Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4MWiDIb5B-zY2m-8XRXdw4FEuMc.roa
File: 4MWiDIb5B-zY2m-8XRXdw4FEuMc.roa (raw, json)
Hash identifier: 6t4VOFvAE1QNqQCt5h4Kt1QvZqhlb7z7fAi7dnZNu5U=
Subject key identifier: E0:C5:A2:0C:86:F9:07:EC:D8:DA:6F:BC:5D:15:DD:C3:81:44:B8:C7
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D7D04613AEFFB8032057D2A1190503CBF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4MWiDIb5B-zY2m-8XRXdw4FEuMc.roa
Signing time: Tue 06 Feb 2024 06:04:15 +0000
ROA not before: Tue 06 Feb 2024 06:04:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:7d04:56da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:04:61:3a:ef:fb:80:32:05:7d:2a:11:90:50:3c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 6 06:04:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0c5a20c86f907ecd8da6fbc5d15ddc38144b8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:32:e9:b3:7b:b8:aa:a5:cc:14:54:36:b5:
5c:23:fe:26:e3:55:5b:dc:07:8a:ac:35:d6:ff:83:
1c:49:19:b7:29:50:ac:36:58:ce:41:57:b7:98:4b:
99:ed:11:2a:77:85:02:e6:fb:03:eb:e4:78:b6:2b:
44:fa:81:f6:43:fa:6d:70:7a:45:d9:0e:e1:e7:fc:
2b:1d:75:99:fe:ba:76:c9:fd:8d:b8:b6:44:f3:c5:
29:71:fb:58:9a:e2:d2:df:5d:51:80:08:66:20:9a:
07:f0:3a:86:5c:65:30:89:ec:b8:7a:9e:a1:97:44:
00:57:28:27:82:7c:d6:65:44:46:6a:0f:da:68:6a:
4b:14:24:32:60:94:7b:2e:b0:ed:94:d6:f8:83:ae:
98:b6:00:4d:a1:4a:bf:81:65:29:e0:52:b2:a8:1b:
b5:55:8a:65:aa:9d:19:79:d5:7b:e0:fd:10:7b:a2:
73:9a:fa:b3:6c:12:9a:1a:8c:a7:47:0b:55:4c:ab:
f4:b4:b1:82:ea:93:62:bb:2e:25:1b:64:9d:7f:fc:
17:12:cb:da:c6:15:8b:dc:3c:6b:4f:fc:f6:a0:1e:
f2:bc:8b:d7:f4:cf:c4:7e:a4:c0:ef:05:8f:ea:0b:
6d:6d:d9:66:60:7e:eb:ad:ba:bf:56:b0:73:51:d5:
23:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C5:A2:0C:86:F9:07:EC:D8:DA:6F:BC:5D:15:DD:C3:81:44:B8:C7
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4MWiDIb5B-zY2m-8XRXdw4FEuMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:ec:44:22:e8:a9:fb:f8:a9:a7:e2:f0:bf:32:27:92:11:3a:
4c:68:73:a7:4d:3c:be:7c:cb:32:cd:05:5b:a0:15:2a:49:67:
b0:cd:ff:b0:bd:88:28:f8:3a:9c:16:a7:8a:2b:57:5b:82:37:
e2:d9:83:f9:47:27:fd:bf:23:36:16:11:d9:33:2b:69:73:3f:
35:6a:b9:63:36:7f:e5:67:74:93:d4:2d:2d:57:31:1e:18:83:
5f:1c:a7:a4:62:bb:20:32:eb:23:2a:99:dc:d4:c1:e8:ff:ac:
65:c2:b7:bd:cf:43:77:9f:63:40:16:3d:af:3d:7a:23:ab:ec:
52:94:d1:fa:be:f1:c2:8c:29:22:1a:a9:55:3f:cb:02:bf:ea:
9d:5d:f3:b0:d6:e5:8b:97:89:15:d6:42:86:97:d8:c4:f2:ab:
7f:14:37:f0:8b:0d:8f:e4:d5:24:47:cc:b8:5f:de:78:5e:fe:
dc:9c:0c:79:6b:ad:4f:c2:08:ff:bf:ec:0d:ee:69:26:61:7c:
e0:de:02:08:68:29:d9:c6:e1:33:7d:c5:e9:f8:18:78:26:84:
0d:a1:3a:eb:3f:16:93:f7:51:5e:1f:f0:30:ea:b1:0f:de:cf:
d8:e6:7f:f8:b3:ef:1c:a1:73:d8:b8:3c:a0:05:b2:82:24:02:
1b:81:08:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:23:38 2025 by rpki-client