Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zIlptFDNsjoyujp2zfPmTByb8tI.roa
File: zIlptFDNsjoyujp2zfPmTByb8tI.roa (raw, json)
Hash identifier: AdOtFboOzVL0z3B/VZAa7O9X99U4oYw7xk3yMPs7ijw=
Subject key identifier: CC:89:69:B4:50:CD:B2:3A:32:BA:3A:76:CD:F3:E6:4C:1C:9B:F2:D2
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C92B92C30C6157D21150DBE89F339C4BE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zIlptFDNsjoyujp2zfPmTByb8tI.roa
Signing time: Fri 22 Dec 2023 18:10:58 +0000
ROA not before: Fri 22 Dec 2023 18:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:92:b9:2c:30:c6:15:7d:21:15:0d:be:89:f3:39:c4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 22 18:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc8969b450cdb23a32ba3a76cdf3e64c1c9bf2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1b:84:73:2c:55:70:4c:91:bb:0d:ea:08:26:
71:67:12:f4:c8:1e:75:44:44:4e:38:05:ac:26:22:
ab:f4:8f:0d:dc:bb:f8:7e:ae:74:65:14:14:ca:52:
36:4b:3f:c3:34:a6:7f:3c:5e:ea:f7:cf:d2:52:ca:
84:5f:8b:cb:d0:e6:26:dc:71:c9:f3:27:fe:83:6c:
48:49:4c:1a:4e:c3:4a:96:88:f8:b2:1a:7b:c5:ea:
b2:1c:91:68:6c:d8:19:8c:12:3f:53:de:a4:fe:98:
ad:c4:04:82:7c:aa:0b:dc:c2:8a:fd:20:b4:f1:92:
2f:5c:ea:3c:c8:19:38:80:7e:c0:a8:b2:c3:31:85:
2d:7e:83:d9:58:37:83:4a:a7:97:49:b3:51:c9:da:
a9:66:01:6c:de:f7:79:db:1f:c0:8f:65:57:5a:eb:
7f:d1:30:f2:6f:30:c3:9c:43:88:ba:a9:0a:27:4c:
23:62:bf:0a:51:3e:4e:f6:5f:e9:56:76:a2:56:72:
0e:a9:52:c0:5e:f6:ed:7c:70:73:88:fc:29:53:c2:
59:c6:c5:a4:3a:22:35:1b:f4:09:86:13:f6:09:08:
ff:d5:1c:fa:c8:a5:10:9c:4c:f4:41:ce:9d:e4:3f:
63:97:bc:a7:ed:43:21:19:ff:61:c2:7f:e5:52:a4:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:89:69:B4:50:CD:B2:3A:32:BA:3A:76:CD:F3:E6:4C:1C:9B:F2:D2
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zIlptFDNsjoyujp2zfPmTByb8tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:e2:32:c8:6d:bb:92:fc:56:74:ea:5b:e4:4c:1f:72:9d:c5:
90:e9:66:9f:42:ee:fa:0e:38:bb:65:bc:6e:9c:c7:2c:5d:c3:
3f:55:14:77:50:b2:a8:40:49:0f:24:8d:fb:89:95:9c:94:2e:
94:89:c6:7a:62:cf:c0:65:b2:e4:6b:10:f9:f2:dd:e2:3e:88:
73:71:69:b8:23:d7:e9:67:9f:26:9e:fd:2f:b4:d9:fd:22:a1:
58:12:20:73:5a:fa:f8:8d:1d:87:77:9b:a4:04:c4:37:6d:d0:
28:4c:32:ac:71:40:b0:66:85:c5:67:78:95:05:5a:6e:bc:90:
52:e2:5e:1b:dd:d5:16:80:20:eb:66:fd:6f:86:0a:4e:34:30:
9a:24:72:74:07:1f:c6:18:50:4b:63:0b:d1:3b:a9:b8:31:f5:
c2:cf:ff:ed:92:29:55:59:40:e7:54:ce:c9:6f:4b:96:49:97:
bd:43:ee:f1:04:49:81:ca:48:a9:f3:bd:fc:47:57:94:59:51:
c3:e9:1b:9e:56:2a:4d:55:67:46:59:21:da:2c:1b:ba:4d:cc:
0f:b8:82:a8:2a:13:c2:75:4a:ea:57:b6:5b:1c:d9:94:c7:fe:
b5:cd:2f:39:90:a9:e6:fa:f8:97:bc:af:ad:09:ce:23:20:38:
c2:72:41:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:42 2025 by rpki-client