Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6aPRB46Nrgd-rag3j3Ol5FwQi5A.roa
File: 6aPRB46Nrgd-rag3j3Ol5FwQi5A.roa (raw, json)
Hash identifier: iN9TUaFXzXphjggMm1Y0o9AmSxL+YYDWFMg27EooMks=
Subject key identifier: E9:A3:D1:07:8E:8D:AE:07:7E:AD:A8:37:8F:73:A5:E4:5C:10:8B:90
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D3374D6D190D133487914EFF11B74AB50
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6aPRB46Nrgd-rag3j3Ol5FwQi5A.roa
Signing time: Mon 22 Jan 2024 23:15:11 +0000
ROA not before: Mon 22 Jan 2024 23:15:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:33:74:d6:d1:90:d1:33:48:79:14:ef:f1:1b:74:ab:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 22 23:15:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9a3d1078e8dae077eada8378f73a5e45c108b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:db:a4:29:4f:3f:13:e9:63:9f:0f:41:34:
f5:d6:aa:51:d0:8a:63:12:18:26:34:3b:31:12:43:
61:52:f5:93:03:0b:c1:fa:68:0a:bc:8b:b4:66:24:
84:2a:92:9b:5b:eb:78:0b:4c:55:05:4a:2f:a2:ae:
78:0b:2f:f2:38:a9:d6:d8:80:16:65:1c:2f:e2:a7:
8d:c8:9d:76:b9:ed:b9:53:39:88:1e:b7:65:66:bd:
02:b4:39:c5:d0:7a:49:66:7c:b1:8a:25:9c:77:b4:
7f:d5:68:03:4b:87:77:d2:21:4c:a2:81:5e:f0:0a:
18:59:4c:3b:aa:fe:4d:05:b6:84:29:00:8b:65:27:
f5:72:d4:bf:1c:ea:18:19:18:e0:97:5f:3d:15:73:
f7:94:88:06:db:64:2a:3e:11:26:3f:24:d1:b5:75:
3a:cf:f0:32:33:86:df:d8:40:af:da:be:63:15:22:
cf:c9:a5:c3:4f:9e:e5:78:cd:0e:19:08:f5:3b:09:
ea:74:c3:a9:05:cd:71:f1:18:3c:95:73:02:bc:4b:
75:9d:c0:38:c9:0d:19:6f:eb:d7:b2:f0:a1:1d:d5:
1c:b0:4b:5c:0c:ca:bd:88:7b:09:33:e8:62:f4:df:
9b:18:08:c1:32:90:01:b7:63:60:a7:44:c0:9f:b8:
ec:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A3:D1:07:8E:8D:AE:07:7E:AD:A8:37:8F:73:A5:E4:5C:10:8B:90
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6aPRB46Nrgd-rag3j3Ol5FwQi5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:f1:83:8f:4c:dd:bd:43:42:97:fa:b8:f1:4d:e4:f1:a0:34:
c4:f2:66:d1:cd:21:35:d9:59:4b:bc:af:dd:a1:00:65:37:bf:
91:cb:00:2b:83:42:ed:b2:d5:25:ba:4b:9e:34:0d:4f:ed:dd:
b1:32:5d:f0:97:bc:f6:28:9f:bb:6b:19:c8:1c:19:3f:b1:84:
81:75:d4:a2:88:d5:f3:f9:04:99:3f:2e:88:71:45:50:72:13:
f8:5f:0d:8e:8b:12:d3:19:19:12:51:eb:b2:ac:eb:53:3d:54:
84:c3:f0:3d:a9:6a:f3:67:99:df:d0:07:b9:9a:55:d5:42:d4:
ca:b5:27:1c:26:b4:a7:88:5b:e3:25:0b:3c:14:a1:3f:a0:23:
54:ef:0d:ed:96:e6:1d:95:d4:9a:8e:80:22:e9:c4:be:8e:1d:
4b:39:bf:3c:76:51:f6:81:f4:22:24:92:cb:09:ca:69:b7:9b:
1f:44:a8:3a:00:3f:0a:ff:38:53:4a:1e:00:ed:4f:a3:df:c3:
cb:57:77:a9:fe:6a:66:b4:81:54:e1:54:57:32:81:fe:8e:4e:
71:4a:6d:16:34:d4:9e:60:71:29:79:63:c4:3d:e9:d9:9c:21:
ca:19:c9:6a:07:32:bb:0c:9e:0b:a0:61:9c:0e:2d:00:1d:40:
4c:1c:3d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:23 2025 by rpki-client