Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xKf-J3EkfvtxmHJtIX4BgzVUGJ0.roa
File: xKf-J3EkfvtxmHJtIX4BgzVUGJ0.roa (raw, json)
Hash identifier: KPXzti0pGIYTjjhkOng829Kcbs3n30/lC8DqFhRq4zQ=
Subject key identifier: C4:A7:FE:27:71:24:7E:FB:71:98:72:6D:21:7E:01:83:35:54:18:9D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA4BF6E4E6EAA2BF598092AF8BF5FE5A0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xKf-J3EkfvtxmHJtIX4BgzVUGJ0.roa
Signing time: Tue 26 Dec 2023 06:10:58 +0000
ROA not before: Tue 26 Dec 2023 06:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a4:bf:6e:4e:6e:aa:2b:f5:98:09:2a:f8:bf:5f:e5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 26 06:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4a7fe2771247efb7198726d217e01833554189d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:74:24:92:81:39:b6:c1:3c:30:eb:51:94:
82:5e:5f:c6:2e:bf:97:01:a2:91:3f:07:e5:57:dc:
97:fe:38:21:9c:ae:7b:cd:4c:5e:2d:2b:b1:7d:0b:
6f:29:39:2d:92:e8:64:8d:32:ad:99:f2:95:95:d8:
55:a5:09:c7:65:17:a4:dc:73:5b:c3:89:4b:7d:4f:
47:fe:64:75:d9:55:2e:af:79:f7:cf:32:b0:3f:fe:
f9:6f:37:ec:a2:35:9c:d0:f1:47:d1:f3:f0:a0:ea:
a2:32:fc:54:c8:a7:a9:cf:63:4a:c6:08:57:94:33:
fe:ef:b3:1f:f9:da:ed:81:a2:1a:49:65:b7:1d:e4:
a0:74:7e:b3:ea:ab:03:17:7f:bc:0e:99:c5:ec:f8:
54:0e:9d:0a:5c:ff:2f:d0:01:88:d1:d2:08:d1:a8:
8d:43:04:24:22:fa:41:9e:1d:9b:01:54:8a:4c:ac:
67:50:ec:a2:ca:c5:ba:fc:14:c7:fb:78:07:d0:b9:
d4:10:31:e5:61:fd:2c:f3:e2:6b:f3:50:0f:f3:32:
0f:a2:f8:48:57:a9:8e:b6:c4:0c:dc:2e:bb:c9:c1:
af:17:f3:9d:01:80:3a:a5:0e:eb:fa:b6:4e:06:59:
a5:bd:5c:04:5b:b0:97:c8:7b:b1:8b:fd:8d:9c:5c:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A7:FE:27:71:24:7E:FB:71:98:72:6D:21:7E:01:83:35:54:18:9D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xKf-J3EkfvtxmHJtIX4BgzVUGJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:45:15:f6:ab:48:4c:be:c7:9d:5c:3b:fb:31:0c:4e:c4:09:
c8:90:c1:46:e1:d4:2d:dc:60:16:e0:43:7c:ad:3d:ef:ef:8e:
ab:a2:ec:52:7a:04:2d:a8:64:cf:1f:d1:c1:08:cc:73:1f:62:
9d:fe:f9:24:5f:e4:23:5b:3f:c5:2e:fa:70:19:c0:34:ed:36:
c7:eb:21:6e:3e:9d:0e:30:28:af:b4:41:0f:fa:32:f9:77:06:
db:ab:88:d0:88:a6:3f:ee:71:ca:8a:38:53:26:61:30:c6:66:
b5:91:96:25:9c:db:42:fc:27:b3:3d:db:14:32:77:05:d2:88:
c1:1e:7a:ff:ed:7d:dc:e3:9a:87:23:7e:7f:71:13:c2:ba:eb:
96:68:0b:27:4e:8b:34:5c:5c:20:40:82:45:23:de:58:fd:5c:
e7:3f:ef:14:98:ed:92:18:54:5e:72:d0:5a:21:83:8b:27:6f:
e3:9f:3a:e1:7a:5c:59:91:0b:8e:4f:77:34:7a:fc:1a:7d:92:
66:e3:97:02:3b:16:c9:bb:ee:85:56:2a:45:b9:70:b9:14:bd:
77:5e:5b:e8:f0:71:b0:90:94:38:75:de:05:ee:af:61:f4:06:
bd:2f:3b:ec:30:5c:ff:d2:9f:91:2d:32:ee:b8:cb:2b:6a:0e:
d5:2f:6c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:24 2025 by rpki-client