Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xggxEo8rNfxGdiM1Z1PkG9Xj-jA.roa
File: xggxEo8rNfxGdiM1Z1PkG9Xj-jA.roa (raw, json)
Hash identifier: UYUUyEaU4C8Fgh5a0TXTmEc0H8x7//FIzoGXiVnrvrA=
Subject key identifier: C6:08:31:12:8F:2B:35:FC:46:76:23:35:67:53:E4:1B:D5:E3:FA:30
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D02F3FC71DCD177212AE3AE409D347B9E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xggxEo8rNfxGdiM1Z1PkG9Xj-jA.roa
Signing time: Sat 13 Jan 2024 13:12:40 +0000
ROA not before: Sat 13 Jan 2024 13:12:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:02:f3:fc:71:dc:d1:77:21:2a:e3:ae:40:9d:34:7b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 13 13:12:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c60831128f2b35fc467623356753e41bd5e3fa30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:cb:b9:64:aa:06:f0:a2:42:e9:49:ef:97:
56:32:3d:91:49:5c:c2:54:61:cb:1e:43:76:8c:00:
89:f2:b4:97:8c:e4:ee:96:93:86:79:e8:63:e8:7a:
7b:eb:d7:6a:af:3c:d2:f2:bd:55:b4:18:48:ed:00:
a1:a1:91:27:9d:5f:b5:f7:80:69:6d:be:b9:b2:fc:
54:2f:02:86:59:4c:c3:6d:f6:83:42:b2:91:84:a9:
8a:f4:0c:6d:e3:05:ef:cb:0d:be:73:41:80:78:5a:
99:79:bd:1c:eb:cb:4f:ba:fa:40:c2:c1:d3:92:e2:
90:e2:e4:33:e7:b7:51:17:0e:5a:b5:fe:fe:28:6a:
2b:9d:74:f1:9d:61:74:db:88:20:ee:80:91:0c:02:
fe:f7:58:6e:9e:1a:07:77:97:88:15:f5:d7:89:be:
11:22:05:43:b8:8f:59:ac:d6:dd:ae:d4:19:59:eb:
50:6f:a6:23:8d:38:ce:6c:08:24:8d:cd:a9:92:3d:
c9:d6:0a:79:22:6c:58:1e:6e:e1:b0:25:40:aa:e1:
44:c1:a1:1a:81:5c:68:49:f8:53:7a:bd:61:cb:27:
d4:86:01:4a:44:5e:c1:63:ca:3d:0c:11:37:b1:b7:
de:df:09:e9:61:b5:fd:1b:6a:70:a8:64:88:da:b5:
70:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:08:31:12:8F:2B:35:FC:46:76:23:35:67:53:E4:1B:D5:E3:FA:30
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xggxEo8rNfxGdiM1Z1PkG9Xj-jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:9a:e6:8e:38:fd:3f:c6:70:f2:86:33:34:4b:3e:dd:ba:76:
b8:69:80:d4:2c:6e:42:0d:a7:75:0d:15:05:7c:d6:15:17:69:
d2:25:8a:57:ec:8d:c2:ae:94:2f:54:9b:f9:55:fe:b2:c7:3e:
79:0a:80:83:a9:a4:03:76:b0:9b:5b:af:0d:28:b1:a8:23:1d:
30:bf:33:38:6f:95:b9:12:cd:3f:1f:a7:4f:43:c9:e8:13:7b:
ec:de:65:10:2a:6a:39:9c:87:f5:b3:33:ef:0d:7c:46:2e:c0:
88:15:7a:96:cd:21:5e:c0:c3:a4:17:b5:35:da:06:4d:b3:0a:
f3:60:df:ff:7f:7b:b0:00:59:ed:6e:32:06:51:66:d0:98:d3:
fa:19:39:e8:dd:d9:7d:84:db:30:e9:6e:d0:12:f0:34:95:95:
4d:38:5e:b0:43:0d:09:00:3f:fa:9c:fa:93:ce:44:4a:28:39:
0d:8a:5c:7a:c4:5c:1a:7f:c3:44:d4:bf:d4:95:85:bd:73:7f:
0e:f9:e3:ce:35:61:df:61:60:15:d0:eb:dd:ea:89:d3:3a:b9:
85:b3:1e:b3:39:65:be:b3:80:92:17:e1:37:bc:53:da:63:e1:
b9:fd:72:d0:d4:a5:d6:c3:d3:7c:b3:65:c9:91:43:2c:16:7f:
85:35:03:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:59 2025 by rpki-client