Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DBd8jSABjrFBwV5KyblX9pJ6djg.roa
File: DBd8jSABjrFBwV5KyblX9pJ6djg.roa (raw, json)
Hash identifier: NQ/RR8g/sqtB1egSlmfX6ntU1JMfriD82REVXPSLx9c=
Subject key identifier: 0C:17:7C:8D:20:01:8E:B1:41:C1:5E:4A:C9:B9:57:F6:92:7A:76:38
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D13B261848F6C484EE36BAE981CC12374
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DBd8jSABjrFBwV5KyblX9pJ6djg.roa
Signing time: Tue 16 Jan 2024 19:14:33 +0000
ROA not before: Tue 16 Jan 2024 19:14:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:b2:61:84:8f:6c:48:4e:e3:6b:ae:98:1c:c1:23:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 16 19:14:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c177c8d20018eb141c15e4ac9b957f6927a7638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:e2:5a:eb:6a:9e:5c:04:2e:3a:5b:93:fb:
3a:53:39:68:17:4e:b8:9b:bc:f2:1b:7b:6f:b0:a9:
63:d7:5a:55:e7:93:76:5b:4a:dc:46:34:07:64:aa:
04:6d:4f:28:45:c6:26:3d:5b:2a:0b:58:b1:89:cb:
0c:a3:42:a2:38:85:52:43:d9:5e:59:71:ec:ee:b2:
c7:ee:b3:62:37:04:fc:dd:48:78:97:70:91:d8:6a:
d2:5c:51:04:f2:1b:05:ac:ce:0c:a3:e3:40:a7:3c:
13:53:aa:b5:c5:7f:26:cf:79:ad:72:90:29:73:73:
c3:b8:33:da:49:e2:d8:f4:e8:5f:54:b6:d4:fc:fa:
b5:51:c3:08:4e:8a:7e:90:93:9b:de:bf:db:ca:24:
7f:16:de:af:9e:49:53:28:02:27:b4:96:a2:81:14:
5a:37:c0:b0:31:fe:73:89:1e:c1:53:ac:e2:c6:47:
e6:1f:6d:1b:a3:64:c5:87:5a:c2:6a:21:77:24:3b:
9b:7d:7a:13:be:70:7e:c4:7c:70:d3:1d:c9:70:b1:
2d:b8:00:48:bb:a6:0b:c8:cc:09:f2:22:e8:10:b3:
0e:61:d8:ae:34:94:8b:a5:0b:2c:e4:db:c9:c5:1e:
58:fa:90:c7:58:bc:6f:8c:68:c7:c0:12:83:ff:4b:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:17:7C:8D:20:01:8E:B1:41:C1:5E:4A:C9:B9:57:F6:92:7A:76:38
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DBd8jSABjrFBwV5KyblX9pJ6djg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:4d:e2:39:23:8a:6e:ce:a5:9f:f4:47:c9:74:60:b4:22:79:
4f:e2:6f:13:c2:ed:c4:17:b5:e8:c5:d3:df:ab:26:e1:f2:de:
b3:6a:57:59:6c:7c:cd:2a:eb:62:bb:69:82:cb:d9:95:4b:16:
7a:80:10:5b:39:d5:9e:40:da:2d:62:d7:49:d2:99:18:0d:88:
5e:55:dc:84:47:bb:ac:bf:66:15:0c:12:fa:7d:cf:fe:0b:33:
1a:fb:06:e8:ad:eb:d7:9b:e3:c5:9c:eb:67:a8:e3:ac:ee:d7:
4b:2f:44:53:dc:51:0d:fd:d3:85:24:74:2d:fe:13:71:5b:d5:
18:42:1a:85:96:c1:fa:41:e9:1c:fc:04:26:89:f9:7f:e6:ce:
92:e9:e0:29:d4:49:1c:8f:92:5f:e3:50:81:8e:33:20:32:d8:
99:1f:dc:82:7c:a7:57:af:e3:2c:d5:13:96:79:69:0c:f3:4d:
76:61:36:48:70:8a:ed:5a:ab:47:14:c0:0f:09:ea:eb:e1:c5:
4e:96:1a:1f:d4:e8:e5:8b:14:31:6e:32:be:33:ad:31:8b:e5:
bc:f9:92:a0:35:96:0f:e4:0f:98:a9:be:6e:03:d5:ba:a7:95:
2a:88:a9:a6:95:d9:f0:d4:c0:bf:ea:fe:72:a5:88:0b:2b:b4:
86:6c:58:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:52:01 2025 by rpki-client