Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EJJkH1z8wmrtqaoVlfMnUze0OV4.roa
File: EJJkH1z8wmrtqaoVlfMnUze0OV4.roa (raw, json)
Hash identifier: +KdCp9n7yQpALa0+mqOp1j2Sno0Z6dpi96QcoH/M/s0=
Subject key identifier: 10:92:64:1F:5C:FC:C2:6A:ED:A9:AA:15:95:F3:27:53:37:B4:39:5E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DAE27D258226A7B8CC66ACC0A5194ACC2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EJJkH1z8wmrtqaoVlfMnUze0OV4.roa
Signing time: Thu 15 Feb 2024 19:04:21 +0000
ROA not before: Thu 15 Feb 2024 19:04:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:ae27:aa56/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ae:27:d2:58:22:6a:7b:8c:c6:6a:cc:0a:51:94:ac:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 15 19:04:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1092641f5cfcc26aeda9aa1595f3275337b4395e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:7a:43:71:4f:ce:67:c1:4f:26:3e:4d:7b:
34:6e:5b:92:02:ef:64:a2:da:24:58:48:40:d6:32:
d7:e2:83:0b:d0:3e:95:2d:ef:b7:5f:3b:a1:a8:20:
53:8c:d6:6b:15:ca:16:1b:3a:4d:5b:2b:74:33:e4:
6e:29:c9:32:af:76:85:90:7e:2e:6a:5e:88:b7:a9:
ff:b3:59:f4:d9:5d:9b:b8:02:85:b1:3a:d2:63:93:
a1:ff:86:d0:19:5e:aa:d1:84:4c:a7:1c:9b:6f:70:
6a:01:d7:1a:6e:02:9f:6a:2c:3a:29:95:4b:43:a3:
74:41:94:5f:18:f7:ac:a7:58:f3:91:f4:54:87:ed:
80:85:e2:a1:01:88:51:fc:fb:b3:19:b1:d6:d6:3e:
ba:ef:42:d2:fe:e3:fd:3f:49:40:b4:d6:b2:d7:60:
b3:90:54:86:2a:aa:08:99:18:18:d2:c0:59:83:ff:
23:4e:93:f9:2c:bf:b3:21:05:f5:27:94:21:ee:25:
de:19:80:28:7a:29:d5:24:ec:2e:35:ef:bd:3a:fa:
d3:da:86:f3:a8:b7:24:41:13:4f:91:41:e5:bf:94:
53:ac:2c:70:b5:e7:cf:30:3f:81:2a:30:96:71:e7:
af:f8:bf:21:a6:47:01:18:55:f6:cb:61:18:93:30:
f7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:92:64:1F:5C:FC:C2:6A:ED:A9:AA:15:95:F3:27:53:37:B4:39:5E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EJJkH1z8wmrtqaoVlfMnUze0OV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:99:2d:c2:1b:43:0b:a1:bb:75:57:37:ed:db:fc:a9:41:f9:
81:49:d1:79:ef:b2:03:5a:e9:1b:5e:1d:b8:2d:42:10:35:ca:
6d:a1:49:55:a1:0f:6d:11:23:fc:94:8c:17:39:d0:54:17:0b:
2c:63:1d:42:0e:0f:93:e7:95:a4:35:45:0c:96:31:4d:d1:fd:
ef:7e:4b:93:3a:9e:07:dc:de:66:b8:d0:b5:e3:0e:62:ad:e4:
ed:94:e6:8b:ab:e5:38:74:3c:93:9c:27:62:00:c5:48:f5:40:
6f:88:1f:fa:13:94:82:14:01:99:78:c3:39:4c:72:e7:f2:5d:
f5:08:a2:c5:ae:68:9d:e9:54:d9:4d:6b:2a:fd:ac:04:19:2f:
9b:1d:8f:42:8d:91:ca:b3:33:55:c8:52:87:d8:e9:9f:ce:f8:
5f:45:9d:2a:5e:4d:bd:aa:ac:d4:1a:cf:3e:65:ae:bd:59:6f:
ec:b6:f8:1a:c8:28:23:e7:16:3e:1f:04:b1:e9:08:50:b2:cd:
c5:38:37:bf:fb:06:10:b0:77:ba:22:79:56:f0:e4:1d:63:79:
7a:19:7d:2f:17:11:75:4e:fa:4e:10:7e:64:fe:cc:c1:6d:4a:
88:74:f4:7f:9e:f8:70:59:0c:60:88:2d:0b:0f:82:ce:4a:81:
b7:c4:80:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:21:19 2025 by rpki-client