Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wKRle_srCQ_iRyz-vjezn_3VTRs.roa
File: wKRle_srCQ_iRyz-vjezn_3VTRs.roa (raw, json)
Hash identifier: aoISpf2s4hB0rgO/IQYN7UyXl86OvKx67VWEQ+jNxEY=
Subject key identifier: C0:A4:65:7B:FB:2B:09:0F:E2:47:2C:FE:BE:37:B3:9F:FD:D5:4D:1B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CAD1EAEC9EC57199FC97FAB9FA291CEE7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wKRle_srCQ_iRyz-vjezn_3VTRs.roa
Signing time: Wed 27 Dec 2023 21:11:58 +0000
ROA not before: Wed 27 Dec 2023 21:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ad:1e:ae:c9:ec:57:19:9f:c9:7f:ab:9f:a2:91:ce:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 27 21:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0a4657bfb2b090fe2472cfebe37b39ffdd54d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:97:95:ba:47:e1:47:db:b8:50:d6:0e:f7:
07:b0:f9:e0:7d:d8:dd:1b:aa:fd:39:91:e8:1e:a6:
93:b1:79:91:55:47:b0:68:e4:13:3f:fe:16:ac:36:
52:20:82:42:29:32:38:06:98:ba:98:59:85:92:f7:
54:fc:b0:b8:cb:c2:0f:05:3b:98:97:92:fe:e6:f7:
5d:21:28:9a:1e:b4:c3:3c:3e:dc:80:75:cc:28:54:
08:0f:fb:a2:4b:19:60:f6:f2:83:27:fa:ab:5d:f7:
0c:e5:0b:d0:36:ab:32:63:aa:2c:31:93:b4:c3:be:
20:5a:ce:ba:b6:81:82:89:ad:b2:cd:09:a4:1f:9b:
9e:05:41:45:a2:68:d8:f2:40:a5:61:a8:54:8f:94:
0e:37:40:ec:15:3e:68:89:a9:0f:8d:d5:17:06:82:
dc:73:19:2a:60:b4:fd:12:62:4f:0f:59:87:52:35:
e4:33:e9:45:47:5c:fa:1a:c0:f5:cb:55:02:ce:2c:
3e:ec:91:d8:d0:36:6b:e3:aa:a6:fc:1a:c7:d8:71:
9d:84:7f:4b:d5:ee:d7:30:6c:22:cd:4c:ce:70:78:
e7:ff:7e:f5:8e:d3:70:3e:ee:f0:96:e7:1e:0b:4d:
81:ff:c0:ac:56:8b:01:6f:78:07:9c:43:b7:a1:b7:
b8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A4:65:7B:FB:2B:09:0F:E2:47:2C:FE:BE:37:B3:9F:FD:D5:4D:1B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wKRle_srCQ_iRyz-vjezn_3VTRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:06:ce:85:d8:e9:57:f7:8b:97:f9:60:ac:12:6c:51:75:a1:
b1:56:55:4b:12:94:dd:e7:c8:93:25:41:e2:f6:18:d2:f9:bc:
01:7d:1d:56:1b:2a:8c:a4:53:45:c7:9c:5d:dc:e0:9c:73:a1:
de:67:80:b0:82:80:01:6a:2f:5f:01:c5:37:ca:87:89:29:36:
88:24:3d:53:d9:d0:eb:9b:b1:ea:81:ac:1c:3c:6d:6c:76:f6:
78:83:dd:8d:c7:82:8b:76:54:ab:0f:2f:ca:28:f7:d1:5a:3d:
9f:0f:7c:55:fd:0d:ca:87:41:d6:11:26:ee:bb:eb:ca:b6:b9:
98:f3:21:a1:ed:9b:38:9b:d5:96:ba:90:ce:a3:bc:58:cf:12:
f3:5a:13:08:65:cf:91:d9:a4:f4:69:9d:78:7d:95:5e:fd:27:
de:54:21:b1:90:ab:4e:84:15:e0:e7:b5:09:32:e6:c9:c7:81:
b2:7c:fa:da:f8:1a:50:fc:eb:0b:83:b5:77:2c:3d:2a:6c:ca:
c3:40:2e:9e:79:9e:b2:a8:ca:6e:00:fa:88:64:9d:56:be:91:
08:2f:e9:4a:47:a8:b3:ca:ce:fd:67:fd:ee:4f:44:ec:c0:aa:
7c:49:0a:f6:19:42:18:15:9e:1f:a9:c7:a1:cc:dd:5d:aa:c9:
e1:12:77:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:50 2025 by rpki-client