Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zJUoW7gs1GcfYbOSh6DStHBqvU8.roa
File: zJUoW7gs1GcfYbOSh6DStHBqvU8.roa (raw, json)
Hash identifier: okZ14Zy3w02XpDiwirFBATmVmA1KU1m4T3WTIsATaaw=
Subject key identifier: CC:95:28:5B:B8:2C:D4:67:1F:61:B3:92:87:A0:D2:B4:70:6A:BD:4F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C91332960D3D1E8EC076CA6C99F50BC79
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zJUoW7gs1GcfYbOSh6DStHBqvU8.roa
Signing time: Fri 22 Dec 2023 11:04:58 +0000
ROA not before: Fri 22 Dec 2023 11:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:9132:6326/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:91:33:29:60:d3:d1:e8:ec:07:6c:a6:c9:9f:50:bc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 22 11:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc95285bb82cd4671f61b39287a0d2b4706abd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1a:1e:51:60:bf:92:3f:7d:b7:04:bf:8a:3c:
c3:d2:98:5e:90:ca:4a:ad:84:32:a3:c7:71:3f:3b:
8a:d9:1b:b1:54:be:79:c6:98:36:7b:03:32:49:e5:
21:15:7d:3c:d6:da:f9:a3:90:52:44:60:5b:f9:20:
3b:77:33:5a:5f:a1:83:2e:d2:9d:23:12:83:2b:2e:
e1:91:7d:ad:1b:2b:c5:20:eb:9f:11:67:13:53:1b:
d0:61:f8:99:ad:94:e4:09:eb:0e:db:26:97:af:5d:
e1:0e:d9:6c:8c:88:42:ae:6f:0a:e7:76:d5:92:8a:
db:61:09:bd:96:2c:c3:96:c9:08:49:d1:9e:45:85:
56:e5:d1:14:ee:01:d1:65:36:7e:cc:06:12:5c:7e:
7d:79:98:eb:e8:85:c9:86:e5:b0:be:07:a6:d7:51:
e9:9b:e5:78:d7:ad:fa:d1:4e:47:89:00:52:61:ec:
b8:fa:be:eb:47:19:65:38:17:87:6d:ce:6e:50:72:
21:9d:c6:dd:60:67:f8:fb:b0:86:fd:7e:f9:82:79:
31:24:e0:80:0b:6d:80:76:8d:92:d8:4e:fa:7d:09:
50:c1:c9:d5:2c:1a:56:78:46:92:77:56:7f:35:0d:
d5:2a:f6:82:ef:0d:71:17:81:fe:c0:7c:29:a0:07:
24:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:95:28:5B:B8:2C:D4:67:1F:61:B3:92:87:A0:D2:B4:70:6A:BD:4F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zJUoW7gs1GcfYbOSh6DStHBqvU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:9a:7d:c9:2e:c5:ee:37:1c:02:85:55:c1:f5:12:ca:44:7d:
33:5c:5f:18:85:a6:08:43:5f:6d:e7:94:01:cd:27:96:de:6c:
a0:a2:fb:7d:06:36:bb:05:bb:bb:ae:d8:3e:9e:64:6b:81:09:
0d:09:c7:b5:60:52:d8:92:d3:19:6c:f9:04:a6:6d:3d:ea:ce:
ba:79:10:80:d5:7f:df:c6:bf:86:2d:5e:fa:3e:37:34:4f:ab:
ae:63:9d:4c:b7:34:ef:f6:5f:47:a4:6a:10:a9:72:1a:40:45:
87:f6:48:ce:97:ad:50:9e:75:da:37:1b:3e:a6:c1:e8:10:f8:
cd:65:fa:6f:ab:2f:f1:fd:3c:55:3e:1f:99:ca:df:bf:d3:8b:
8c:1c:f9:dc:b4:97:04:41:b0:17:01:c3:78:c3:70:db:7f:93:
0a:b6:46:c3:b2:ab:f7:f8:6a:f1:61:18:df:f5:cc:b7:03:ad:
e5:3d:e8:48:3c:e7:b7:52:18:54:ec:f3:f3:68:c0:4d:75:b9:
1c:6e:36:76:20:59:9f:e7:eb:00:e8:6d:bf:55:36:e1:57:97:
20:8a:fb:ce:bc:39:cc:82:f7:05:1d:7a:d0:52:17:40:15:f9:
99:c3:1b:a4:f6:d2:42:01:13:ee:00:d8:4b:1a:5f:83:14:99:
94:43:21:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:44:49 2025 by rpki-client