Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5LsNI6A3_66qtO5nWJHZIvGz0I8.roa
File: 5LsNI6A3_66qtO5nWJHZIvGz0I8.roa (raw, json)
Hash identifier: Uf7mFW3rLWV9Ac5tutyORXCKnQQDmcIy/CIv3CKgrbU=
Subject key identifier: E4:BB:0D:23:A0:37:FF:AE:AA:B4:EE:67:58:91:D9:22:F1:B3:D0:8F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D44A0491BBF092C542D310D94BFB618B5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5LsNI6A3_66qtO5nWJHZIvGz0I8.roa
Signing time: Fri 26 Jan 2024 07:16:11 +0000
ROA not before: Fri 26 Jan 2024 07:16:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:44:a0:49:1b:bf:09:2c:54:2d:31:0d:94:bf:b6:18:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 26 07:16:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4bb0d23a037ffaeaab4ee675891d922f1b3d08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5c:46:06:ef:2e:42:69:b9:d4:a4:16:72:ef:
7b:a4:9b:f8:8c:03:da:fb:d0:17:27:09:93:fc:01:
a9:e1:35:1f:81:45:2b:39:75:da:67:69:ae:3d:96:
d3:d5:61:bf:c9:7c:a5:e1:dc:57:fe:ac:40:6f:93:
04:f4:2a:5e:86:00:1f:8c:14:ce:4c:0a:72:b5:fe:
e3:4c:2a:ac:09:73:f3:0a:30:08:50:17:53:8d:5c:
0d:5d:a8:f6:49:fd:b0:6b:d8:73:8b:3b:f8:47:f3:
61:fc:b3:1f:bf:68:ff:14:95:31:2e:72:0f:f4:a7:
59:e8:3a:12:f6:11:f5:83:68:db:bf:9d:b5:65:e5:
83:11:af:23:39:d2:cf:cf:04:d3:fd:ac:e3:0f:21:
65:9f:09:fd:be:c3:a1:9c:c9:de:de:9c:13:92:a1:
03:15:ce:b8:53:9a:c6:48:52:9f:4a:ae:35:f7:53:
f1:ab:a3:b9:8a:b9:ca:91:78:9c:54:e4:d1:0a:62:
29:fb:af:8c:a9:e1:81:06:19:ca:25:27:f9:17:f2:
6d:05:b6:75:bd:ff:64:b4:e4:71:c4:83:c1:d2:68:
ba:f5:0d:8b:2d:ce:90:73:60:04:2b:24:76:b9:ec:
a4:76:0c:32:aa:f1:46:5f:9e:db:61:02:c4:ae:c4:
cb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BB:0D:23:A0:37:FF:AE:AA:B4:EE:67:58:91:D9:22:F1:B3:D0:8F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5LsNI6A3_66qtO5nWJHZIvGz0I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:91:a6:8e:98:e6:f6:fc:cd:c3:d7:23:02:93:fe:00:c6:44:
2e:2d:96:3d:e4:6b:1d:bf:4f:c9:67:1a:b4:a6:25:5d:df:b7:
d7:9a:d4:ea:d3:72:b8:1b:00:9e:6e:e9:47:20:28:14:06:a3:
13:56:d8:70:6d:5a:60:2b:45:ba:43:bf:f5:dc:5e:72:b0:11:
cf:cd:03:8d:8c:0e:4a:9e:af:07:f0:a5:e7:27:b8:86:13:da:
ea:0b:77:1e:df:a0:e1:e6:54:45:d2:32:61:f3:00:70:dd:4c:
28:6b:fb:4a:a6:8b:da:22:9b:6d:64:71:23:41:94:18:31:c0:
4d:ac:2f:67:38:17:97:cd:80:81:d9:3e:50:a9:ae:95:54:be:
b2:05:91:56:93:35:fd:3d:05:b0:3b:69:4c:1a:03:86:87:38:
e8:7d:a7:00:e4:fe:2f:74:f9:ff:78:f6:a3:26:74:84:e2:f0:
4d:04:13:3f:d1:12:78:9e:08:a4:56:c6:9f:2a:9c:b0:19:1d:
f9:24:78:9e:da:5e:a6:a3:81:75:01:9a:9e:d3:7c:93:16:a0:
07:1c:3c:bb:fb:09:c1:32:26:97:0b:ba:36:c6:1f:3f:97:b4:
7e:95:84:28:6c:8a:fb:4d:9b:d0:de:53:e4:78:7d:8f:76:a7:
ec:c6:94:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:01:35 2025 by rpki-client