Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Cs_p8BpgcngC8idbY-pORnEOdMA.roa
File: Cs_p8BpgcngC8idbY-pORnEOdMA.roa (raw, json)
Hash identifier: pYMhUSIRlsq+p4IAnEmAVOJYzOjgl5M6j8Z4YFJtVpY=
Subject key identifier: 0A:CF:E9:F0:1A:60:72:78:02:F2:27:5B:63:EA:4E:46:71:0E:74:C0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E86AFB1E300EC2C8234856EA014F904CC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Cs_p8BpgcngC8idbY-pORnEOdMA.roa
Signing time: Thu 28 Mar 2024 20:10:45 +0000
ROA not before: Thu 28 Mar 2024 20:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:86:af:b1:e3:00:ec:2c:82:34:85:6e:a0:14:f9:04:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 28 20:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0acfe9f01a60727802f2275b63ea4e46710e74c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:46:db:82:c9:d1:02:be:b8:4c:49:14:33:
77:36:27:aa:10:28:97:b5:2f:f4:57:a1:c8:dc:de:
ef:ff:34:be:6b:35:d5:20:63:d1:20:b8:c9:da:7b:
14:95:1b:0b:5b:20:4f:cd:0f:07:8b:37:68:bd:69:
53:e4:56:48:2b:78:94:ce:4c:23:d1:fd:23:7b:81:
b1:d7:29:cb:25:c2:03:4c:dd:8d:92:87:8d:7d:a3:
57:d5:02:8e:23:09:a7:f7:a1:c1:34:74:0b:01:3b:
9d:8b:84:ea:e7:8a:1c:ff:8c:f5:57:9f:f7:df:28:
5a:fa:9a:85:54:5f:30:a1:a9:a0:f3:25:2f:0d:0d:
92:48:66:80:9c:01:5c:80:ec:de:3b:ae:70:2a:dd:
af:4d:b1:05:b3:4f:0d:98:ab:a8:a1:eb:96:4f:54:
ea:2e:c8:38:a9:0e:c8:dc:18:46:4e:32:8e:f7:f5:
c9:d1:ac:9c:b8:a3:12:9c:92:dd:3a:08:44:4b:bd:
99:7e:de:dd:8c:bc:37:e2:c9:f0:c4:3a:48:de:c1:
d6:b2:12:3b:35:0e:a9:f0:97:92:8e:4c:44:9b:49:
4a:cc:17:78:e4:ad:80:04:7a:72:1a:cb:d8:5e:dd:
c2:72:b7:2d:ff:a4:74:b3:74:dd:62:70:bd:4e:5a:
63:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CF:E9:F0:1A:60:72:78:02:F2:27:5B:63:EA:4E:46:71:0E:74:C0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Cs_p8BpgcngC8idbY-pORnEOdMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:3b:d3:8e:ac:5d:16:f6:73:dc:dc:fa:c4:1b:3a:d7:77:1a:
39:0f:7a:70:0c:7f:ca:36:a6:ff:fe:43:83:28:f7:28:d5:90:
53:91:a4:7a:3e:91:a2:ef:0f:c6:53:c7:af:c5:a4:43:d1:d2:
a0:5b:84:2b:1c:d7:a5:da:ac:10:e3:32:03:ac:13:6b:96:e5:
d1:92:8f:d6:61:52:4c:c6:00:1a:f0:c1:f2:9d:28:8d:5d:9b:
a7:00:46:0d:3c:d8:2a:ea:38:74:25:7c:97:d9:26:e4:75:0b:
7c:04:c7:1c:9e:13:52:b3:4a:8c:ca:ec:81:07:70:b6:ac:fa:
5d:51:e9:f8:2d:d0:b5:a6:f7:9d:98:85:49:13:26:d4:08:ab:
f5:a7:e0:76:5c:c7:98:81:c2:47:95:4d:28:a0:6f:56:14:81:
9b:08:f5:65:b9:6c:0b:80:1a:3e:83:64:b7:6c:e7:1e:5b:b9:
5d:9c:75:ff:6c:2f:40:98:29:57:00:4f:49:79:ba:99:3d:e6:
f0:92:34:f6:1b:32:00:1f:f4:90:d4:f0:fb:14:2b:d7:7c:8e:
9f:e6:17:09:ad:5c:26:1c:43:1f:ca:51:fa:08:74:d2:8f:db:
79:61:8c:e9:b8:1b:f2:50:46:ba:d2:de:4c:06:d4:e9:aa:43:
8d:69:35:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:45 2025 by rpki-client