Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IEZNyiw_hBJ1vyJiNCwcXjk_gt4.roa
File: IEZNyiw_hBJ1vyJiNCwcXjk_gt4.roa (raw, json)
Hash identifier: 0ToyNg01yTjoskVFFyBbF1vG1j9nHgJ997IH7uFoUBQ=
Subject key identifier: 20:46:4D:CA:2C:3F:84:12:75:BF:22:62:34:2C:1C:5E:39:3F:82:DE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D062A213F5E0F59E5D574E721CAED80E0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IEZNyiw_hBJ1vyJiNCwcXjk_gt4.roa
Signing time: Sun 14 Jan 2024 04:10:40 +0000
ROA not before: Sun 14 Jan 2024 04:10:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:06:2a:21:3f:5e:0f:59:e5:d5:74:e7:21:ca:ed:80:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 14 04:10:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20464dca2c3f841275bf2262342c1c5e393f82de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:f3:3d:ff:79:70:a6:03:5d:2a:93:cc:eb:
a7:c0:36:b7:99:f1:f9:cc:78:36:bb:0f:4c:93:c8:
21:91:3f:95:72:04:e0:28:09:68:ae:2a:ea:bd:52:
95:ff:7e:f3:7e:93:59:5f:73:ef:3b:2a:91:2d:21:
e7:b6:7b:d1:95:db:0a:74:53:60:61:ec:ae:14:bf:
5a:d6:bd:aa:98:5e:6b:7c:e9:53:0c:5b:12:c3:64:
da:11:95:06:3b:88:ec:f8:76:79:2f:9b:eb:21:0b:
14:da:d4:a2:24:3a:78:80:47:71:a4:95:17:cd:ab:
4d:64:53:66:5c:e9:bb:7c:6d:3c:6d:66:b9:a6:67:
5e:c3:be:a1:3f:9d:94:e0:46:76:5e:2a:1f:c8:a3:
04:07:57:c8:bf:44:fb:3e:70:8a:e7:cc:94:ec:ab:
e7:f8:35:3d:5d:33:d0:35:df:d7:77:75:ab:e7:0d:
49:7c:aa:49:bc:e2:53:db:24:31:53:71:5e:ca:d8:
a2:95:e9:57:7e:45:1c:c6:5a:bf:59:9d:d6:d0:d7:
24:22:25:a0:54:23:37:93:e4:90:2d:b0:28:05:51:
27:e3:95:6b:70:9f:90:25:31:ef:a4:d9:a6:79:c8:
3d:f4:14:ed:0a:1e:cf:a1:9e:06:b4:31:d7:c8:07:
99:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:46:4D:CA:2C:3F:84:12:75:BF:22:62:34:2C:1C:5E:39:3F:82:DE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IEZNyiw_hBJ1vyJiNCwcXjk_gt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:30:ee:50:1a:4e:91:84:d7:2d:da:7a:b1:09:bf:d3:6f:e5:
1c:2c:d1:36:aa:78:d5:27:e7:89:b7:fd:38:90:be:97:a3:b3:
94:1a:7b:82:84:63:7f:da:57:b4:ff:9c:c1:37:e1:26:fa:7c:
19:c9:32:6a:53:fd:ea:98:72:8c:4b:f7:ec:cb:7a:91:c1:1e:
f5:bc:c4:c9:60:89:c9:54:ec:8a:da:44:6b:8d:98:55:38:a5:
70:ea:5a:c7:c1:88:03:60:d2:b9:0a:6b:f8:1e:79:3f:af:45:
f1:c6:4f:3a:58:a0:d9:b3:5c:b2:12:49:60:ba:f7:39:cf:72:
0a:e2:e5:ac:49:d3:31:ec:bf:aa:d5:80:09:8c:ee:52:06:98:
eb:5b:e6:be:51:49:2f:9d:2f:5f:47:89:7f:48:dc:78:26:fe:
77:11:39:60:b3:c1:fc:ec:1c:54:bd:e2:2a:9d:43:4f:03:2e:
e8:57:53:05:90:12:48:3a:53:4e:7b:69:76:27:06:dc:81:40:
a1:72:ee:95:03:6e:59:6f:ee:b1:99:24:65:4e:4e:bb:1b:d3:
87:5b:01:31:07:ab:63:ac:a3:d0:b1:e3:aa:ba:f1:95:da:8c:
b9:68:1d:87:5c:78:d6:78:ff:ff:a4:97:7d:82:e3:f2:71:02:
d5:6d:90:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:49:51 2025 by rpki-client