Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4JpM8-Orfxh5vgQwslDAxYSUSGw.roa
File: 4JpM8-Orfxh5vgQwslDAxYSUSGw.roa (raw, json)
Hash identifier: STXeaHsgiowSo5FDAtf17Hy6prJFqlhXdFqo5jWhbOs=
Subject key identifier: E0:9A:4C:F3:E3:AB:7F:18:79:BE:04:30:B2:50:C0:C5:84:94:48:6C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DEEFCE854FB6E718DF2ADCA627AE302AD
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4JpM8-Orfxh5vgQwslDAxYSUSGw.roa
Signing time: Wed 28 Feb 2024 09:12:48 +0000
ROA not before: Wed 28 Feb 2024 09:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ee:fc:e8:54:fb:6e:71:8d:f2:ad:ca:62:7a:e3:02:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 28 09:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e09a4cf3e3ab7f1879be0430b250c0c58494486c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3c:1e:00:24:19:57:fa:ce:45:88:a7:e9:ec:
de:37:10:df:43:c9:e6:5d:0d:0e:3d:ca:91:e9:92:
b3:a3:12:62:40:6d:82:b3:e8:7b:ef:e1:89:53:bc:
98:1e:a6:d5:c5:43:c6:88:e6:65:cd:8d:8b:d2:1c:
06:e5:47:86:f7:e0:cd:e3:56:c3:24:bd:27:d5:be:
4a:01:5a:af:f0:67:9b:f7:a4:89:31:c1:53:08:3a:
94:62:76:27:44:5e:11:cc:53:c4:35:f1:85:db:74:
ec:c3:2f:e2:88:66:68:f0:dc:ec:0a:c4:95:22:8a:
ab:94:c9:69:86:7c:e4:41:24:44:5a:8b:ba:cc:2f:
5b:49:1a:41:0c:73:41:6c:57:1a:03:3d:e1:d2:96:
86:e3:e7:8b:12:16:81:64:ba:2c:01:f8:3d:8f:a3:
0e:15:6b:1a:99:f0:a0:97:80:51:3e:3d:70:0d:f0:
e0:02:86:9a:50:1b:06:60:9e:67:38:a0:1e:6e:be:
d1:bc:f3:0b:db:87:ac:f1:78:72:6e:48:be:b5:93:
7c:0d:f1:a3:6e:09:7c:42:38:d5:80:ee:40:6e:22:
7f:ed:e3:d4:4d:8f:1a:d1:80:80:ab:de:a3:b8:89:
16:69:a1:25:d9:40:fe:00:cb:74:36:35:ac:97:fd:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9A:4C:F3:E3:AB:7F:18:79:BE:04:30:B2:50:C0:C5:84:94:48:6C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4JpM8-Orfxh5vgQwslDAxYSUSGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:e3:7c:fa:9f:4a:28:bd:7e:dd:7a:f2:51:1e:f3:f4:fa:0b:
52:f3:5a:2a:46:03:13:49:30:cf:71:f7:1d:9b:25:96:0a:b9:
2c:19:55:9c:bf:4a:8d:b3:be:c1:e0:fe:4a:70:1c:28:07:56:
c7:0b:90:4d:84:a2:08:30:70:f1:a0:ad:e3:ba:cb:11:3a:b8:
dd:7f:b5:d0:90:c1:70:6b:06:b1:58:dd:73:c9:47:39:6f:b3:
33:0c:c7:1b:e7:05:b2:4f:10:8b:dc:8e:15:82:d5:ab:04:e6:
02:cf:e2:95:74:af:68:dc:97:66:96:d7:9c:83:ac:40:c5:73:
d1:f0:99:fb:65:d8:27:0c:ca:15:99:8e:67:21:56:30:32:7f:
2a:43:1a:6a:4b:17:34:88:89:8a:1a:27:0d:b3:8b:33:75:73:
95:66:00:7e:6d:43:a3:fc:a3:a0:e6:e9:f0:41:df:eb:df:ac:
06:cc:a6:da:08:b4:89:fd:93:8e:3e:41:82:ed:5f:bb:a3:73:
34:28:96:2a:4b:b4:40:bd:d4:d3:14:4a:82:ce:94:0f:07:c8:
47:44:08:36:80:84:97:ed:c9:1e:99:88:e5:dc:47:3b:47:ec:
77:2e:85:94:eb:6c:04:6d:b8:69:b4:01:ec:b9:60:d0:bf:4e:
04:0b:5e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:14 2025 by rpki-client