Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5y7qwchreYagZ4UG1wKCSw1MAB0.roa
File: 5y7qwchreYagZ4UG1wKCSw1MAB0.roa (raw, json)
Hash identifier: TWxtnAeVXIrSoLAcKtChdJIgDI4uEnBBqYSVy+7xjVA=
Subject key identifier: E7:2E:EA:C1:C8:6B:79:86:A0:67:85:06:D7:02:82:4B:0D:4C:00:1D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DB578FD9C2688E01CEE4B16E1FD17449D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5y7qwchreYagZ4UG1wKCSw1MAB0.roa
Signing time: Sat 17 Feb 2024 05:10:21 +0000
ROA not before: Sat 17 Feb 2024 05:10:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b5:78:fd:9c:26:88:e0:1c:ee:4b:16:e1:fd:17:44:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 17 05:10:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e72eeac1c86b7986a0678506d702824b0d4c001d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e7:86:a9:60:b5:97:2b:ec:7f:65:c4:d5:4f:
58:7e:1e:5d:88:78:f2:e2:65:f4:55:27:c3:50:26:
33:20:94:19:c7:09:2c:ef:d1:ab:a4:01:63:31:46:
a7:c3:a0:11:a1:26:1f:9b:33:7c:d4:cf:ce:2a:73:
b1:0b:3d:92:83:ae:ca:43:f3:70:cd:49:1f:d3:b7:
27:c3:15:27:cb:e7:86:16:6f:17:d8:e7:09:84:fd:
c8:04:e0:19:8a:8d:54:48:bc:df:e9:4d:19:a4:d3:
2d:c1:65:8a:c5:71:30:60:df:3c:5f:3f:ca:58:ef:
e1:2a:ff:59:86:50:af:89:21:32:b7:53:a5:a5:90:
4a:5e:62:82:47:18:1b:7f:8d:1f:de:b6:73:bd:27:
50:e2:6c:1e:06:1a:eb:21:87:21:35:9d:7a:25:15:
d0:78:dc:a2:d1:82:66:2b:a4:78:a9:78:3d:f7:da:
7a:00:44:26:f6:c4:d2:be:ae:44:e3:47:b3:4e:07:
d2:86:55:89:7d:b3:93:42:4b:ce:c5:b3:b8:8c:6b:
43:32:61:03:af:51:55:89:11:95:ed:99:93:ec:8b:
d1:3f:81:08:8c:c5:e0:49:a2:af:06:ba:50:3a:0c:
fe:80:c6:e4:8c:68:c6:12:d4:12:52:dc:cf:d5:37:
55:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2E:EA:C1:C8:6B:79:86:A0:67:85:06:D7:02:82:4B:0D:4C:00:1D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5y7qwchreYagZ4UG1wKCSw1MAB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:1f:d9:42:d6:ae:c8:cc:db:14:4d:84:42:82:1d:da:e2:db:
d4:60:2d:d8:79:97:fd:40:26:e9:41:60:e1:10:e0:1c:a7:bc:
78:fe:2e:12:b8:0f:f8:09:81:47:ff:a0:ff:00:40:18:10:ee:
68:97:b6:f0:68:9d:63:60:96:7f:5c:63:51:57:e2:78:e9:49:
73:ad:79:f5:cb:e6:2e:8e:24:61:9c:f9:d8:aa:26:68:11:20:
30:f3:cf:8a:62:10:98:2d:ef:d7:88:1e:f1:bb:91:fd:82:07:
b7:bd:43:00:f0:76:b6:1d:46:38:db:ad:d3:23:24:88:18:a6:
7a:20:1e:1f:3b:cb:fb:d6:b6:cc:b8:36:fb:17:4c:04:1f:16:
e3:67:40:68:b5:87:e2:e8:c9:c5:38:32:29:65:16:04:41:6a:
94:f2:d7:4f:4c:df:e5:b0:83:2a:1c:e4:73:60:25:cc:ca:59:
4b:7f:6a:63:d7:f3:f6:54:88:64:32:3c:e0:ae:85:f5:01:48:
94:65:43:2e:5b:89:eb:3f:c3:e8:28:ad:7e:d3:d5:cb:0f:42:
ff:45:4b:d7:63:91:26:9d:d8:d1:64:5c:9c:e4:a7:89:ec:10:
d4:45:ac:50:ab:15:c6:43:6d:30:75:0a:49:c2:9a:85:8b:84:
5b:0b:c3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:37 2025 by rpki-client