Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6Oyjj-sRkmCktaT6q9_NX_JWEOY.roa
File: 6Oyjj-sRkmCktaT6q9_NX_JWEOY.roa (raw, json)
Hash identifier: 1pF3iyarOke5MxjCY8C9noVOee0va+W6+VLfVzH1PHQ=
Subject key identifier: E8:EC:A3:8F:EB:11:92:60:A4:B5:A4:FA:AB:DF:CD:5F:F2:56:10:E6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DEB5627DE1A54AF469CB6979133FAFC71
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6Oyjj-sRkmCktaT6q9_NX_JWEOY.roa
Signing time: Tue 27 Feb 2024 16:11:48 +0000
ROA not before: Tue 27 Feb 2024 16:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:56:27:de:1a:54:af:46:9c:b6:97:91:33:fa:fc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 27 16:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8eca38feb119260a4b5a4faabdfcd5ff25610e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3f:bd:b4:fa:50:81:78:7b:78:40:c6:2b:9b:
ef:cc:62:b1:a9:e2:75:66:18:0c:93:7e:c0:3b:be:
0e:5f:af:33:21:38:35:5f:18:3e:cd:de:53:8a:22:
e2:76:57:d7:38:81:ae:04:59:f6:dd:d2:67:47:a6:
a2:75:8a:a0:94:72:f1:dd:35:22:91:65:ea:b1:5a:
e1:85:e7:91:74:71:49:90:08:7d:8f:27:70:9f:b6:
4c:b4:8d:28:2c:f3:27:9e:ce:a0:4d:c2:2b:e3:65:
c0:85:f8:98:b0:ad:d5:8c:10:56:c8:60:08:89:53:
8b:7a:54:6d:96:31:5d:96:20:df:2b:b1:5b:84:91:
c0:b1:97:dd:d6:d9:d9:2d:b6:37:60:74:b1:ef:12:
8b:7b:55:4b:96:e0:b0:b7:17:b0:a2:d9:77:ae:ec:
e3:26:67:7b:bc:81:cb:00:9f:a5:eb:47:51:33:5e:
bb:60:8d:db:f0:f7:68:53:12:e6:85:cb:24:d0:70:
92:05:cc:6a:8f:6b:d0:30:5b:54:19:12:ef:36:16:
de:d7:61:99:7c:34:17:72:32:ba:bc:7e:43:31:31:
5d:26:f0:bc:a6:44:ce:9c:06:c6:58:e4:5e:f9:a9:
96:aa:c0:8f:c7:97:af:8d:40:45:33:b9:cb:e6:05:
69:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EC:A3:8F:EB:11:92:60:A4:B5:A4:FA:AB:DF:CD:5F:F2:56:10:E6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6Oyjj-sRkmCktaT6q9_NX_JWEOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:21:76:d6:b8:ee:b5:e3:2e:65:80:47:14:ee:d5:c6:20:c2:
88:f2:9e:81:84:79:6e:76:5c:19:e7:bc:70:54:ee:7c:f9:83:
0d:3c:e4:42:63:c3:3f:14:58:99:da:cc:b1:b7:17:27:d0:dc:
bd:3f:88:b9:d7:32:89:26:46:b9:67:89:87:70:06:8c:8d:b7:
17:57:10:b4:96:85:dc:ac:f0:7c:24:18:53:5d:c2:03:ab:18:
19:91:04:22:af:06:0d:1a:0e:53:33:f0:8e:d8:e7:3a:54:b8:
a0:61:53:ed:0e:5b:b3:a6:ff:c8:0e:47:95:ed:9f:a0:35:7e:
f5:62:b3:00:07:ce:75:b8:fb:dd:ae:45:d7:20:d4:dc:b1:d8:
10:50:d9:d1:8b:9a:b1:4b:84:51:84:22:91:d2:72:3e:aa:b6:
b7:4e:86:86:00:56:ee:c2:99:3e:d3:95:b9:3e:b4:0e:bd:20:
02:c6:c5:57:55:49:d6:1e:d8:59:3f:5f:89:6b:00:2c:4c:3d:
1e:9a:4b:3a:b2:66:99:19:dc:65:c7:a6:af:75:6a:77:f0:1e:
2c:85:77:db:18:01:5b:0d:5d:86:e9:b5:5d:af:fe:ad:72:f7:
ba:b0:4e:f4:08:1a:ce:14:41:38:0c:d8:32:66:3e:96:0d:0a:
62:f6:5a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:28 2025 by rpki-client