Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ld-8nHNYRbmFxZWaWEkLu35cyRA.roa
File: Ld-8nHNYRbmFxZWaWEkLu35cyRA.roa (raw, json)
Hash identifier: 3fq0A4a53H5Thl27sbFnoeg/5R0OfeU0QX7SQu91FHQ=
Subject key identifier: 2D:DF:BC:9C:73:58:45:B9:85:C5:95:9A:58:49:0B:BB:7E:5C:C9:10
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D32CE36A65940FE0105AF49846CD76CEC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ld-8nHNYRbmFxZWaWEkLu35cyRA.roa
Signing time: Mon 22 Jan 2024 20:13:11 +0000
ROA not before: Mon 22 Jan 2024 20:13:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:32:ce:36:a6:59:40:fe:01:05:af:49:84:6c:d7:6c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 22 20:13:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ddfbc9c735845b985c5959a58490bbb7e5cc910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4f:7e:0f:ae:7e:71:0c:15:55:b4:67:82:9b:
97:02:58:3c:b5:59:0a:94:ca:69:91:68:fd:78:e3:
8b:93:a3:2f:9a:ca:4e:22:8b:3d:e1:54:d9:35:a9:
f1:f0:eb:3c:e3:cd:cc:d8:9e:b0:7c:ae:53:93:73:
fa:21:43:51:44:8b:a6:30:ce:0a:34:58:04:97:2d:
81:39:61:96:aa:48:b7:e6:aa:b5:33:86:f9:0b:69:
9a:cd:4f:ac:47:35:03:58:1b:bb:35:28:5d:02:52:
bd:45:f5:ba:b1:94:6b:e2:86:d2:1d:d0:5b:e8:f5:
71:67:9c:90:00:2e:94:78:a7:89:d3:0a:75:65:01:
a9:1c:c4:a5:eb:3d:2a:b3:81:4d:6d:ce:c7:1f:57:
01:a3:fb:79:8c:ac:ed:f5:55:5c:87:ab:c2:85:34:
46:25:da:4b:0b:18:05:a8:2e:90:9f:18:82:21:56:
6e:2e:b9:2a:7c:eb:10:75:97:f8:4b:00:09:cc:a6:
fa:23:6b:b8:a6:e7:b5:8c:50:dd:40:86:58:35:b6:
40:34:30:84:bf:94:a5:37:38:8b:ff:aa:56:f8:7f:
e2:19:7b:0c:44:c3:26:3f:de:4d:66:71:80:ec:5a:
91:9b:a4:e3:d9:38:56:3f:a6:1b:14:b7:1c:7c:e7:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DF:BC:9C:73:58:45:B9:85:C5:95:9A:58:49:0B:BB:7E:5C:C9:10
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ld-8nHNYRbmFxZWaWEkLu35cyRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:31:62:ed:a6:11:80:4e:0a:36:97:49:85:fc:84:a2:e0:c0:
8b:5e:21:f5:13:9c:71:0f:7d:28:ef:f8:b6:08:53:ef:ba:0e:
bc:61:fd:75:b8:d6:1c:80:c1:a6:29:5f:64:fa:a9:e0:a6:7a:
90:49:69:50:ea:45:a1:a7:4b:dd:04:10:c6:b6:6d:70:b5:c5:
e9:20:d5:a8:4e:ec:fc:2b:ff:12:34:c7:ed:aa:ac:d5:24:b9:
c0:24:54:35:df:68:9c:f1:49:25:ca:87:4d:93:ad:67:67:0b:
99:bf:32:64:7c:9d:b6:5f:9e:7b:03:38:39:26:eb:0b:b5:b6:
c1:c9:3e:ca:df:80:a4:ca:ee:f0:a1:b4:e2:4b:5a:19:7d:30:
c3:d7:43:99:f0:b4:8e:58:74:3f:2e:31:d6:64:c5:03:46:73:
21:cd:b4:ae:f6:62:01:d9:85:35:8a:30:f6:19:15:d3:b3:41:
e9:81:57:c2:d6:1d:10:25:50:50:8f:3c:e6:27:1f:15:7c:e5:
28:09:e4:7e:4f:17:a9:58:b1:8d:26:72:32:02:52:41:14:b1:
ee:d6:14:3b:ad:0b:f6:9e:7e:47:5a:d1:7c:84:55:c3:8f:40:
fe:04:f9:0b:37:6b:95:55:9a:b8:1c:ef:c9:3d:2d:31:15:43:
40:7a:f9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:11:15 2025 by rpki-client