Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/P9kgQ_2V5oKUZ2xujTHVxut6CBE.roa
File: P9kgQ_2V5oKUZ2xujTHVxut6CBE.roa (raw, json)
Hash identifier: QMJu8JL+Q4BSeUUhlXSoj3l8fJw7sLjlbGLA+UMl85A=
Subject key identifier: 3F:D9:20:43:FD:95:E6:82:94:67:6C:6E:8D:31:D5:C6:EB:7A:08:11
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8F4D03B2D9F443D7C172A14D0E624256
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/P9kgQ_2V5oKUZ2xujTHVxut6CBE.roa
Signing time: Fri 22 Dec 2023 02:13:58 +0000
ROA not before: Fri 22 Dec 2023 02:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8f:4d:03:b2:d9:f4:43:d7:c1:72:a1:4d:0e:62:42:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 22 02:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fd92043fd95e68294676c6e8d31d5c6eb7a0811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:89:eb:84:f5:d7:be:15:13:88:44:6f:e6:
47:d6:08:c7:30:a3:26:d5:2a:f8:2d:25:d7:fc:3c:
89:e2:c4:76:8e:01:a8:4a:90:20:8f:33:2e:b1:6e:
a3:c7:2f:9b:aa:f5:f3:db:1d:fa:0b:a6:25:42:0a:
7f:8a:be:11:08:f5:4b:bf:69:1a:18:31:05:f8:36:
94:9f:6b:67:dd:f2:16:9d:16:03:04:e9:f2:1f:18:
d1:e6:0c:18:30:03:f6:b3:d7:24:74:73:bb:24:07:
a3:63:84:49:9c:7f:b7:64:09:ee:80:ed:a6:99:7c:
a3:5f:a8:5f:fc:bd:c1:3a:37:b8:cd:5f:91:70:17:
8b:a3:db:25:0f:bf:cc:f2:d2:11:69:66:2b:ad:5d:
68:7f:12:38:da:1c:71:bd:24:df:ae:0c:86:6e:85:
87:9b:cc:ba:78:72:f7:55:38:3a:63:d4:0c:e4:45:
ec:41:11:6b:1a:d9:56:8e:f6:59:26:8a:4e:d6:dd:
09:a7:56:95:23:5e:e6:ec:c7:92:1b:6a:4d:df:3e:
ac:44:bd:42:00:81:ff:0d:df:6e:d2:c7:cf:0e:4c:
b7:ed:63:88:1b:74:5a:2a:74:31:72:f4:76:d4:22:
10:56:cf:af:c6:e3:99:eb:b1:56:a7:22:01:65:86:
c3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D9:20:43:FD:95:E6:82:94:67:6C:6E:8D:31:D5:C6:EB:7A:08:11
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/P9kgQ_2V5oKUZ2xujTHVxut6CBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:ba:f6:26:d7:3b:50:a5:c9:58:43:ab:5c:63:75:fb:be:50:
cf:6b:ed:0a:84:fd:bb:ce:4f:04:41:2d:b0:f2:6a:fb:3c:ee:
85:e6:4e:20:0d:dc:2b:b0:e9:5d:d4:a8:7b:94:2a:53:f5:3c:
06:23:96:79:d3:a7:36:9d:e4:29:ef:bc:07:60:e3:3d:82:1d:
f5:aa:fc:67:52:90:90:5d:3c:94:f0:5c:de:b2:40:92:7a:9e:
5e:57:66:2f:13:63:a7:6c:1d:bd:57:c9:aa:05:8f:29:53:fc:
fc:10:93:79:fb:40:bf:fa:a5:b2:c6:44:db:e4:75:ff:69:bb:
09:84:64:d1:10:e5:da:f6:f9:8e:23:e6:0c:a0:2e:93:73:1d:
1f:86:5f:0a:28:23:14:27:1a:13:40:42:01:16:16:d8:30:18:
6c:4e:2e:77:d2:dc:be:cd:95:dc:fc:14:08:7b:67:78:09:97:
d8:e8:df:c4:46:15:13:b9:a1:e7:54:34:42:37:9c:da:f1:7e:
f8:d9:df:39:a3:76:62:cb:74:4c:d1:2f:94:c8:01:e8:77:e4:
18:6f:c0:d2:e3:9d:38:8c:c8:6a:e7:35:6b:1b:d9:c9:91:60:
a3:fd:d4:19:b6:1e:c5:e2:0e:6e:f2:31:0a:6f:53:32:16:14:
74:c2:5c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:33 2025 by rpki-client