Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KE_NOT9jHDc85gWpQIFxX-M2WdI.roa
File: KE_NOT9jHDc85gWpQIFxX-M2WdI.roa (raw, json)
Hash identifier: fcLtC9ZZH6yMVDZ3iv/8JjTWZTrjVdwbfK+jAbALEN8=
Subject key identifier: 28:4F:CD:39:3F:63:1C:37:3C:E6:05:A9:40:81:71:5F:E3:36:59:D2
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA7162FEE9D412EB091ADB1D32A3B11F4
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KE_NOT9jHDc85gWpQIFxX-M2WdI.roa
Signing time: Tue 26 Dec 2023 17:04:58 +0000
ROA not before: Tue 26 Dec 2023 17:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:a715:caec/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a7:16:2f:ee:9d:41:2e:b0:91:ad:b1:d3:2a:3b:11:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 26 17:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=284fcd393f631c373ce605a94081715fe33659d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b1:11:e7:b3:3c:c0:dd:43:7b:fe:43:df:24:
61:50:97:81:df:fe:c6:8b:d5:b5:8c:54:5e:49:21:
16:0a:9d:be:4c:5e:64:1a:5a:ab:68:8f:ca:fa:6c:
5d:10:7e:92:16:a1:96:2d:a5:ff:8b:b3:28:c2:95:
08:36:23:ba:92:e6:1f:2f:52:ea:e5:d2:9f:81:55:
2a:bc:f6:0c:9a:6a:8a:23:d6:fa:c6:d0:58:a0:48:
d3:33:5b:94:e1:0f:ea:41:04:0c:a2:7d:66:63:9b:
f9:c5:b0:3a:8c:37:03:82:54:93:d6:ce:61:80:5b:
d3:48:5d:42:16:4d:86:8a:9c:0c:ed:5b:ea:68:2d:
6d:1b:28:ad:f1:79:f9:50:0b:51:b2:94:05:fa:21:
2c:54:d0:4a:52:07:ef:1d:6f:28:85:76:76:94:8a:
3d:89:0d:c7:80:3b:ef:3c:03:bd:06:35:e8:49:5f:
75:fa:54:1e:9a:f2:fe:09:93:b1:65:37:85:d1:8f:
b3:3e:07:45:bd:cf:2a:86:88:18:09:1c:39:b3:f5:
e6:9f:13:6a:cb:ab:52:1c:33:23:df:19:77:7a:11:
70:99:b2:41:1c:7c:6d:5b:52:97:84:27:11:db:bb:
9e:c3:c5:0d:a5:9f:da:d3:93:4d:41:55:90:2e:9f:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4F:CD:39:3F:63:1C:37:3C:E6:05:A9:40:81:71:5F:E3:36:59:D2
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KE_NOT9jHDc85gWpQIFxX-M2WdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:d3:a8:de:87:d0:f6:72:ae:8b:83:c4:dd:49:15:28:81:8a:
e4:f7:31:e4:53:4d:7b:66:95:8b:ab:ef:18:43:d0:96:60:b7:
59:71:f2:12:38:7d:bc:c3:08:c2:9e:5c:1a:a4:1d:a3:53:5e:
53:f8:64:e8:88:d6:3a:20:e2:2d:24:9a:42:78:79:d6:95:6a:
de:48:a7:96:ec:9d:b1:3e:20:c6:e9:ad:e6:ea:1e:39:20:66:
ce:bf:3c:51:8a:24:e5:d9:ad:4b:75:44:1e:ce:3e:f3:d0:cf:
bd:c1:7b:20:47:0c:ef:36:89:5b:b2:05:64:41:fa:3b:34:f3:
8e:fe:0c:c9:d0:f6:56:55:7f:9a:14:ec:38:11:73:54:06:28:
cd:c5:b6:a8:c5:ee:e0:f6:f9:c6:d7:66:44:31:15:2d:a4:5f:
26:4d:43:b1:59:38:32:00:3a:cb:df:98:0f:40:16:09:45:54:
54:7b:73:91:9d:37:96:7b:df:9e:a7:e5:7b:d8:ef:c9:de:83:
7a:ed:04:03:b0:91:72:85:39:71:49:70:d5:ad:60:e1:b7:be:
2f:be:17:d6:6d:b7:5e:a7:51:e3:56:60:cb:a9:32:8a:00:1f:
e0:40:bd:29:58:10:bd:88:37:40:c6:a4:61:d9:50:fe:36:12:
6e:c6:da:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:50 2025 by rpki-client