Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/unqt8fsePT_Du4hWSXeP0tphZE4.roa
File: unqt8fsePT_Du4hWSXeP0tphZE4.roa (raw, json)
Hash identifier: zrXoCgc/fPbjm2S72Wo9tvDQ7RN00E3/mh1TKk3uSfo=
Subject key identifier: BA:7A:AD:F1:FB:1E:3D:3F:C3:BB:88:56:49:77:8F:D2:DA:61:64:4E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CFACAC0CA9F4F1F63E47FA14EB1F1B47B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/unqt8fsePT_Du4hWSXeP0tphZE4.roa
Signing time: Thu 11 Jan 2024 23:10:40 +0000
ROA not before: Thu 11 Jan 2024 23:10:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fa:ca:c0:ca:9f:4f:1f:63:e4:7f:a1:4e:b1:f1:b4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 11 23:10:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba7aadf1fb1e3d3fc3bb885649778fd2da61644e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:15:16:2b:ca:7a:c0:24:f8:12:b3:63:8c:65:
78:b9:3c:86:8f:54:23:61:a8:0b:93:b8:fb:ae:9d:
f2:25:8c:ea:4c:bf:ff:13:47:b0:81:e4:75:97:4b:
47:76:9b:55:59:81:f3:ea:97:b0:2c:0c:4f:12:76:
cf:93:30:b3:3e:c7:01:a3:46:d7:c0:19:bd:b8:78:
91:21:ae:6d:8a:88:23:2b:3a:dd:89:8b:10:b3:83:
ac:ca:f5:37:07:93:44:f4:e0:08:03:02:90:f1:e2:
04:52:32:7d:5e:4d:b1:20:76:88:bb:9f:21:f2:0d:
a0:5a:0e:66:f8:4d:a2:03:2f:12:a5:04:30:4c:3c:
af:f1:26:29:28:c7:12:05:a3:08:cf:c9:37:e8:ef:
f1:1a:a1:fa:36:71:ef:a2:3d:66:ea:7a:24:7d:27:
6c:0e:67:d7:f2:61:bb:70:c2:c4:7a:be:67:7e:51:
03:23:5b:ef:90:2a:cf:b7:9a:b3:53:86:c8:46:e0:
3b:f7:77:3f:1d:c0:ca:f8:4c:97:4e:c5:90:84:12:
5c:dc:aa:d3:5d:31:25:e0:ce:3f:24:f8:95:60:60:
29:8e:33:14:ff:43:f3:af:c6:db:04:6f:68:88:ad:
6f:b9:54:db:41:9a:03:cd:f3:6c:ee:8f:ba:15:07:
e2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7A:AD:F1:FB:1E:3D:3F:C3:BB:88:56:49:77:8F:D2:DA:61:64:4E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/unqt8fsePT_Du4hWSXeP0tphZE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:a6:cf:fa:80:2f:58:e4:a9:52:d8:1d:91:9f:fa:7a:33:68:
7f:58:74:92:76:c4:ec:50:49:bd:58:f3:34:74:b2:4b:ae:09:
94:1b:62:95:b8:83:f3:70:5c:d3:a3:ff:2a:18:bc:e5:73:51:
dc:9f:4a:0b:f2:47:60:33:3f:a4:db:2d:7b:c3:50:4f:e9:4a:
56:55:32:2a:81:ea:fa:9a:20:77:e1:69:c4:23:12:4d:11:c2:
4c:cb:e8:9c:6d:fa:4c:e2:d3:51:42:33:46:30:ac:15:17:75:
d2:64:0f:d0:7e:59:b7:44:9e:58:ed:2e:7f:81:80:3b:7d:44:
75:35:e5:ba:df:89:b8:4d:7a:18:6a:35:7e:51:67:45:b9:92:
01:9b:3f:09:f9:f7:54:b6:a2:cf:51:42:59:66:ed:b3:83:3e:
fd:b7:0f:ae:17:92:87:5e:d9:2d:c8:6b:de:76:7b:84:e1:a6:
9f:e5:0e:70:1b:60:f3:ae:84:79:00:b4:44:90:e9:a5:f5:64:
a6:d4:48:4c:7a:39:8e:4f:5d:77:02:8f:67:86:63:8f:d4:aa:
0c:61:bf:07:83:31:a4:f7:66:fe:fa:b1:8a:48:5b:04:93:a6:
80:2c:ca:b5:de:6f:4d:c1:1f:2c:58:ae:a3:c4:ef:f9:a4:0d:
3f:d3:68:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:53:26 2025 by rpki-client