Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BtnWzv7qUnxxq7BtUaHyCE84SFE.roa
File: BtnWzv7qUnxxq7BtUaHyCE84SFE.roa (raw, json)
Hash identifier: 2H9Z0A9IZlPbFBkpvLtOKZACaC2ljtTQFewBJUhS30M=
Subject key identifier: 06:D9:D6:CE:FE:EA:52:7C:71:AB:B0:6D:51:A1:F2:08:4F:38:48:51
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D53D1DF945317CCA20B4569B78490F596
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BtnWzv7qUnxxq7BtUaHyCE84SFE.roa
Signing time: Mon 29 Jan 2024 06:04:39 +0000
ROA not before: Mon 29 Jan 2024 06:04:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:53d1:7476/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:53:d1:df:94:53:17:cc:a2:0b:45:69:b7:84:90:f5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 29 06:04:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06d9d6cefeea527c71abb06d51a1f2084f384851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:80:ca:44:60:99:10:41:c6:87:07:0c:fb:32:
53:3d:19:1b:ce:dd:93:73:ca:99:38:de:d2:40:ac:
e3:f8:f2:75:b6:dc:95:0a:9f:cb:f6:1b:8d:42:69:
15:66:c0:ec:be:b1:76:9c:08:ea:b1:82:c8:81:6b:
16:7c:b0:48:a5:59:78:05:d3:62:8f:18:91:f6:53:
a9:80:e2:33:2c:06:22:1c:0f:f0:3e:50:59:d1:1a:
3e:c4:84:71:61:c1:6f:88:cf:7f:92:eb:66:fc:e7:
be:4e:96:b8:09:8b:94:12:15:d5:05:b6:a0:af:0e:
62:92:b8:49:61:e2:35:aa:60:42:a5:4f:a1:bc:45:
5b:c8:87:15:60:cb:13:65:10:96:db:a1:b4:a9:66:
10:f0:b0:95:4c:04:26:54:d4:d6:9e:71:d0:37:df:
97:68:54:92:f7:cf:f3:2b:9f:8d:cd:99:cd:cc:b9:
b9:f5:37:2d:53:5b:76:22:fd:d4:af:56:4d:79:03:
ef:eb:14:15:79:01:e0:d4:84:3a:b5:ad:2d:e6:5c:
5b:92:9f:df:a2:7f:06:9a:13:46:40:82:a3:ff:88:
be:b8:33:ca:40:d0:be:1c:e7:fb:17:02:ec:f4:6c:
33:ca:40:30:98:9f:78:9f:c1:91:9a:5b:01:b5:83:
5a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D9:D6:CE:FE:EA:52:7C:71:AB:B0:6D:51:A1:F2:08:4F:38:48:51
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BtnWzv7qUnxxq7BtUaHyCE84SFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:9a:e8:25:3a:f7:ab:d3:f5:25:76:6d:cd:75:18:fa:8b:50:
16:b1:32:df:82:98:2c:88:e7:8d:0d:2a:79:2f:a0:d3:1a:26:
80:a7:59:bc:19:db:f0:0f:ae:0f:f1:90:20:5e:d8:1d:36:13:
c7:02:b6:0e:79:ee:76:08:17:d4:a4:c8:2e:94:e9:16:39:23:
34:7a:2a:68:c6:90:0e:ea:ff:a6:f1:76:6a:db:fe:15:3f:f1:
75:33:38:e8:43:e5:1c:87:5a:96:41:9b:a1:a4:fa:a3:d8:22:
30:32:ff:a4:32:4a:a7:88:2a:50:a9:54:c7:bd:9d:bd:42:ac:
ce:bd:31:b1:5c:f4:53:29:94:cc:e2:3f:ca:d6:73:78:41:02:
29:24:96:ab:3b:22:5e:d0:20:2a:13:8b:eb:5f:a4:a3:59:62:
e8:01:1f:d4:b1:3b:17:4a:3c:92:6e:32:9d:51:06:5d:47:ed:
bb:59:9b:05:26:c4:23:21:71:86:b7:4d:e8:6a:bd:30:c2:5e:
dc:0f:50:03:9a:39:bd:5e:da:b3:66:f9:2c:7a:21:43:10:f4:
49:c6:52:89:45:4f:f9:03:4f:f5:eb:aa:c6:4b:cd:73:e6:c3:
6d:10:0f:ea:ba:85:2f:f9:0f:0e:4d:e3:2c:01:7a:d5:97:09:
d9:9c:7c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:26 2025 by rpki-client