Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tNqOvl2qDdQHyVaUuk1tFxUGFEY.roa
File: tNqOvl2qDdQHyVaUuk1tFxUGFEY.roa (raw, json)
Hash identifier: zHxsolnzOAuZvuaQUZMJsvESWzSgPHnVhEV9zqUcUOE=
Subject key identifier: B4:DA:8E:BE:5D:AA:0D:D4:07:C9:56:94:BA:4D:6D:17:15:06:14:46
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D3D87E101E3B501CEBB98798DE2F72597
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tNqOvl2qDdQHyVaUuk1tFxUGFEY.roa
Signing time: Wed 24 Jan 2024 22:12:11 +0000
ROA not before: Wed 24 Jan 2024 22:12:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3d:87:e1:01:e3:b5:01:ce:bb:98:79:8d:e2:f7:25:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 24 22:12:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4da8ebe5daa0dd407c95694ba4d6d1715061446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:14:bf:73:71:e0:ed:65:7e:b5:0d:56:5d:18:
83:08:1b:6f:5b:e0:25:e3:95:df:4b:98:f2:87:43:
04:9d:8f:72:ae:1a:71:63:d2:18:a7:17:8e:de:ad:
73:e8:e4:02:cd:37:63:65:85:0e:76:86:10:41:93:
fa:d7:58:cb:e0:05:9a:e7:fb:23:b7:d6:db:f3:4a:
31:15:11:1b:bb:94:06:90:1c:13:8f:29:2f:f1:db:
28:ae:53:ec:d1:26:50:39:01:6a:3d:f0:33:73:aa:
4d:3b:ac:6a:44:e5:3f:26:f9:36:96:92:bc:04:19:
a0:0c:73:55:2b:05:4b:24:84:ea:fb:69:1f:7f:73:
5c:a1:bb:48:b8:36:75:d5:e0:75:8f:17:d6:59:e0:
35:14:61:74:86:eb:fb:26:bc:77:93:a3:25:2e:8a:
be:fa:aa:47:4a:61:39:80:02:a6:0f:0e:f2:72:77:
3b:3e:96:28:99:87:20:bc:41:c4:34:2b:60:37:9d:
34:0d:c7:29:6a:4c:13:61:1d:04:71:9d:3a:ef:11:
c0:6e:c9:c3:25:73:bd:9b:59:ad:0d:a7:8f:02:b8:
f2:d1:b5:aa:69:d6:56:dc:c6:4e:8b:27:4b:c8:31:
c3:0a:a1:26:8c:a9:a2:e0:5f:5f:18:6a:e1:8e:d4:
2a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DA:8E:BE:5D:AA:0D:D4:07:C9:56:94:BA:4D:6D:17:15:06:14:46
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tNqOvl2qDdQHyVaUuk1tFxUGFEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:62:8f:63:03:aa:66:f8:d1:91:cf:59:d9:2f:7f:ce:36:5b:
e3:0e:e5:5d:68:b3:1f:d9:56:6c:2f:bc:82:db:6f:c0:db:99:
ea:db:cc:13:dc:d3:23:b7:4b:66:19:ee:bb:a3:a8:4f:fc:2e:
3a:da:10:6f:df:56:7a:17:1c:bb:53:6a:07:37:ae:c5:24:92:
df:79:57:1f:f6:f7:9c:b3:75:f8:de:64:55:c4:35:e2:92:8b:
10:b5:73:08:0e:9e:66:7f:99:53:5f:cc:6b:de:28:40:75:a7:
10:27:8f:b8:6c:ea:95:8f:16:f5:9d:2d:74:73:41:79:55:8b:
1f:e1:fd:7c:5e:cf:34:60:b5:a7:53:1f:44:ef:37:b4:98:cd:
27:b8:d9:5f:19:ce:fd:bf:59:93:d1:3c:af:ca:d4:79:83:f8:
38:83:68:da:de:39:b0:d8:2e:ef:03:fe:66:2a:87:57:ea:98:
0f:19:15:58:cd:50:85:5e:87:af:2a:9b:fa:9c:aa:54:7e:59:
ac:1a:95:a0:11:99:cd:10:6f:d1:7d:b6:00:35:ac:64:9a:f1:
97:9b:9e:09:3a:f2:c5:6f:16:e4:90:6a:1c:d1:d8:55:f6:de:
07:28:29:db:b4:b1:a6:a6:7a:77:00:2f:04:5b:70:e5:eb:0d:
e0:9b:1c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:23 2025 by rpki-client