Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GDUfzmC9MAj7z3XRo2PgajD-Tos.roa
File: GDUfzmC9MAj7z3XRo2PgajD-Tos.roa (raw, json)
Hash identifier: PLbyPh0l9I2c24PnexntAGM2VLcg0qiuFq4w//DOgWo=
Subject key identifier: 18:35:1F:CE:60:BD:30:08:FB:CF:75:D1:A3:63:E0:6A:30:FE:4E:8B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D2B837391C7213E90ACBB71BD948E5053
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GDUfzmC9MAj7z3XRo2PgajD-Tos.roa
Signing time: Sun 21 Jan 2024 10:14:11 +0000
ROA not before: Sun 21 Jan 2024 10:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2b:83:73:91:c7:21:3e:90:ac:bb:71:bd:94:8e:50:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 21 10:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18351fce60bd3008fbcf75d1a363e06a30fe4e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:67:d2:3b:5c:bd:b9:b3:a7:15:79:7d:88:ba:
b2:89:0e:76:f5:e7:2a:d0:8b:00:8b:6f:6b:d5:b0:
54:42:21:67:eb:33:43:9f:a3:05:58:7a:9a:6a:83:
64:5c:20:2a:dd:43:29:9c:5d:32:3b:87:a6:44:f8:
1e:bb:51:91:f3:37:39:26:3b:d5:d8:f2:0a:9d:26:
83:a4:44:01:23:62:f3:8c:52:3e:3f:11:cd:15:6c:
4d:30:c3:40:a9:1a:00:3d:5c:41:cb:8a:4a:d3:48:
e5:dd:ec:97:9a:9c:c6:c0:02:16:6f:21:a7:6b:30:
27:9a:50:0f:4f:fd:f8:ff:de:52:8a:5c:9c:3d:57:
7f:9d:34:d8:ae:83:33:c8:a9:bf:6c:25:9d:66:a8:
7c:4f:58:da:56:f9:d9:3a:2a:8d:7d:81:7d:5a:03:
64:ab:84:6f:ae:82:a0:ff:7f:cd:21:d7:82:e0:61:
3c:3e:48:bc:9a:a1:f6:51:ad:14:17:2b:ab:f1:cf:
ec:05:08:79:ac:2c:2c:e0:24:27:4f:71:d3:f8:cd:
fe:c6:06:e8:6b:01:d4:e6:e3:57:94:f8:26:e0:30:
f2:b1:12:14:8e:29:c5:3f:5a:3c:3f:3c:38:6b:01:
ff:29:e4:60:94:aa:bc:af:32:ee:77:88:de:65:f3:
80:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:35:1F:CE:60:BD:30:08:FB:CF:75:D1:A3:63:E0:6A:30:FE:4E:8B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GDUfzmC9MAj7z3XRo2PgajD-Tos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:87:66:ab:75:62:a1:49:b2:c1:0d:6b:95:e0:bf:c6:dc:cf:
e2:a2:84:59:3f:a1:3e:42:06:9d:e2:cc:6a:04:ba:ff:aa:1e:
d8:4e:11:11:7a:49:24:99:3f:cc:f0:da:11:13:86:a8:aa:af:
af:e1:5b:e1:3b:02:52:61:7d:f3:05:0e:d6:e4:a4:e9:f2:39:
cd:0c:e2:32:63:07:4c:7a:1f:37:47:fc:a6:ba:9f:03:06:9f:
37:d2:43:9b:65:ac:f1:ec:6d:49:be:47:34:51:f7:67:13:2f:
5b:2b:82:13:a7:21:f9:99:a1:d3:90:95:a0:b4:cd:cf:c4:f2:
63:66:bc:18:58:d9:46:cf:ea:ef:6f:10:b2:30:64:79:9c:d8:
8a:4f:eb:01:09:18:fb:5c:2f:36:ca:de:96:ab:25:e6:4f:14:
de:a8:da:15:3c:6b:c4:aa:af:af:91:90:08:8e:c2:32:97:44:
c4:89:64:e3:ec:ef:85:d8:5b:ce:b0:3d:41:5e:98:55:88:99:
00:e7:f9:05:fb:b9:db:ac:69:94:ce:94:86:60:aa:63:e4:51:
26:97:30:9b:92:0d:91:29:f1:cf:43:89:fc:28:e0:08:3e:52:
7f:47:f1:e0:a3:63:72:30:ab:81:4f:28:29:d1:98:7f:47:78:
ad:22:21:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:23 2025 by rpki-client