Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/udQ51Ude2lsoHhgdTv-mX2tSCMA.roa
File: udQ51Ude2lsoHhgdTv-mX2tSCMA.roa (raw, json)
Hash identifier: vRpINx+/4df6O8x8UsIcFBVpkxfC8Ca+RB+/WNEyBSk=
Subject key identifier: B9:D4:39:D5:47:5E:DA:5B:28:1E:18:1D:4E:FF:A6:5F:6B:52:08:C0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8EA74DA7FE83BCE4D936CD4C339B4479
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/udQ51Ude2lsoHhgdTv-mX2tSCMA.roa
Signing time: Thu 21 Dec 2023 23:12:58 +0000
ROA not before: Thu 21 Dec 2023 23:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8e:a7:4d:a7:fe:83:bc:e4:d9:36:cd:4c:33:9b:44:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 23:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9d439d5475eda5b281e181d4effa65f6b5208c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:91:6a:0e:fc:d7:0b:5e:be:d3:bb:f9:d3:76:
a4:6e:7c:1b:e0:4a:90:a3:c5:9b:76:4e:13:6e:63:
79:fc:29:5b:ab:36:ef:ab:d1:a7:91:1d:a7:44:ab:
5d:61:03:a6:39:36:94:f4:fc:13:65:f3:1f:eb:44:
dd:d5:e4:51:d9:d5:2f:41:f3:79:0b:59:a5:e4:f5:
20:4e:12:57:d7:88:e8:3b:f3:f4:95:c1:9f:2f:b3:
72:3c:4e:af:07:0d:b2:57:57:57:60:c8:57:1a:6e:
61:c8:df:f5:f7:4e:24:82:76:15:77:43:dc:5f:96:
78:53:01:7c:fe:3f:14:cc:ce:f5:2a:a5:14:7b:d4:
96:64:66:af:2c:5c:e2:74:43:11:0d:60:7e:d5:13:
48:d0:bc:0e:9f:8d:8d:74:1d:95:f2:18:4f:02:f6:
07:20:a7:12:4f:38:45:a7:5c:a4:52:a1:25:c1:54:
2d:7c:30:c2:49:1b:71:a3:17:cf:b8:8e:44:cd:c7:
ce:57:f3:12:05:e3:47:a6:2d:e1:52:aa:19:ec:6c:
99:e3:3a:79:92:21:2b:0c:e9:bc:a6:71:da:d9:e2:
6a:02:8e:8f:e6:97:d4:78:45:da:e5:19:a9:ac:59:
e6:3e:ec:72:3a:f0:63:3d:8b:5b:e3:74:ef:89:79:
f1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D4:39:D5:47:5E:DA:5B:28:1E:18:1D:4E:FF:A6:5F:6B:52:08:C0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/udQ51Ude2lsoHhgdTv-mX2tSCMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:7d:c1:23:b4:ec:d7:1c:8f:1c:d2:12:88:e1:eb:72:59:08:
43:79:74:77:0f:5d:ee:8b:4e:9f:01:c5:8e:c1:18:de:50:c5:
38:b6:6e:2a:ae:b2:01:79:fa:94:1c:86:99:31:15:c7:0b:18:
73:38:cc:ea:f0:b1:d7:f8:83:d2:cf:38:85:86:cd:f6:ae:0d:
cc:90:4b:a0:c6:b9:5b:0a:e3:a0:ec:c4:c0:7a:0e:9f:1e:38:
d2:76:c3:e9:8f:bd:c5:a6:05:a6:a8:a4:83:0b:b9:f5:3f:f4:
93:ee:f9:18:07:b5:8b:28:29:44:f7:61:59:12:ab:e0:33:9d:
88:49:94:82:e3:e8:4b:d5:12:df:49:92:bf:d8:ea:7f:e3:f3:
2a:af:08:09:da:03:69:ad:25:44:5a:b2:40:a5:7b:82:ea:56:
23:fb:08:dc:43:64:27:84:b7:7f:c0:f8:5a:8f:cf:72:ec:bd:
e2:18:db:2f:41:67:6e:2d:99:48:ab:47:4e:87:28:79:7e:62:
4f:4e:86:a7:e5:9e:09:27:51:14:de:cb:53:ac:05:bc:85:ca:
4e:e7:45:2c:34:f6:54:30:d2:42:c9:f1:2e:90:44:bf:ff:18:
e7:ec:b2:6a:24:b3:84:0c:43:2e:c4:00:1a:2a:1d:94:e1:e6:
78:e9:3a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:53 2025 by rpki-client