Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/I1e0LJBV9iHSKXA7hRFIrDo3-u8.roa
File: I1e0LJBV9iHSKXA7hRFIrDo3-u8.roa (raw, json)
Hash identifier: Ck4mBIXL53O1DB9eFmhdlQ8/GQRSybaLEunjNLZK4/I=
Subject key identifier: 23:57:B4:2C:90:55:F6:21:D2:29:70:3B:85:11:48:AC:3A:37:FA:EF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E07A9215C314663BE06FED1F358591010
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/I1e0LJBV9iHSKXA7hRFIrDo3-u8.roa
Signing time: Mon 04 Mar 2024 04:11:48 +0000
ROA not before: Mon 04 Mar 2024 04:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:07:a9:21:5c:31:46:63:be:06:fe:d1:f3:58:59:10:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 4 04:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2357b42c9055f621d229703b851148ac3a37faef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bd:e0:08:ea:fd:bf:b6:16:71:88:0f:df:28:
94:f4:8b:35:35:0c:9e:a2:c4:01:3b:cf:4c:7c:13:
42:47:28:be:f5:15:71:e5:19:f7:38:9c:60:b2:b1:
d0:61:c7:42:6c:96:c4:ef:d9:00:d2:d3:d9:65:91:
4b:02:0b:46:41:b7:bc:01:58:07:ba:29:42:c3:6d:
6c:c6:3a:c2:76:19:40:76:6b:1e:c0:20:46:fe:90:
81:f0:25:9d:e7:ca:26:7b:d6:33:df:d4:6a:8f:a3:
1d:c8:27:51:03:da:51:1b:22:f7:6c:5b:a5:02:9b:
e3:6e:68:d7:bb:1f:c2:ed:41:dc:aa:93:bf:95:7c:
2c:14:1b:8e:06:24:e5:63:57:98:b9:37:f3:94:96:
d1:eb:61:19:7d:b3:bf:cf:2e:7d:a2:2b:ca:ab:3d:
6a:8e:7b:bd:01:b7:db:91:80:f2:85:62:12:53:8c:
ac:85:d0:bf:1a:2b:ff:2b:27:c4:17:e5:54:09:91:
24:d4:74:9a:19:8e:2f:cd:73:3b:56:c4:be:52:b2:
e4:ac:8b:88:33:77:39:8e:57:1e:9a:4f:bf:64:d8:
ed:de:d8:0d:6b:0e:a8:a9:c1:7a:ba:b3:76:22:51:
dd:16:7f:ec:30:a5:c0:4c:a0:b0:58:57:e3:d1:28:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:57:B4:2C:90:55:F6:21:D2:29:70:3B:85:11:48:AC:3A:37:FA:EF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/I1e0LJBV9iHSKXA7hRFIrDo3-u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:53:c9:7e:f1:b2:f5:7a:1b:2b:16:07:90:53:2f:b0:9c:ca:
13:eb:7f:b7:e7:ca:41:48:88:1c:f6:7e:bd:6e:80:7a:26:75:
40:31:e6:64:2b:b5:3e:b8:7c:46:2f:5c:7d:0b:bd:80:05:7a:
8d:13:99:92:13:e3:91:d7:f5:5c:65:48:5e:5b:5e:63:23:3f:
66:0b:b2:59:86:38:f8:27:c3:48:35:a3:33:dd:ab:a3:69:6f:
1f:4c:63:56:83:94:35:8c:e1:be:6d:dd:fe:5f:43:ae:32:61:
7a:36:b6:74:d2:e0:69:3a:a0:bd:d3:c8:a4:21:c3:44:24:bb:
6e:32:76:d0:30:81:9b:40:e7:62:02:a8:3f:26:64:cd:ce:cf:
28:ae:67:74:a0:0f:f3:1b:29:cc:92:01:58:9c:ba:3e:62:da:
f0:7c:57:40:f0:6b:aa:ca:ef:db:0c:cb:27:92:83:46:3f:29:
fd:10:8e:b1:d2:33:22:28:b4:20:96:20:11:3c:8c:69:92:89:
59:89:5e:25:c7:75:5d:fb:07:b9:37:d3:40:b5:80:b7:7b:e1:
62:5f:3c:01:08:d8:ab:94:53:b6:ad:38:b5:7e:70:23:9f:d6:
5e:f8:ac:79:bb:8e:ba:b8:99:70:f6:1f:c9:a8:98:db:2c:7c:
22:f1:b1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:18 2025 by rpki-client