Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EYR0VjWAjdnOtHDSP-RZOGhb7Fg.roa
File: EYR0VjWAjdnOtHDSP-RZOGhb7Fg.roa (raw, json)
Hash identifier: K5qC2y9DDGx6wF3XboJSDLF9fTnA1fFCNU4EGuEKGAU=
Subject key identifier: 11:84:74:56:35:80:8D:D9:CE:B4:70:D2:3F:E4:59:38:68:5B:EC:58
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E93599382360CCA80B1F19BAF2125AA19
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EYR0VjWAjdnOtHDSP-RZOGhb7Fg.roa
Signing time: Sun 31 Mar 2024 07:11:44 +0000
ROA not before: Sun 31 Mar 2024 07:11:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:93:59:93:82:36:0c:ca:80:b1:f1:9b:af:21:25:aa:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 31 07:11:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1184745635808dd9ceb470d23fe45938685bec58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f2:46:21:9f:94:e5:f2:02:cf:d5:f2:57:52:
e0:ba:d5:b4:42:b4:b2:67:d3:02:5b:9d:36:40:eb:
6f:be:92:b8:ee:bd:44:64:f1:28:1a:ec:bc:f6:be:
2c:a6:5b:6e:3d:7b:2c:a8:5d:df:1f:dc:3d:b2:c5:
f2:7e:fb:c2:f5:f2:b1:f4:d7:6b:4d:37:74:fb:ac:
46:09:02:18:02:0f:ed:f7:0a:e4:af:29:85:c5:4b:
76:61:f5:60:ef:b3:bc:4e:a2:9b:fd:3a:33:c3:ab:
5b:91:2f:20:ef:69:66:27:63:94:c5:81:10:d2:28:
5c:83:77:ee:ca:22:ec:47:8f:f1:73:dc:4c:21:9b:
7f:76:bd:aa:ff:16:92:46:6f:fd:8a:e6:d0:da:c2:
50:fa:7f:d4:9a:6c:66:a0:a3:2f:6b:fe:48:81:56:
31:76:f0:b7:24:fd:2d:1f:8e:11:21:5e:17:5c:cc:
f5:a9:3a:cb:6f:c5:d5:84:db:09:77:e6:d2:d6:31:
73:8c:b6:65:ed:1f:87:13:be:b1:0d:ad:62:8a:8b:
43:53:ed:28:ab:63:60:ea:80:3a:02:8a:e6:44:87:
e9:1a:98:e5:91:d7:16:32:77:c6:1b:9e:2a:e8:dc:
09:b8:fb:f7:28:d5:dd:f6:72:cd:91:b9:b9:d0:78:
03:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:84:74:56:35:80:8D:D9:CE:B4:70:D2:3F:E4:59:38:68:5B:EC:58
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EYR0VjWAjdnOtHDSP-RZOGhb7Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:d3:27:eb:33:5d:e3:4f:d5:0a:a0:18:35:8c:b0:f3:ba:f6:
70:bf:7e:46:aa:8f:ba:d4:4e:2e:03:5d:33:e3:f5:43:35:4b:
33:70:4d:6a:04:64:01:1f:3e:b6:d7:cc:52:fe:7c:a9:16:8d:
bf:f1:82:b0:1d:88:70:d8:b4:d8:57:70:50:94:fa:1d:67:46:
d0:e5:4f:3d:88:4e:26:a7:fb:0c:07:97:27:33:b1:5a:fc:ee:
d6:91:a3:c4:36:2b:59:72:a6:2d:5a:27:a7:c9:63:40:ad:64:
aa:40:10:75:42:df:b1:bc:8c:b5:4b:5a:ff:ad:d8:f0:6b:e6:
b9:7b:65:c9:5b:26:7e:f9:c5:3b:d5:c2:52:75:a1:19:a7:1a:
72:8f:74:b6:84:b3:31:60:bf:84:ef:b6:99:49:26:b7:2d:9e:
19:88:20:05:55:68:ae:42:51:6e:30:25:c8:d4:94:03:de:55:
ec:cd:06:34:e5:16:12:c4:49:17:35:8e:ff:68:27:72:c1:66:
e3:13:35:c8:12:1f:71:df:0d:89:82:23:e2:bf:28:aa:ba:c2:
96:ba:b1:8b:cc:27:2e:4a:c5:32:95:4b:c7:c0:f0:90:f3:13:
34:33:07:f7:e2:98:78:fb:b1:2b:85:fa:0b:2d:6e:22:29:55:
29:1c:be:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:16 2025 by rpki-client