Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-xrEhIwSypcZDsWIxLa0eynNNKE.roa
File: 1-xrEhIwSypcZDsWIxLa0eynNNKE.roa (raw, json)
Hash identifier: kng6/vs0t+4FmIYwFnITz4gPgafVFKSKK6IJZnjcjx4=
Subject key identifier: FB:1A:C4:84:8C:12:CA:97:19:0E:C5:88:C4:B6:B4:7B:29:CD:34:A1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D510F179F6B2CAE983D7E3070A564D589
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-xrEhIwSypcZDsWIxLa0eynNNKE.roa
Signing time: Sun 28 Jan 2024 17:12:39 +0000
ROA not before: Sun 28 Jan 2024 17:12:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:51:0f:17:9f:6b:2c:ae:98:3d:7e:30:70:a5:64:d5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 28 17:12:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb1ac4848c12ca97190ec588c4b6b47b29cd34a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5b:12:a1:c4:c1:33:cc:a0:33:a8:2c:45:2d:
4d:27:0b:b4:e7:8a:43:78:5c:93:a6:e5:6f:ab:3c:
58:b5:82:27:84:9f:b8:9a:34:96:e4:49:ef:6a:ce:
26:93:cf:e3:f2:19:4e:8e:9a:3b:12:47:fd:17:bc:
10:bf:c9:ac:a7:a2:9c:39:02:ad:8b:f3:fd:bf:00:
82:11:81:fd:cc:95:51:50:8f:59:ff:72:43:93:dc:
b7:c3:16:70:58:d9:97:b1:22:07:a5:e4:db:11:45:
77:b3:91:f9:1a:8a:c4:aa:5d:a4:6a:3d:33:ea:3f:
10:63:ef:cc:33:66:37:52:76:c4:64:c6:33:0b:72:
1e:47:db:73:f7:fd:6b:03:0a:1e:3d:3a:5b:d1:14:
f9:f7:b4:5b:10:5c:69:31:a4:78:ef:01:5f:52:fb:
9c:5a:ec:b8:ca:30:eb:02:c0:a8:d7:55:b3:49:c1:
2b:ad:b5:6e:cd:4d:b4:52:97:85:ad:32:53:13:3b:
bf:22:60:b0:4c:05:e1:93:f9:16:a5:51:11:0e:ef:
0c:f7:1e:08:f5:81:6e:ac:54:d3:3a:6f:62:3e:38:
cc:1d:dc:a3:4e:ff:2e:73:69:b6:20:6e:45:91:4a:
b0:76:38:3a:00:e8:51:2a:7d:3b:eb:06:1a:35:a0:
16:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1A:C4:84:8C:12:CA:97:19:0E:C5:88:C4:B6:B4:7B:29:CD:34:A1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-xrEhIwSypcZDsWIxLa0eynNNKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:36:c7:60:c9:67:49:55:bd:a1:76:f8:b1:33:1b:1d:46:06:
d3:e7:1c:c2:5b:af:14:0e:3e:c6:2b:13:2b:62:34:cd:a6:b5:
0a:f2:e8:1c:cf:25:bc:63:6b:2d:94:84:c5:66:a2:c2:4a:1d:
b4:6c:64:b0:f1:d5:d3:87:d1:56:4a:86:10:3b:7c:13:02:de:
17:f1:5c:b9:40:7b:f7:2c:b7:68:29:d5:6d:b9:79:80:1d:72:
b1:0b:9a:48:99:00:b1:0f:b0:7a:25:e3:62:99:49:e0:d1:18:
79:e6:5b:1d:58:bf:a8:d5:58:65:8a:9c:77:4f:e8:6d:d6:75:
84:bb:e0:ef:1a:34:95:8b:67:73:46:26:2a:0f:a8:75:7e:aa:
f9:48:ea:27:37:0e:a6:c8:3d:9c:cd:12:fd:ee:c3:53:cf:84:
f8:62:28:cd:27:7c:3d:ef:89:e4:bc:83:31:cc:8e:e8:73:22:
4e:25:b5:1d:1b:5e:8b:e5:1e:99:88:c9:80:8a:6b:58:c6:59:
83:6f:7c:f6:2d:19:55:d6:14:bd:91:49:98:18:19:91:f3:39:
a7:c1:49:8b:70:07:08:e3:95:e1:f7:2a:a5:6b:3f:fe:52:90:
82:c4:72:2e:a0:ca:ef:17:f2:ce:39:bd:3c:f1:3c:e8:29:46:
36:ff:28:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:10 2025 by rpki-client