Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yZfd3Wq8Iz-P3Hc8aTwhYWB-YrE.roa
File: yZfd3Wq8Iz-P3Hc8aTwhYWB-YrE.roa (raw, json)
Hash identifier: Jbqt/oBndHZ3lBXsEz04wLw/Neb2iP3b0tboUAXEf4A=
Subject key identifier: C9:97:DD:DD:6A:BC:23:3F:8F:DC:77:3C:69:3C:21:61:60:7E:62:B1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CF7CC74D6543BC3C3BE21C7DFC9697A62
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yZfd3Wq8Iz-P3Hc8aTwhYWB-YrE.roa
Signing time: Thu 11 Jan 2024 09:13:40 +0000
ROA not before: Thu 11 Jan 2024 09:13:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f7:cc:74:d6:54:3b:c3:c3:be:21:c7:df:c9:69:7a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 11 09:13:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c997dddd6abc233f8fdc773c693c2161607e62b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f9:93:00:99:73:f3:d7:e7:c3:f3:84:8a:a8:
87:6b:a8:91:ac:0a:62:66:61:72:41:f4:17:5f:c3:
a4:9a:31:f0:4e:20:e7:08:d4:1d:b5:48:1d:a5:d4:
ff:50:e7:89:ac:2a:cb:57:0f:19:79:b3:a2:29:5a:
d3:9f:ce:d7:0e:83:39:b3:02:52:41:04:af:8a:6b:
21:d6:e7:00:f6:b1:8e:3b:c1:70:a5:c6:c0:bf:7f:
ee:2a:90:70:c9:70:34:84:b4:9b:ec:c2:4b:17:8f:
92:81:a4:66:70:53:3c:ff:43:1b:74:82:e7:e6:df:
9d:5f:09:11:06:1d:d7:0e:4d:d3:b0:c8:a9:c5:4c:
54:30:5f:fe:9f:cf:43:b8:c0:75:5e:56:60:ae:29:
8a:92:43:39:50:31:38:7e:df:92:4e:0a:d5:4c:f3:
c9:de:09:10:b9:aa:b9:c5:ee:70:b9:7e:19:b3:b5:
9b:13:ae:93:ff:6b:95:25:27:f8:7e:e8:56:97:f9:
d0:36:cc:6f:d0:6a:aa:39:17:c8:38:02:10:68:7c:
a1:f9:a3:46:92:48:93:6b:a4:bc:ba:a5:f7:0e:cd:
d7:50:64:f2:7f:16:70:28:3d:ef:f1:64:43:6c:a8:
d2:1a:90:a1:9d:bf:4f:c1:8f:91:27:eb:0a:75:37:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:97:DD:DD:6A:BC:23:3F:8F:DC:77:3C:69:3C:21:61:60:7E:62:B1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yZfd3Wq8Iz-P3Hc8aTwhYWB-YrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:9e:08:fe:4e:1f:b5:c8:15:b2:58:74:d3:36:e4:29:d3:2d:
aa:a5:33:8e:09:51:dc:3f:df:08:82:a3:68:91:60:36:dd:bd:
1a:2b:92:11:85:2a:73:2b:af:34:fa:46:9f:f7:fe:04:e0:15:
88:3f:be:b9:e1:04:c4:85:15:3f:80:ce:a9:2c:b1:75:b0:a4:
0e:13:65:b6:fc:f0:fe:38:e6:6e:96:8d:b2:ac:8b:af:c9:ec:
40:bb:cd:c8:79:aa:1b:dd:df:c4:c9:ba:e9:f9:5a:40:b0:d1:
2f:b3:73:66:a2:17:68:20:78:ce:65:68:fd:78:8e:4b:64:4a:
a7:de:48:49:80:d8:5f:33:6f:0c:8e:c5:29:cf:ab:1b:3a:d7:
56:d7:67:87:3f:a4:95:66:99:52:15:84:7f:ce:98:ef:cd:86:
00:a2:0f:fc:d0:a6:91:35:f9:1c:51:41:91:a9:a3:68:3c:b1:
c8:dd:fb:21:69:93:42:9c:49:4d:9d:7f:1e:9e:f7:21:2a:84:
a3:30:b5:8c:74:8f:22:77:af:6f:8d:67:ec:7f:35:0f:45:5a:
31:e3:b7:06:8f:0b:c5:84:18:be:30:27:2a:05:90:43:70:0c:
0a:3f:2e:35:db:97:2d:86:8d:f6:2a:ad:d2:f5:34:64:cc:64:
be:b1:ee:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:21:13 2025 by rpki-client