Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/R0x7mG-8QE3hOXrCy_gGxYHU6Ac.roa
File: R0x7mG-8QE3hOXrCy_gGxYHU6Ac.roa (raw, json)
Hash identifier: /P0MrNcBY+dnz3i9gg8cFD4t8/JVpLWuigqIc3WwAFo=
Subject key identifier: 47:4C:7B:98:6F:BC:40:4D:E1:39:7A:C2:CB:F8:06:C5:81:D4:E8:07
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB019A390E9D8E554C765599C98E29D78
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/R0x7mG-8QE3hOXrCy_gGxYHU6Ac.roa
Signing time: Fri 05 Apr 2024 21:10:54 +0000
ROA not before: Fri 05 Apr 2024 21:10:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b0:19:a3:90:e9:d8:e5:54:c7:65:59:9c:98:e2:9d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 5 21:10:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=474c7b986fbc404de1397ac2cbf806c581d4e807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:79:e5:9f:92:33:9b:64:3c:ba:f6:84:91:25:
a8:7e:27:9c:e9:6f:fd:82:db:9d:ef:de:1a:e1:5c:
05:1c:f8:b3:9c:a7:a8:0d:41:d1:0b:b9:88:c0:5b:
c3:c9:98:8e:ea:63:5f:3d:0b:a8:52:be:c7:ce:bd:
ac:7c:1f:50:ca:34:12:68:47:56:88:58:70:d3:59:
5b:b9:38:05:c1:68:1e:7c:4f:6c:b7:2b:e7:d8:96:
26:06:b5:80:e3:b3:06:01:d8:6e:4a:33:70:c4:5d:
95:d3:d6:6c:cb:fc:61:d9:3c:90:6f:2e:69:52:fb:
83:1f:b4:70:f7:84:10:d3:1e:3d:05:e5:e8:4b:38:
75:05:42:97:45:50:66:9a:0c:83:ad:96:e9:14:f3:
86:b9:49:0d:e8:26:54:a4:02:d3:29:bd:31:b9:9b:
0d:dc:1d:51:fa:be:53:c0:ec:03:97:12:8e:df:06:
66:f9:e9:31:cc:46:8e:4d:d9:89:bc:ae:f6:29:0e:
f7:59:a6:25:35:43:c9:84:a0:50:60:bc:b3:f0:20:
6e:5a:b5:b5:5d:f7:8c:a4:01:44:cf:68:60:4a:40:
e4:20:d9:e5:8d:8d:46:0c:11:69:a8:54:cb:8e:4e:
64:a1:3a:04:9e:b5:e0:95:18:70:59:37:86:8d:9d:
42:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4C:7B:98:6F:BC:40:4D:E1:39:7A:C2:CB:F8:06:C5:81:D4:E8:07
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/R0x7mG-8QE3hOXrCy_gGxYHU6Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:3c:3d:d5:9e:a7:50:77:4e:9a:db:0b:c7:89:cc:3b:23:e8:
5c:4e:55:03:a5:f8:11:9c:0e:c7:1b:3a:2d:a7:83:8e:73:b6:
eb:96:36:80:1a:43:77:0d:3c:4f:9f:fc:2c:52:5b:6e:8b:94:
ff:7d:43:3d:c9:ea:aa:4d:0c:03:a9:d2:43:c9:ef:29:0d:ec:
65:8a:ec:0d:32:46:99:a4:a1:bd:fb:6a:41:20:f9:99:96:77:
c1:19:a0:10:97:2b:76:e0:a8:2c:48:ac:04:8b:2b:c7:ec:36:
f5:cc:28:82:81:73:54:e7:54:35:34:64:50:36:ed:96:08:51:
ef:b4:3b:63:8c:f4:3a:7a:2d:44:65:dd:a9:f5:c7:48:43:7a:
fd:5c:0e:63:49:b9:ab:99:41:5f:98:2c:d0:a8:6f:c4:38:3e:
c8:3a:b2:22:66:65:84:17:a2:23:ac:06:f8:b9:1b:fa:4a:46:
27:3f:98:7d:b9:c3:58:1d:ec:19:fc:0e:03:30:52:78:5c:1f:
d0:dc:99:19:0f:17:68:1b:59:29:f7:b1:c2:6c:80:9d:f7:52:
a1:ad:81:21:66:18:08:98:55:bf:be:a3:fd:9f:d1:a5:f6:7b:
46:e6:58:12:fd:c3:09:37:c9:1b:30:e1:ba:36:f1:f6:33:40:
47:4e:87:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:20 2025 by rpki-client