Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uJH8-gc3FUbjy9FuM-1hNPoeX7Y.roa
File: uJH8-gc3FUbjy9FuM-1hNPoeX7Y.roa (raw, json)
Hash identifier: T5W29/JP2xWFi50uFr8NEgER0COLBcgEu14fjeSkn/4=
Subject key identifier: B8:91:FC:FA:07:37:15:46:E3:CB:D1:6E:33:ED:61:34:FA:1E:5F:B6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA71F5795ACD4EB53FBB4F3D6EB1D5285
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uJH8-gc3FUbjy9FuM-1hNPoeX7Y.roa
Signing time: Tue 26 Dec 2023 17:14:58 +0000
ROA not before: Tue 26 Dec 2023 17:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a7:1f:57:95:ac:d4:eb:53:fb:b4:f3:d6:eb:1d:52:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 26 17:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b891fcfa07371546e3cbd16e33ed6134fa1e5fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a5:f5:dc:1e:2e:b0:19:ba:1e:b6:de:a3:07:
60:c4:d2:12:65:62:10:53:3b:d5:ab:28:31:04:f4:
38:e9:ce:e3:89:c2:2b:87:5e:84:d2:b6:fa:eb:98:
76:ac:8b:10:92:3a:6b:e7:9c:28:35:84:c1:2a:80:
6a:6e:ea:c6:82:b4:c0:44:33:02:bf:c8:69:61:c4:
4a:59:a3:ac:ec:e8:ee:3b:75:62:9b:79:a1:a4:95:
fa:3f:1e:6e:d1:07:94:1c:cc:91:a7:bb:4f:d8:f7:
aa:c6:dc:08:8d:82:f9:1d:a4:74:d3:48:c4:bb:8b:
13:64:5f:06:98:f0:9e:de:68:00:96:d4:17:72:84:
68:b2:6a:6a:8d:63:d5:86:7a:4c:c5:09:a8:28:21:
86:f6:e7:b3:d6:ea:e1:8f:9b:6a:16:84:dc:d0:9d:
25:4d:7e:55:99:e0:53:1f:ef:0c:0c:7b:48:15:81:
4f:cc:23:30:23:b0:6d:f8:2c:1b:27:4c:8d:70:f6:
59:bd:7e:e8:bd:33:3b:e0:36:70:90:a6:cf:99:d7:
31:a4:6c:61:34:82:8f:7e:19:c3:a9:c1:08:5a:9f:
a5:14:48:a4:75:ce:fd:d8:3b:1d:27:ed:4e:3d:b9:
84:71:ce:82:85:8a:9f:ef:f2:98:35:3f:c5:04:2d:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:91:FC:FA:07:37:15:46:E3:CB:D1:6E:33:ED:61:34:FA:1E:5F:B6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uJH8-gc3FUbjy9FuM-1hNPoeX7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:9b:65:5b:46:62:76:f3:53:50:c6:fb:e1:1e:c9:cb:0d:fc:
90:18:af:18:c0:d5:ac:74:02:ee:61:b8:7b:f6:27:21:28:d0:
dd:92:ef:71:e8:b0:7a:c3:46:bc:d6:ff:6c:2f:cd:e5:49:40:
3f:66:29:0f:9d:6d:73:fb:de:64:8f:08:66:70:ef:11:00:57:
67:09:16:95:5e:7c:80:cc:43:e6:3c:68:bb:a5:95:46:d1:55:
5b:c4:8a:49:bc:18:41:6f:a4:f6:d8:55:25:a6:66:62:92:f4:
0e:b4:bf:66:7e:34:02:a3:92:1f:8c:75:9f:55:5a:31:93:36:
d5:56:1e:20:05:fe:ed:05:26:72:f0:3d:a2:27:fc:f1:b8:5c:
cb:36:01:55:97:05:45:50:61:6f:57:c4:34:ec:c2:8b:ce:89:
36:99:a5:5d:9b:25:60:60:76:9a:90:0c:65:a4:7b:b6:ad:22:
70:49:02:79:7f:b7:58:0c:1c:fe:d7:8c:aa:48:27:d9:27:93:
9e:3b:09:74:a4:ba:35:ac:2b:e7:7a:6f:86:9a:8c:f7:22:57:
b0:5f:bb:c1:51:4a:92:f6:f2:87:bc:ab:84:cf:41:94:4f:f7:
eb:84:aa:21:3d:53:de:cb:13:d4:61:d2:d7:d7:91:f8:5e:bc:
49:11:2c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:13:42 2025 by rpki-client