a:52:6d:05:a5:5f:80:fe:13:7f:e9:8e:8f:78:05:7d:f7:69:
9c:d4:40:5b:f0:29:6f:97:1b:70:e0:f0:63:1f:e7:86:81:5e:
b3:c4:9e:b8:bb:6b:c1:1c:84:a8:c2:03:3b:0c:ce:7e:79:b6:
f6:41:f4:98:60:03:32:02:a3:76:83:8b:58:a6:3d:30:1c:e1:
c7:4b:26:12:4a:6a:23:cb:4a:66:cf:2f:ea:4e:8c:35:a5:9b:
dc:c4:cf:41:c2:52:27:e9:64:56:be:71:b5:2c:9b:c5:bf:cf:
d7:0f:cf:89:7e:b5:60:c0:ee:bd:39:ca:3e:a5:e5:fd:ff:26:
f1:12:e9:ee:f8:93:61:6f:cb:89:90:fe:20:86:35:d9:ba:3c:
5b:e0:5b:45:4c:3d:b4:69:07:67:9b:54:88:15:91:4d:5d:a7:
c8:73:d2:4e:6c:63:96:7d:5e:ac:82:ee:bf:93:ce:31:50:80:
f0:81:d1:07:92:4f:3b:07:2f:8e:65:9a:a0:bf:d2:df:33:c3:
ae:eb:76:34:05:22:e2:2f:f2:09:a3:18:7d:03:20:5c:ec:78:
3f:b7:6d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:34 2025 by rpki-client