Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Fi9oNY9h_2AWMhCvnzID6olIN9k.roa
File: Fi9oNY9h_2AWMhCvnzID6olIN9k.roa (raw, json)
Hash identifier: zMbkXNswRVnGKFzjeNggQB1Y/HeB/XwCO4eeZAU5L1c=
Subject key identifier: 16:2F:68:35:8F:61:FF:60:16:32:10:AF:9F:32:03:EA:89:48:37:D9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CF2DD06F523A3B475D9D8B49EEC70218F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Fi9oNY9h_2AWMhCvnzID6olIN9k.roa
Signing time: Wed 10 Jan 2024 10:13:40 +0000
ROA not before: Wed 10 Jan 2024 10:13:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:dd:06:f5:23:a3:b4:75:d9:d8:b4:9e:ec:70:21:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 10 10:13:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=162f68358f61ff60163210af9f3203ea894837d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:39:7b:9a:85:32:5b:09:f8:2b:a0:6c:7d:19:
58:ea:62:22:25:d6:0c:20:e3:15:d7:42:21:99:ba:
13:b9:d9:50:d3:ab:09:25:32:c8:87:22:ad:08:e8:
aa:bb:29:a1:67:e2:e2:62:09:b5:c1:55:f2:c0:3a:
f6:4b:9e:17:98:c5:c2:80:aa:b8:67:ab:fd:ba:71:
72:14:3c:66:29:6e:8c:dd:47:56:7f:88:b8:6b:7f:
af:b4:73:af:69:4e:76:f5:56:3c:be:07:19:07:31:
e1:76:b5:bf:60:1f:97:79:73:bc:62:2f:d5:d0:bd:
70:84:ac:76:14:35:d3:7b:a4:c3:0e:7e:9a:f4:06:
d3:40:f7:f3:b3:e3:fc:0c:b6:2d:e6:e1:51:c4:db:
f7:57:8e:6d:28:bf:88:c3:a2:b7:e5:a9:21:e6:89:
62:67:1f:4c:90:8e:bd:b7:4b:80:da:3d:e7:55:e6:
85:04:4a:48:af:d5:ba:3a:c0:e0:62:63:10:68:4f:
94:57:08:62:e7:b2:e0:16:55:68:b8:f3:08:08:fe:
14:71:a8:7c:dd:d1:6b:e6:81:3c:05:e1:d7:f9:46:
db:89:29:03:3a:16:6e:51:63:05:2a:0b:c3:7a:03:
0b:37:75:e8:73:74:5d:b5:42:12:7f:2f:5e:2c:7a:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2F:68:35:8F:61:FF:60:16:32:10:AF:9F:32:03:EA:89:48:37:D9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Fi9oNY9h_2AWMhCvnzID6olIN9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:7b:f0:0a:a4:de:0e:19:57:fb:89:cd:5b:7c:a8:1c:16:b4:
dd:a1:df:80:a9:14:07:1c:a0:bc:36:57:ce:51:85:e1:37:2e:
1c:72:a6:26:3b:65:bf:1b:e3:6c:11:fa:02:61:9b:70:82:6e:
89:4c:ce:46:13:a5:32:40:3e:f0:ac:2b:6d:7a:2b:e9:59:bb:
92:b3:af:75:70:79:18:f4:b2:be:ae:ff:7e:c5:7b:87:c5:0d:
3b:6a:11:d6:cc:6a:c8:7e:25:7e:be:4c:a8:b5:57:ba:94:35:
17:af:b5:42:60:8b:73:e4:c0:d5:71:f6:10:f6:79:0f:8b:97:
ce:be:6a:a6:55:16:ad:8b:31:8b:9d:40:08:93:a2:2c:96:74:
e6:87:4a:da:e4:77:a2:58:2d:0c:ed:a9:ab:17:97:60:68:dd:
0e:e0:47:14:0b:76:71:47:b5:7f:11:43:cb:51:61:d4:23:14:
15:6b:02:93:d5:bc:97:3d:88:59:1c:d1:0e:4b:7e:95:ec:70:
26:02:f6:fa:8f:cf:f1:5a:19:0e:60:8b:c0:5f:50:0b:b6:a4:
8b:7d:96:11:e6:61:10:fc:2e:44:19:27:4f:c2:3b:4b:7a:2b:
b8:e0:bd:f7:72:a9:a8:9f:a3:ee:a7:a5:97:b9:ba:16:cd:2a:
7d:f1:e8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:33 2025 by rpki-client