Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1GvjC_2hdS_OQpiRtwHcHULGkvA.roa
File: 1GvjC_2hdS_OQpiRtwHcHULGkvA.roa (raw, json)
Hash identifier: SLYwgvL79H6U92oe2cQkSQ7GqETgeVv7meURv8chcuM=
Subject key identifier: D4:6B:E3:0B:FD:A1:75:2F:CE:42:98:91:B7:01:DC:1D:42:C6:92:F0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DBC89287570CAE22A2F9EE66C745E128B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1GvjC_2hdS_OQpiRtwHcHULGkvA.roa
Signing time: Sun 18 Feb 2024 14:05:21 +0000
ROA not before: Sun 18 Feb 2024 14:05:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:bc88:4f6f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bc:89:28:75:70:ca:e2:2a:2f:9e:e6:6c:74:5e:12:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 18 14:05:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d46be30bfda1752fce429891b701dc1d42c692f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:02:36:2c:ed:ef:00:ca:5c:4d:e5:a4:9c:
65:39:4b:a6:92:42:08:e7:e9:d1:e5:fd:e8:ca:e4:
84:f0:04:d6:85:00:5a:96:f9:ca:27:e7:26:27:37:
02:f3:ed:8c:8a:88:09:3a:b6:ee:34:9b:2b:e0:4c:
42:ae:1e:99:ca:37:fa:3e:91:fa:a5:7a:f9:16:4d:
9c:19:e5:11:8f:b9:97:46:f4:e3:64:ed:11:de:c8:
0e:3b:cc:98:23:c9:22:c5:b9:62:7a:c5:69:d3:b7:
40:b7:a9:8f:11:26:47:67:44:b9:6a:49:5f:fa:bb:
18:56:16:0e:a3:b1:08:77:c1:3c:2f:2f:65:2b:bd:
80:05:c7:1d:e5:d7:a1:70:2e:26:f7:73:2b:b4:1d:
ef:82:b9:70:89:3b:57:57:c7:a5:a9:2e:b6:51:69:
e3:c8:ee:37:ba:5f:f8:37:6f:c8:cf:85:d6:3a:7b:
33:d1:fc:b3:a5:1f:a9:8e:0c:8e:1e:e2:e3:ff:c4:
12:17:0c:1b:69:fb:46:6c:8f:48:68:e6:40:4c:cd:
22:f6:6e:d2:d3:68:71:1f:ae:73:00:8f:61:ad:8b:
d6:4d:af:d5:c1:f1:a1:ee:da:7c:bc:12:63:97:6d:
68:a5:d4:33:56:db:0f:be:5a:36:f1:96:ed:d9:20:
c6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6B:E3:0B:FD:A1:75:2F:CE:42:98:91:B7:01:DC:1D:42:C6:92:F0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1GvjC_2hdS_OQpiRtwHcHULGkvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:af:11:c7:b1:d7:19:87:ca:7b:48:a9:0b:1d:19:ac:6f:72:
e6:94:dc:13:c6:12:af:3d:b5:99:17:d7:39:8e:3c:d0:59:0c:
b6:51:1a:63:ef:6f:71:8e:98:16:4f:58:b3:9b:82:a6:a0:01:
3c:05:11:91:2e:b8:9b:c0:6c:51:f8:8f:58:41:5e:38:fc:94:
26:a2:71:4b:bc:3c:e4:61:b6:60:18:78:a2:15:c3:be:6a:e0:
7e:43:22:2f:b9:02:46:71:d6:18:c2:2d:c9:93:f6:db:c1:1f:
8b:f4:cd:ba:66:26:4e:8a:8a:5f:2d:cf:6f:e7:e9:5c:ad:f7:
3d:33:71:17:f7:be:cb:4d:88:ad:fb:b4:da:10:01:45:c6:1c:
90:22:31:72:11:c8:c1:c8:ec:7a:7a:e8:28:9f:ba:7c:76:08:
a1:e3:fd:c4:0c:1e:9a:64:19:c0:2b:03:f3:64:20:4d:a7:cb:
1d:af:da:34:79:7b:bc:c0:b2:cc:bc:e7:a4:e0:0a:11:af:af:
1b:b8:e5:56:b3:67:f6:de:2b:08:b9:fd:60:24:ad:64:18:52:
1c:e4:fd:c5:93:87:87:5d:92:e3:5c:35:da:a1:48:b4:22:64:
5a:6b:69:b0:64:3d:73:58:e7:3d:44:e3:1c:fe:68:65:8c:0f:
6f:11:11:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:03:31 2025 by rpki-client