Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DVLmmpH_ZfqatT5fSDNkZpopaxU.roa
File: DVLmmpH_ZfqatT5fSDNkZpopaxU.roa (raw, json)
Hash identifier: DMmDEIl7hBLc+erpjCjbWeB4bmzRtz09zw87hG8HuhE=
Subject key identifier: 0D:52:E6:9A:91:FF:65:FA:9A:B5:3E:5F:48:33:64:66:9A:29:6B:15
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D34877F5892096B0C60652E639181687E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DVLmmpH_ZfqatT5fSDNkZpopaxU.roa
Signing time: Tue 23 Jan 2024 04:15:11 +0000
ROA not before: Tue 23 Jan 2024 04:15:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:34:87:7f:58:92:09:6b:0c:60:65:2e:63:91:81:68:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 23 04:15:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d52e69a91ff65fa9ab53e5f483364669a296b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:9b:57:6a:60:6a:eb:b0:85:b6:5d:85:3a:
92:28:90:f5:37:21:03:e2:18:a6:0e:f4:16:70:ae:
48:7e:de:6b:2d:4f:82:ca:56:2e:bf:ce:80:86:db:
a5:df:72:bf:96:ed:2e:eb:24:df:11:e5:c5:9e:1c:
78:35:40:ca:70:d4:a4:0c:6a:24:f6:91:cb:c3:41:
1c:f6:c6:09:b4:16:4b:e3:1f:48:6c:ea:68:26:8b:
04:ab:c6:a6:26:50:6d:46:46:8c:a5:59:d1:9e:2d:
52:e0:f1:c5:47:82:e3:bc:bd:22:54:86:61:20:d4:
12:3d:e0:db:5f:d9:4a:ec:6b:33:22:cc:d6:fe:2a:
12:46:39:23:6e:65:6b:a1:c5:8b:2f:32:0f:f5:30:
d8:6b:02:73:26:3a:ef:94:9b:8e:98:03:d5:42:b1:
85:91:0f:f3:21:07:f1:6b:dc:b5:97:0c:a5:51:49:
11:2d:1b:0d:fa:72:54:7a:26:47:3d:d3:95:a3:1d:
75:83:f3:8b:70:44:63:36:29:e2:91:da:06:ac:98:
40:f4:b2:6f:16:8e:07:0e:55:50:a0:a8:30:e0:31:
18:ca:34:9f:b1:d5:d9:ca:e4:b5:8c:bf:ac:17:6a:
8d:b4:99:98:98:e3:0f:0d:b4:3f:00:91:2f:67:38:
3f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:52:E6:9A:91:FF:65:FA:9A:B5:3E:5F:48:33:64:66:9A:29:6B:15
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DVLmmpH_ZfqatT5fSDNkZpopaxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:d1:56:93:94:6b:33:f6:e5:7d:61:07:20:8a:69:b8:e3:87:
df:22:12:d4:a4:d2:90:08:0e:bb:ba:97:37:20:17:11:70:0b:
b5:f2:90:3c:d7:c0:a2:d5:02:a8:96:44:f7:55:3a:39:12:36:
66:a4:e7:ec:7a:0c:a3:36:c3:71:18:27:87:eb:1c:d1:b8:7e:
7d:a8:6c:1c:2d:15:b7:4d:ac:87:6e:4f:2b:3b:26:6b:e1:d0:
ed:bd:6f:11:ef:19:c5:0c:01:c7:41:dc:d4:74:d2:0e:47:bd:
4c:22:0c:93:29:41:cb:c1:9d:59:d9:7d:34:96:c2:32:20:3a:
b4:aa:6f:e3:06:63:6a:f1:a7:3d:45:f8:e5:15:7f:ed:6a:4b:
c2:44:b2:dd:28:5a:39:7d:0e:9c:b2:53:e9:d7:51:38:f0:85:
43:c5:9d:d8:92:c7:9d:5b:fa:74:6d:99:19:bb:29:8f:d2:9d:
f5:80:34:cf:cb:37:2b:64:27:27:73:ba:82:f0:b0:69:f7:32:
dd:17:de:91:38:98:58:61:b5:36:bf:fa:d9:50:ea:b3:ea:55:
64:9a:fb:53:e7:e8:c1:ac:19:62:b6:1f:c5:e8:66:c6:c3:da:
c2:f6:30:78:4b:02:f9:ba:0d:12:fa:bd:65:e9:c8:86:b6:ae:
6c:43:de:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:56 2025 by rpki-client