Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/z7D_DbaS3r1_y4VmopPyysy6n6U.roa
File: z7D_DbaS3r1_y4VmopPyysy6n6U.roa (raw, json)
Hash identifier: Lj3jmGk4XlJ91qNQkRQU3DpvwshNeNNKykIIJJiQ/DM=
Subject key identifier: CF:B0:FF:0D:B6:92:DE:BD:7F:CB:85:66:A2:93:F2:CA:CC:BA:9F:A5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D5B5BCE0ABEF901BC3BB0A269DD315B75
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/z7D_DbaS3r1_y4VmopPyysy6n6U.roa
Signing time: Tue 30 Jan 2024 17:12:39 +0000
ROA not before: Tue 30 Jan 2024 17:12:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5b:5b:ce:0a:be:f9:01:bc:3b:b0:a2:69:dd:31:5b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 30 17:12:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfb0ff0db692debd7fcb8566a293f2caccba9fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:54:0d:69:60:f1:58:47:41:6b:f1:98:75:77:
36:27:21:7b:2d:26:4b:d2:fd:63:97:01:d4:a5:9e:
01:91:7e:db:d3:c6:01:ea:0c:c5:f6:82:d1:14:34:
ae:d5:73:e4:cd:7f:84:e7:cc:51:6e:0f:cf:7f:2c:
20:1b:54:a8:c4:60:ec:37:c6:a8:ec:1a:3b:ff:ab:
ee:ca:67:d9:62:8d:6d:ab:82:eb:8c:2b:32:1e:79:
4b:77:03:ba:d0:45:45:76:ea:76:35:af:80:27:98:
c8:a8:35:80:99:36:77:48:80:b6:d8:41:e7:e0:cf:
27:a5:04:69:5f:54:83:c2:d6:bf:47:b3:01:86:92:
a2:ae:96:b3:fb:48:97:ac:59:ba:71:d3:c2:f2:4a:
97:08:13:91:a0:b1:d7:89:a0:97:08:a9:1e:ab:39:
63:fd:71:6e:75:ce:a6:c5:10:78:06:49:71:cc:43:
ca:28:2d:4a:71:f1:80:7f:36:c3:63:de:45:13:4a:
33:b9:47:5d:97:a6:6f:1f:3b:a1:57:8c:4b:06:18:
bd:0f:4a:be:5f:6a:b8:00:93:ec:dc:33:67:f5:b4:
a4:6d:d4:a7:28:93:c9:ea:70:37:51:53:27:3f:b1:
87:0e:bb:08:5e:67:62:ae:c6:fd:07:b1:03:5b:eb:
c7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B0:FF:0D:B6:92:DE:BD:7F:CB:85:66:A2:93:F2:CA:CC:BA:9F:A5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/z7D_DbaS3r1_y4VmopPyysy6n6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:ff:f6:69:53:26:3a:f2:df:61:ec:ec:03:b2:d3:d1:23:62:
37:05:72:d8:fb:82:a7:f6:14:1a:11:85:f9:d6:81:7f:f0:cf:
b2:3c:7c:9f:2e:e2:85:85:d5:98:3e:84:0f:82:c7:22:6f:d9:
48:b1:8a:88:e4:a9:88:3b:cd:53:64:d9:a4:f1:82:7d:a5:8e:
9c:37:69:d4:a8:78:5c:60:39:9d:9b:81:e0:7b:3a:69:f4:f7:
fc:c2:d7:e9:69:45:f4:34:34:a7:d2:8e:10:84:07:8b:a8:d5:
bc:7b:2f:8a:aa:04:57:97:9d:cf:c3:71:7b:eb:49:ba:7a:0f:
0e:14:81:96:e8:4a:38:18:a2:87:b7:30:31:fd:3a:ff:73:50:
ff:31:b0:11:af:50:4d:35:d7:2e:83:ca:81:18:85:36:50:6a:
09:7e:1d:18:01:7b:4e:59:40:df:60:97:1d:4e:7d:80:3e:43:
ca:97:b8:78:c1:d7:e3:1a:27:cf:3b:82:a2:63:55:70:8b:a0:
3a:59:d0:5b:70:29:1d:53:80:04:62:a0:3d:fd:63:97:f3:e7:
8e:27:12:17:de:75:bb:92:8c:2c:c4:ca:3c:33:77:01:64:9c:
67:c2:2b:e7:88:ea:3a:5a:2b:e2:f1:90:57:35:bc:0f:73:46:
59:ce:fb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:53 2025 by rpki-client