Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/91jzkWay24ZpvWqaF1koyCvE5KU.roa
File: 91jzkWay24ZpvWqaF1koyCvE5KU.roa (raw, json)
Hash identifier: t3831eRKp3JUrhueUzO2I0oXHcjZ3fgSNRuXQq5Uzyg=
Subject key identifier: F7:58:F3:91:66:B2:DB:86:69:BD:6A:9A:17:59:28:C8:2B:C4:E4:A5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E0583D0D191759BF691A9F557EDEBF71F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/91jzkWay24ZpvWqaF1koyCvE5KU.roa
Signing time: Sun 03 Mar 2024 18:11:48 +0000
ROA not before: Sun 03 Mar 2024 18:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:05:83:d0:d1:91:75:9b:f6:91:a9:f5:57:ed:eb:f7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 3 18:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f758f39166b2db8669bd6a9a175928c82bc4e4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7c:4f:64:d1:8b:ae:55:95:99:20:0b:15:5d:
ba:df:52:00:a2:58:a1:29:3f:ee:cb:5f:e4:00:b4:
7d:0e:f2:df:64:a0:9c:c6:5e:70:54:4b:05:a8:28:
c7:33:01:5c:52:ba:bf:6d:1d:c1:58:1f:51:b7:a6:
a0:84:0b:96:30:d1:36:89:1b:79:7a:6a:e2:60:9f:
20:de:67:65:08:62:85:f2:ba:57:4b:27:a0:ef:0a:
42:ae:b3:b4:9b:7a:d4:b9:bd:b1:ac:b0:1e:7b:af:
f4:7a:40:4d:b3:cf:46:18:f2:76:74:a9:2f:29:06:
fa:d1:bc:2e:dd:09:97:9f:9b:66:27:14:96:7d:fa:
53:b8:db:1e:34:22:58:a6:ca:ec:7f:08:f2:15:4c:
5e:99:43:e2:f4:bb:f8:0c:dc:2d:58:d0:15:1b:20:
6d:f0:c9:f6:f5:de:d4:6b:12:76:5e:7a:2b:a4:81:
4d:ae:01:45:ba:37:0a:1c:36:5c:d0:34:90:c3:1a:
94:9e:a4:aa:91:8c:6e:58:7c:13:7b:81:0f:9f:37:
da:74:d8:3c:6e:f7:c8:01:21:5d:94:8a:3a:89:c5:
0f:a1:aa:d9:10:18:63:6e:4c:f9:0f:5b:ff:c5:6e:
6c:46:11:d2:69:07:8c:ee:ec:2f:94:04:7b:6c:fa:
6d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:58:F3:91:66:B2:DB:86:69:BD:6A:9A:17:59:28:C8:2B:C4:E4:A5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/91jzkWay24ZpvWqaF1koyCvE5KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:47:d5:92:9f:bb:c7:4e:f7:06:5c:04:3d:b5:32:8b:61:b3:
1e:92:8d:e7:5e:c0:fa:90:8c:54:df:fe:f4:21:8a:77:1c:48:
b5:fb:1f:6e:e8:61:b8:da:86:6d:42:f0:af:50:e4:bc:0e:59:
92:1e:7c:e5:5c:53:38:93:c7:22:8b:d0:58:d0:ac:90:85:99:
9a:06:19:d4:d1:e3:2a:ef:68:92:bd:9d:0e:a9:b7:21:2a:29:
91:d8:92:2e:3d:20:83:3e:e7:e8:77:2f:75:b6:20:08:94:b3:
97:40:e5:72:bc:17:32:72:ec:e2:1e:a5:e1:2f:65:97:49:01:
ec:53:1d:0b:3f:65:5b:bb:b9:0d:4f:89:bd:15:a8:51:98:80:
ae:da:92:62:ba:e3:79:e9:fb:27:29:d2:9c:75:ad:d9:ab:07:
aa:70:6b:7f:0f:6c:c1:98:b1:2f:73:ea:ef:69:26:cf:ae:9c:
5c:10:8d:e0:da:41:d3:95:cb:4d:29:42:c0:5c:f2:9d:37:f9:
11:28:d5:b3:af:dc:d2:ef:02:80:33:1f:f3:08:00:3a:15:95:
45:98:08:fa:f1:d0:95:c0:4f:0e:96:97:f4:e1:be:cb:ca:b2:
8b:22:6e:4b:fc:62:26:76:70:3d:a8:90:76:82:50:28:93:df:
9d:dc:f5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:28 2025 by rpki-client