Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8qXIbZ8ovTIxMl0m1GYgefS6uRI.roa
File: 8qXIbZ8ovTIxMl0m1GYgefS6uRI.roa (raw, json)
Hash identifier: JVHs/PMSUs8dgctIMOrn3kYZnBZQU9ZmSpRLUOGMJBI=
Subject key identifier: F2:A5:C8:6D:9F:28:BD:32:31:32:5D:26:D4:66:20:79:F4:BA:B9:12
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E325AD77BF17BCBF83A73B5756ACB3C55
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8qXIbZ8ovTIxMl0m1GYgefS6uRI.roa
Signing time: Tue 12 Mar 2024 11:09:57 +0000
ROA not before: Tue 12 Mar 2024 11:09:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:5a:d7:7b:f1:7b:cb:f8:3a:73:b5:75:6a:cb:3c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 12 11:09:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2a5c86d9f28bd3231325d26d4662079f4bab912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:40:fe:16:e9:b6:4e:89:75:1c:ad:12:b2:
d7:60:87:a1:f3:8b:4f:c2:bb:7f:fa:cf:ec:38:3a:
f0:88:f9:92:95:7e:c2:86:d6:ce:49:8f:7b:18:c5:
76:b3:ce:38:72:c8:2d:4a:9c:51:0c:7e:fe:70:a7:
7e:f6:07:ff:b3:92:de:65:de:4f:10:d1:39:31:0a:
92:20:ac:49:2f:5b:83:c7:78:5c:7f:7c:aa:30:df:
96:2c:51:70:d5:2d:72:35:f8:e6:1c:78:2b:35:ca:
3d:ac:22:e8:3e:b6:30:60:74:84:fd:6b:b0:0a:66:
45:c9:cb:4b:9e:4b:dd:e9:94:15:e9:32:22:9c:05:
d8:14:d3:62:37:f4:b2:82:4d:b4:09:7a:1a:0d:b4:
af:d4:b6:b9:ac:88:a1:f9:7a:17:40:cc:b1:3f:17:
43:36:e4:fd:12:43:59:75:1a:33:1d:d5:dd:56:3e:
21:36:93:0c:e2:a0:87:5a:aa:86:9c:61:2f:35:73:
41:56:4b:75:bd:91:5e:aa:75:f8:1e:22:25:a6:f4:
6c:b3:f2:cd:5f:56:97:66:de:d3:08:b0:27:2d:58:
e2:c8:64:4b:91:98:f9:0b:24:29:fe:ec:07:f6:e4:
8c:93:ba:1a:91:dc:76:df:d8:9c:1c:33:cf:e8:51:
94:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A5:C8:6D:9F:28:BD:32:31:32:5D:26:D4:66:20:79:F4:BA:B9:12
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8qXIbZ8ovTIxMl0m1GYgefS6uRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:4f:24:9c:c5:1f:88:c4:97:da:3b:28:21:64:ac:3e:9b:26:
59:68:cd:c6:61:4e:35:14:49:b6:47:7b:42:2e:be:ac:62:44:
86:df:6b:e5:3d:ec:fa:de:d3:fc:5e:d3:a0:51:ac:36:38:76:
53:be:c8:99:23:0f:50:ca:28:a2:4a:f7:29:73:3c:9d:58:eb:
31:fd:26:e6:c7:91:06:94:87:b9:38:94:92:02:da:60:19:90:
e6:d5:30:c8:91:de:f8:7d:b3:bc:8a:d9:30:b2:13:9f:36:ec:
0c:92:87:44:02:3e:26:7e:35:68:85:33:ed:68:cc:e5:12:11:
4d:d7:4a:eb:f2:ad:78:1e:fb:a2:a7:f3:86:ce:5c:f1:4a:8e:
76:6f:07:4a:5b:32:44:fc:4c:68:48:03:99:c5:06:40:5a:91:
34:d7:2c:8a:12:13:1c:b1:fb:99:b1:a9:27:9f:f5:1a:c5:b8:
ae:72:3d:90:6b:9c:8c:a6:41:76:95:39:c8:73:aa:fd:f4:e2:
1e:53:b0:8f:31:0d:2a:20:66:a1:af:d7:76:ec:37:9f:72:14:
de:0b:1b:f5:91:4f:ae:cf:88:dc:26:52:69:e4:2e:21:c0:2b:
7d:02:ec:9f:3e:12:75:ce:a9:4e:ab:18:dd:54:9b:17:ea:e6:
76:99:9c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:55 2025 by rpki-client