Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FTdgg7fKXprKfsK9t6J5zL2xm18.roa
File: FTdgg7fKXprKfsK9t6J5zL2xm18.roa (raw, json)
Hash identifier: IJLT8jWRUh7//tSedxebJpzRTc3kY8fG/my4X2ZEa34=
Subject key identifier: 15:37:60:83:B7:CA:5E:9A:CA:7E:C2:BD:B7:A2:79:CC:BD:B1:9B:5F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D45416B522FE5BF3AA0A32FCE3BDE68FA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FTdgg7fKXprKfsK9t6J5zL2xm18.roa
Signing time: Fri 26 Jan 2024 10:12:11 +0000
ROA not before: Fri 26 Jan 2024 10:12:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:41:6b:52:2f:e5:bf:3a:a0:a3:2f:ce:3b:de:68:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 26 10:12:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15376083b7ca5e9aca7ec2bdb7a279ccbdb19b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:66:0f:81:d9:be:c7:06:97:35:d3:46:74:
61:af:db:5d:a3:84:33:45:87:17:c2:a0:17:66:96:
c5:cb:e7:4e:d5:95:9e:27:bb:c6:33:47:df:4d:a0:
7f:d1:95:58:8a:c9:a0:f3:37:b4:33:9d:14:16:fb:
b1:e8:cf:85:b7:36:ed:83:b9:0d:59:7a:5d:e4:d3:
ff:0e:2f:e5:a4:40:03:06:5e:3a:01:5f:02:18:12:
a5:d8:ab:75:43:fb:bd:1d:5d:d9:ed:13:e3:ac:a7:
58:f3:84:83:ad:a4:04:d7:09:e4:63:74:c2:e8:8a:
d5:29:a6:50:20:fc:34:b4:20:20:8a:f7:fa:e6:32:
3e:2b:e0:96:80:57:44:9f:35:f0:90:95:3d:da:0e:
08:0b:20:a9:1f:d4:c5:3b:24:28:96:e2:26:19:aa:
7e:48:9a:51:77:a8:5a:b0:04:2c:d3:92:93:76:e1:
86:31:a4:1f:36:4d:ab:93:79:92:e8:a7:62:12:96:
4c:0b:7f:0a:f9:2b:d8:35:a3:22:3d:a6:fd:c8:66:
ad:87:b5:40:70:df:85:47:56:13:df:b8:35:60:06:
51:18:ca:ac:b5:ea:e5:b1:cb:ab:d2:7d:99:91:dc:
9f:bc:93:a3:a2:ef:e5:1b:00:ff:a4:7d:54:a3:c3:
65:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:37:60:83:B7:CA:5E:9A:CA:7E:C2:BD:B7:A2:79:CC:BD:B1:9B:5F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FTdgg7fKXprKfsK9t6J5zL2xm18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:1c:ad:44:1c:e9:88:2c:8b:85:07:5a:49:c7:03:eb:03:b4:
f8:96:bd:3f:48:96:18:39:e2:00:43:42:2a:fe:cb:e2:c8:94:
ee:99:eb:43:36:86:b7:7c:d3:dd:75:f0:2e:80:94:5a:46:44:
20:60:36:41:d2:b9:20:56:a7:eb:46:54:02:74:67:59:6b:ed:
7c:0f:47:c0:ab:a4:fb:91:ca:c8:5b:a2:b6:e3:85:c5:53:a8:
79:e9:27:6f:dd:1d:bc:eb:b3:04:65:b8:61:d8:8d:b4:31:ff:
33:34:dd:0d:91:e7:39:7d:ce:e6:65:8e:ff:31:51:ad:d8:c1:
00:3c:bb:9a:e8:c2:cc:20:22:24:de:b3:e0:7f:1f:3f:65:7f:
4f:99:51:b9:97:7c:74:ed:2f:a1:a0:7f:a6:b1:cc:60:73:b0:
86:db:a9:c8:0a:18:7e:4b:fe:31:c8:f5:75:9b:d3:e0:7c:bb:
4d:66:1a:e5:dc:60:62:c7:09:59:ad:88:87:fc:db:fc:76:24:
54:96:14:51:34:b9:27:8a:4f:51:a2:48:81:11:67:06:0f:6b:
6c:d2:b2:3e:5c:6e:5c:2a:06:8c:c4:1a:01:42:bc:a2:df:ae:
a2:67:77:dd:14:eb:07:25:4b:16:55:eb:97:11:4f:9b:b4:5e:
4b:b6:ef:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:21 2025 by rpki-client