Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IN_P9Dn2RMr_MNcNMs_w-gdERKM.roa
File: IN_P9Dn2RMr_MNcNMs_w-gdERKM.roa (raw, json)
Hash identifier: hklsxhb8sbSMdg/okFAYUkIlGJlKq5NqsV6uvyPg6r4=
Subject key identifier: 20:DF:CF:F4:39:F6:44:CA:FF:30:D7:0D:32:CF:F0:FA:07:44:44:A3
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E4E0AA8788B0FCADD70138F9BCC5BCF9D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IN_P9Dn2RMr_MNcNMs_w-gdERKM.roa
Signing time: Sun 17 Mar 2024 20:11:44 +0000
ROA not before: Sun 17 Mar 2024 20:11:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4e:0a:a8:78:8b:0f:ca:dd:70:13:8f:9b:cc:5b:cf:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 17 20:11:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20dfcff439f644caff30d70d32cff0fa074444a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:91:49:80:99:07:56:89:dc:3e:a6:c1:c4:
07:98:0c:ce:04:e5:b4:f6:a7:4a:a0:8f:2e:a2:34:
cf:ea:0f:ab:f7:79:33:6a:0b:5e:37:0d:55:88:dc:
8e:2e:9b:66:6a:7f:ca:03:24:f8:74:b3:aa:df:12:
a9:02:60:b9:2b:24:4f:82:8d:c3:30:a0:5f:e7:a5:
4e:a1:e7:3e:5f:88:f1:c8:0c:23:94:b3:44:53:b6:
11:1c:7a:35:3d:94:2a:7a:cf:02:73:46:74:5e:10:
4f:8c:b6:60:fb:28:2c:2c:29:71:d8:25:50:b7:6e:
fe:79:a2:a2:a2:00:6a:4f:91:10:41:03:26:ef:1b:
ca:9a:2b:d1:8c:ee:f7:84:1b:19:70:8c:81:7c:2b:
b0:3f:8f:c4:88:ca:fe:d4:80:52:14:7a:c4:c7:ee:
80:1b:8b:19:90:42:5b:ce:31:8e:a0:80:d1:17:bc:
4e:e7:e3:5b:c3:29:f1:b3:14:c5:ee:6d:59:40:b8:
84:da:5c:24:53:df:32:d8:d2:34:2b:e2:34:e9:fd:
14:5c:de:3d:ae:e7:1b:95:2c:0b:3d:a9:31:d8:e6:
5c:11:90:d8:82:e8:14:aa:56:21:24:aa:dc:e3:ac:
95:6c:c6:d0:4c:69:47:8a:73:dd:ac:82:b5:9a:d9:
7f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DF:CF:F4:39:F6:44:CA:FF:30:D7:0D:32:CF:F0:FA:07:44:44:A3
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IN_P9Dn2RMr_MNcNMs_w-gdERKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:c7:58:6a:25:b5:8f:5f:31:31:9b:6e:2d:af:8c:ff:53:ee:
b0:68:02:8c:53:74:af:d9:f6:92:ce:14:88:11:64:f4:eb:47:
5b:09:c0:b1:1e:d1:3e:46:2e:c3:9d:7e:b4:27:8e:eb:d6:e6:
13:fc:ab:7d:98:1f:dc:5d:7e:63:03:8e:28:2a:55:74:b1:c9:
c8:29:b7:73:2f:19:93:3b:f7:f1:61:79:54:f1:3a:f9:a5:fe:
05:ce:55:d4:b3:18:f1:49:bd:95:f8:fc:51:8c:18:8d:92:43:
20:c6:b1:c8:8a:25:78:b4:a8:4b:c1:6a:83:25:b8:89:19:95:
11:a9:b9:0b:e6:08:7b:cf:a1:d9:4c:23:b9:2a:47:d8:3e:d7:
9e:37:8a:45:9b:ce:f6:e8:fa:fb:33:ae:1a:a5:35:05:30:4e:
37:82:f0:37:c8:cd:70:78:32:fd:86:73:77:31:51:51:b9:54:
13:05:4c:b9:26:2f:1d:c5:5a:a6:5c:70:7f:b7:99:ff:48:39:
e6:81:fe:be:05:4f:ab:0b:1c:9a:32:49:87:6c:fd:22:fa:00:
2c:1e:43:a1:cc:cc:c4:69:d5:81:7b:4b:c1:d8:2e:0e:13:d1:
0b:58:e0:7d:31:b4:a3:35:4e:7f:0e:7e:0b:e8:a4:82:03:65:
ed:85:18:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:14 2025 by rpki-client