Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FxQbFtBq4PgT0uCw2NYf1Rnnpn0.roa
File: FxQbFtBq4PgT0uCw2NYf1Rnnpn0.roa (raw, json)
Hash identifier: tJfo0ABXD0WzA4heaMOqEw0rFGVklYvT9XU3F7+JQK4=
Subject key identifier: 17:14:1B:16:D0:6A:E0:F8:13:D2:E0:B0:D8:D6:1F:D5:19:E7:A6:7D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E70CD95BB36EA1D7144D482939D49BB38
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FxQbFtBq4PgT0uCw2NYf1Rnnpn0.roa
Signing time: Sun 24 Mar 2024 14:11:44 +0000
ROA not before: Sun 24 Mar 2024 14:11:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:70:cd:95:bb:36:ea:1d:71:44:d4:82:93:9d:49:bb:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 24 14:11:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17141b16d06ae0f813d2e0b0d8d61fd519e7a67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:b1:0e:45:61:3f:6f:29:ab:fc:b6:ed:54:
ca:6a:9d:ff:88:da:f4:d8:14:ec:55:13:e8:87:2b:
12:a2:db:ff:a8:e4:4f:a9:75:04:ff:aa:a4:13:3d:
1f:94:4e:12:85:49:93:42:1a:75:f7:ea:60:78:33:
0f:9a:aa:b4:63:e1:2f:5e:64:76:2f:20:70:a6:28:
5e:1c:4e:68:32:12:ae:14:ab:0c:53:5b:84:f5:a7:
c2:22:26:bf:71:70:ea:20:18:5e:d8:68:71:4b:60:
d7:8d:72:4b:99:23:54:43:ce:7e:93:90:82:e8:2a:
7a:34:cb:20:35:e1:ac:90:48:ce:4d:71:08:5a:3e:
69:dd:38:4c:14:c4:36:cc:17:43:2c:7a:a7:42:7f:
66:37:79:cb:a0:6b:e1:8c:e1:01:bb:a8:88:f7:78:
f6:36:9b:62:c0:1e:7c:ec:16:7d:0a:da:41:e6:80:
b9:f2:bf:66:0c:c4:b0:12:4c:7a:e5:47:92:d9:1c:
57:d1:53:aa:a6:87:5d:88:27:1a:5a:d0:cb:f4:0e:
41:54:61:07:c7:55:b2:9f:4f:e5:fc:a5:87:d9:41:
ce:64:68:11:3a:ff:5c:ae:c1:55:b7:45:46:3c:ea:
8b:1b:17:5e:0c:f3:7b:f6:de:ff:57:fa:43:a0:97:
f4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:14:1B:16:D0:6A:E0:F8:13:D2:E0:B0:D8:D6:1F:D5:19:E7:A6:7D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FxQbFtBq4PgT0uCw2NYf1Rnnpn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:9e:80:45:7b:3c:37:1f:44:aa:6d:5b:00:0b:b1:25:4e:19:
4a:cb:9a:f3:6a:58:b6:e5:35:cf:00:a3:86:ec:7f:02:f4:d9:
30:ca:7d:95:de:bf:d6:ff:0e:f2:78:b6:ca:c8:72:56:d9:5e:
95:a6:46:e4:c2:63:67:bf:0c:c6:06:fa:c1:54:b7:61:c7:17:
79:48:a3:8b:86:20:09:36:5a:13:f4:2c:52:ee:f9:03:e7:d5:
9c:83:1a:e5:5d:d0:89:5c:3c:de:9b:89:e8:ef:31:8e:b8:90:
aa:9f:83:80:90:1e:8e:77:5f:41:d3:9a:bc:5e:cc:5c:a4:a2:
b2:a4:74:3c:8c:41:84:b8:d8:ce:43:8b:e3:e8:1b:38:5f:07:
82:a5:df:2d:27:32:83:dd:20:54:43:a4:6c:51:4b:98:a8:45:
05:91:6b:a5:5f:e1:f7:60:08:65:b0:b6:9d:85:7f:38:cf:64:
a1:d5:7f:c6:74:fb:28:79:56:7f:7d:20:e1:a6:44:b4:6d:3f:
f8:e2:76:7c:e4:21:7b:53:ba:b7:21:be:63:81:22:01:69:10:
2a:18:09:ac:c0:2b:d8:e6:69:85:7a:00:7e:e9:58:a4:89:e8:
e6:7b:8d:45:9b:87:cb:81:13:bf:2d:73:d3:15:62:38:02:fc:
8f:52:0d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:03 2025 by rpki-client