Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ih1dLv4e_fkoJeWVw1k2YuxIlDM.roa
File: Ih1dLv4e_fkoJeWVw1k2YuxIlDM.roa (raw, json)
Hash identifier: aA6LpJtqX8h+RFmHCWp22EY0Za1YSDA6WyUTvVeBtDU=
Subject key identifier: 22:1D:5D:2E:FE:1E:FD:F9:28:25:E5:95:C3:59:36:62:EC:48:94:33
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D6FC0B36F2B18C9C5A92F32D0ACB71338
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ih1dLv4e_fkoJeWVw1k2YuxIlDM.roa
Signing time: Sat 03 Feb 2024 16:15:16 +0000
ROA not before: Sat 03 Feb 2024 16:15:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6f:c0:b3:6f:2b:18:c9:c5:a9:2f:32:d0:ac:b7:13:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 3 16:15:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=221d5d2efe1efdf92825e595c3593662ec489433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e8:e5:46:4b:23:a0:e6:d4:83:ac:95:b5:f3:
97:45:c2:86:64:1a:de:dc:95:c4:d3:ca:e5:c8:0c:
5c:21:4f:b7:83:ad:d6:45:b4:60:8b:81:b2:f9:bf:
d7:f6:4c:2d:99:36:24:bf:30:0e:8a:34:11:89:4b:
38:3f:96:8a:15:bb:4e:20:78:62:4c:1d:18:67:67:
e9:9c:e2:97:db:f1:df:a4:d4:6e:4c:66:1b:a4:0e:
94:56:69:7f:2a:0a:02:8d:c4:0d:c4:65:18:17:7f:
c8:fe:62:72:10:aa:ad:53:d6:79:f6:51:7f:be:d1:
6d:04:1d:2d:d3:e6:39:b5:6b:2e:d2:1e:e9:05:e3:
6e:fd:7b:ed:ab:f1:f9:17:3d:a3:0b:eb:d5:d3:b4:
7d:1b:c9:ab:5c:9a:14:9e:78:c8:9f:38:e1:40:d1:
93:69:1e:e0:9c:bf:fc:a0:90:9d:b0:0e:d8:83:d4:
93:c7:f7:f2:7b:bc:58:f4:95:5e:03:04:f9:89:d5:
17:f3:12:af:89:83:07:0c:b3:35:8b:2f:85:29:b5:
d6:e6:33:b6:93:3c:b7:db:57:35:3e:86:3e:79:3b:
a2:4e:d1:d9:9c:ab:86:a9:11:07:69:26:14:f4:9c:
27:b6:63:44:90:81:3c:99:90:b2:fb:a4:c5:e2:19:
57:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1D:5D:2E:FE:1E:FD:F9:28:25:E5:95:C3:59:36:62:EC:48:94:33
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ih1dLv4e_fkoJeWVw1k2YuxIlDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:2d:ea:b5:91:45:ef:f8:1b:6a:2e:c5:19:17:2b:e7:89:4c:
cb:ea:11:ff:91:70:08:1a:1e:a8:3c:a9:99:19:cc:6f:af:7b:
e5:4d:2b:3a:86:c1:45:ab:be:c1:a3:9b:88:89:ef:69:bc:e2:
cf:b8:08:3e:f0:3c:29:36:f5:56:1b:fd:77:95:7c:e9:02:33:
68:bb:b5:aa:ee:07:14:7e:10:aa:99:01:3c:26:bc:89:ee:e8:
47:3d:82:15:46:31:d0:fe:b0:08:04:b1:1f:e7:95:df:99:6a:
b1:46:89:4c:34:3b:09:17:bd:27:c8:d6:be:7a:eb:5b:51:93:
9c:4d:e4:56:07:42:11:63:62:f1:83:08:1f:95:7f:0b:41:7c:
5b:0d:fc:5e:79:46:83:93:35:b5:a8:cb:b5:f7:88:ee:00:65:
e6:a5:04:b0:74:4e:72:b4:26:50:1a:14:ae:f3:7f:5d:f8:fa:
35:bb:6b:13:a2:05:43:25:5e:e5:1e:e4:db:66:61:6d:54:a8:
b2:ee:b4:16:9d:2b:78:3a:5f:1b:6e:30:dc:a4:80:e5:c4:4e:
ec:81:35:db:a8:ab:84:a4:3e:35:ac:2b:ca:e0:cb:08:e0:0e:
b6:50:2d:e1:f1:72:82:af:36:bc:e6:87:f4:98:59:d3:bb:0f:
ee:80:5f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:45:02 2025 by rpki-client