Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7YzxipUGlIpcy9fziWW9wOHGkeM.roa
File: 7YzxipUGlIpcy9fziWW9wOHGkeM.roa (raw, json)
Hash identifier: aXDC9LuC6E/7bPCXgOXScehlsKOTrmv8v/Z3qj433vU=
Subject key identifier: ED:8C:F1:8A:95:06:94:8A:5C:CB:D7:F3:89:65:BD:C0:E1:C6:91:E3
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CD3F6FCED0A50F31B9AEDE3247D5F0394
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7YzxipUGlIpcy9fziWW9wOHGkeM.roa
Signing time: Thu 04 Jan 2024 10:13:48 +0000
ROA not before: Thu 04 Jan 2024 10:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d3:f6:fc:ed:0a:50:f3:1b:9a:ed:e3:24:7d:5f:03:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 4 10:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed8cf18a9506948a5ccbd7f38965bdc0e1c691e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:e0:0c:b9:c8:0a:76:a3:25:d8:77:af:04:
ce:16:1f:f7:d7:03:b4:7c:7c:41:fe:e7:f6:28:06:
c1:84:52:8d:99:8e:7d:21:de:5d:97:60:53:6e:81:
0e:9b:6f:79:a4:d0:ad:bb:43:da:1a:79:2b:bb:9d:
26:74:24:e0:bf:ae:b6:4f:cb:30:44:f1:9c:5b:0e:
87:86:4b:f0:ad:53:b0:ff:c6:dc:54:55:ab:5c:3d:
9a:25:7b:ab:0e:fa:57:95:6b:2c:e4:de:8b:4f:af:
7d:60:cd:da:60:53:42:b2:70:b8:64:8d:d5:48:43:
7a:aa:f5:1a:27:25:ac:b2:d6:9a:13:a9:f6:1f:41:
83:7f:af:45:b7:b3:42:4c:e3:a6:47:fa:29:ff:2f:
15:3e:8f:5a:2b:2c:90:31:a5:f5:68:3e:b5:04:30:
08:d9:75:ac:3e:84:d8:33:e5:2b:4d:05:9f:a5:5c:
dd:c1:f7:b1:1d:6b:7a:d2:61:f7:5e:0b:3d:e5:fc:
98:13:bf:ec:56:46:ed:4b:90:25:24:62:bf:a0:f3:
13:dd:4e:63:e8:d0:cb:09:01:ae:3a:0d:fb:3b:23:
02:a0:84:0e:55:e3:30:cd:1f:2c:3a:37:75:93:a3:
e6:e9:c6:d7:69:1e:28:e0:45:e8:a1:e7:dd:ae:d2:
6a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8C:F1:8A:95:06:94:8A:5C:CB:D7:F3:89:65:BD:C0:E1:C6:91:E3
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7YzxipUGlIpcy9fziWW9wOHGkeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:bc:a0:9b:6a:25:59:3a:39:9a:a6:13:ca:9d:80:ce:f1:47:
d3:f2:80:70:32:2c:fe:b2:a7:3c:46:88:d3:18:38:31:70:18:
b6:19:11:be:ac:c6:41:e9:40:07:00:48:eb:9c:f2:b7:34:2e:
25:7f:96:50:b1:ca:3b:dd:e5:8d:7d:19:ac:19:96:2e:d4:c1:
94:fa:54:11:40:2f:f6:07:c0:a2:8e:f8:25:f6:e5:fb:d1:73:
bf:87:cd:8f:a9:f4:8d:f6:03:0f:38:c4:80:02:a4:7c:64:20:
1c:d6:ed:0e:2d:0c:74:4e:88:19:20:81:31:f0:ec:1b:31:9b:
67:95:99:b5:d8:af:ba:46:2e:71:b3:9c:ef:be:fd:30:68:87:
35:8d:e8:98:8a:25:ec:83:f9:aa:eb:2b:3b:2a:2e:ba:7d:63:
bd:87:b8:54:93:37:b1:35:bd:56:05:8b:40:f2:1c:43:14:20:
1f:cf:24:27:86:b6:3f:39:2f:7f:f6:08:67:dd:c1:0e:3b:c7:
33:83:d6:cb:7e:0f:d2:10:b0:58:9f:c6:b6:1a:49:6e:79:6d:
dd:c7:ba:4a:e4:77:d4:43:90:09:92:c8:12:be:67:0f:e4:de:
41:27:35:73:0c:37:f4:95:f1:8d:d9:ed:b0:da:0d:31:c6:f5:
8a:2a:ea:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:06:43 2025 by rpki-client