Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tLBcQZxxEqnIu4nD7XqhlwtDc_o.roa
File: tLBcQZxxEqnIu4nD7XqhlwtDc_o.roa (raw, json)
Hash identifier: G1jNeOc4W2s1vxagzgRpqAMUaFCb8J6hpeLS8jLfVLc=
Subject key identifier: B4:B0:5C:41:9C:71:12:A9:C8:BB:89:C3:ED:7A:A1:97:0B:43:73:FA
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CBF92CD952053F4F902A5C9EBC6023EC2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tLBcQZxxEqnIu4nD7XqhlwtDc_o.roa
Signing time: Sun 31 Dec 2023 11:11:58 +0000
ROA not before: Sun 31 Dec 2023 11:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:bf:92:cd:95:20:53:f4:f9:02:a5:c9:eb:c6:02:3e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 31 11:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4b05c419c7112a9c8bb89c3ed7aa1970b4373fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:8f:a3:d5:70:bb:2c:eb:35:86:9e:d9:9d:
16:7c:a0:78:9e:f2:83:8e:ba:90:23:c1:3e:34:aa:
c3:a6:96:6a:25:9c:c7:c4:e8:82:d9:d9:a3:1d:0b:
e4:ec:5a:f0:02:ef:b2:67:63:e4:16:88:62:35:d5:
3f:e9:85:b6:12:65:9c:ad:64:d2:08:05:cd:b4:6a:
e9:84:b6:75:73:2f:9a:f2:90:36:ea:e1:bc:3b:ed:
02:fe:37:9b:dc:2b:0b:e5:3c:b5:af:91:d2:f8:2f:
38:b6:20:a0:5d:33:61:86:5a:4c:f7:7d:42:dc:4b:
f1:0c:8d:fd:48:96:72:4c:62:7d:48:71:48:61:e7:
28:03:c3:67:7c:9b:88:83:96:62:5f:53:e5:5e:40:
33:c3:2a:7a:e5:c8:50:90:bc:5d:f6:04:52:4e:bf:
f3:d2:42:e9:b3:e7:5f:2b:6a:9e:da:f6:69:72:1a:
58:61:7a:27:a0:23:de:56:ec:20:c3:14:78:37:70:
7a:52:42:83:8c:4d:57:a5:c8:25:2a:32:43:87:39:
0b:2c:14:5a:e6:70:fc:0a:51:92:b2:7b:b3:9f:b8:
c8:39:49:67:c6:2b:a5:4a:5c:48:ee:5a:78:9e:fe:
90:bd:5b:c1:b8:92:ae:4f:a5:2a:ed:c3:8c:8e:6f:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B0:5C:41:9C:71:12:A9:C8:BB:89:C3:ED:7A:A1:97:0B:43:73:FA
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tLBcQZxxEqnIu4nD7XqhlwtDc_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:04:63:68:dd:11:3c:c3:36:89:3c:5b:fb:3f:73:09:be:65:
2e:13:38:8d:7d:1f:92:f2:f9:48:22:e7:35:bb:d0:38:c2:db:
f1:34:26:e8:71:39:bd:5c:7b:5e:f8:b3:5c:0a:86:e9:88:a3:
38:5e:37:4c:a3:5c:b3:9d:81:27:b0:74:8f:59:89:6e:a5:d5:
4f:16:e6:70:17:1b:72:86:88:47:e3:91:44:5a:d6:97:15:fa:
f4:89:bd:80:ad:73:c3:b5:d9:77:98:90:55:97:7b:da:b4:07:
0a:e2:31:1f:43:38:2c:02:29:6d:1f:97:9b:d6:fa:2a:61:9a:
e3:e1:2a:cb:1f:dc:2c:e4:86:fb:ef:6c:ab:25:cc:ba:cd:36:
7e:36:af:68:c9:1b:02:af:b6:b5:d9:5d:82:e8:cb:82:26:5d:
0d:68:14:ba:93:b7:22:1a:e1:29:7b:62:86:51:6b:79:ce:9b:
86:5d:72:f3:44:04:86:91:08:8e:e4:b0:d8:5b:2b:76:3c:0c:
ed:3e:95:a9:2e:42:09:13:31:87:b0:e3:de:9f:7d:7f:49:6d:
d0:25:7b:60:00:d2:1e:28:3e:b0:52:86:f7:b5:b4:90:ee:8e:
a7:74:96:7f:0c:b9:41:8d:06:09:43:ed:13:ab:51:d1:ab:99:
7d:5c:8e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:04 2025 by rpki-client