Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/H-thWoB5B5ra87g5HpMlcsrFHDI.roa
File: H-thWoB5B5ra87g5HpMlcsrFHDI.roa (raw, json)
Hash identifier: /SeG6EVYSWXzoht0dDR2R64d281jyYbpzbND4qmoe0g=
Subject key identifier: 1F:EB:61:5A:80:79:07:9A:DA:F3:B8:39:1E:93:25:72:CA:C5:1C:32
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EBBAF0852D5FBD9926941D4A816AD60E3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/H-thWoB5B5ra87g5HpMlcsrFHDI.roa
Signing time: Mon 08 Apr 2024 03:09:54 +0000
ROA not before: Mon 08 Apr 2024 03:09:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bb:af:08:52:d5:fb:d9:92:69:41:d4:a8:16:ad:60:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 8 03:09:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1feb615a8079079adaf3b8391e932572cac51c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:1e:81:dc:9e:b5:51:72:d3:63:2f:bf:fc:
b9:14:51:18:4b:7a:1c:b5:99:6a:c2:08:78:0e:3b:
a9:d8:82:3e:4b:a1:f5:96:b4:fd:21:2a:31:de:c8:
eb:74:3b:cb:05:fd:89:2a:a4:5f:a7:7c:90:4c:59:
db:5b:85:c1:a7:b8:90:95:8d:7b:8a:5c:a4:1f:94:
e5:e7:f8:48:e1:6e:d1:d7:a9:81:7b:de:fb:df:f5:
16:24:83:4e:2f:6a:c3:ff:08:ef:89:de:94:08:8e:
9d:e6:80:37:59:8a:d5:da:15:24:66:88:cb:14:7d:
c1:5b:a9:57:d1:92:65:7a:36:a3:34:f1:7d:a8:6d:
fc:cb:8b:d0:d0:e2:87:e0:b1:2b:00:9b:f4:03:cc:
19:c0:19:f5:8a:bb:26:fc:44:01:fa:73:68:bf:ce:
4d:27:b4:6d:4c:18:ff:6e:60:13:fa:19:8d:aa:d3:
ea:da:0c:3b:ac:2b:1f:5b:b0:db:0a:2d:8d:01:ad:
c9:b7:ba:ad:a3:72:a6:cb:ce:d8:95:d7:88:b2:50:
80:71:76:21:64:e0:d9:78:1b:dc:ab:5b:99:b1:65:
ae:c5:15:1f:e0:f7:52:20:e7:df:f3:2e:ae:33:eb:
b1:b2:8e:e7:bd:75:f3:2a:fe:d4:0b:59:a5:f1:30:
df:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EB:61:5A:80:79:07:9A:DA:F3:B8:39:1E:93:25:72:CA:C5:1C:32
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/H-thWoB5B5ra87g5HpMlcsrFHDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:fc:11:bd:df:2d:bf:05:34:4b:0d:99:54:8e:43:0c:2e:ef:
42:1e:e0:8b:af:e6:72:90:1a:62:e6:db:de:bd:b1:26:d6:d9:
3b:95:ce:4d:45:b5:a6:ab:75:0b:e0:9f:83:0b:71:8a:32:4c:
9e:cf:70:a4:81:5a:19:91:cb:1d:84:2d:44:b1:59:df:2d:99:
0f:dc:eb:6b:b7:1b:05:49:9f:11:3a:bb:1d:b4:dd:49:35:87:
46:e2:9e:11:e6:5c:75:9f:50:19:7c:6b:a5:cc:46:9e:72:ea:
f1:e1:53:18:9f:79:5b:c8:cf:63:cb:5d:4e:b5:80:de:0b:48:
d9:98:85:34:9d:e7:1c:3d:25:f4:cd:28:c1:69:86:9f:56:7e:
a8:b1:38:1a:44:a5:a5:f3:23:ec:6c:d5:c1:0e:48:c2:ab:d1:
23:ab:4a:6b:1f:0b:4c:b9:64:d1:70:a7:4d:ed:08:c1:fc:2a:
f5:e5:14:37:61:52:14:e7:e9:fa:02:34:ba:06:3e:bc:12:a5:
14:ee:d3:90:a1:3c:46:03:d0:10:11:b1:b7:a1:7d:d6:79:95:
37:70:9f:5f:d6:c7:93:be:f5:b4:a9:67:75:01:90:49:d1:24:
78:8d:c1:92:06:43:d7:b2:cd:6b:e6:d7:38:36:fb:47:9c:2d:
75:97:08:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:00 2025 by rpki-client