Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SIYNOsugl1cRjw9VKErSkjHE88c.roa
File: SIYNOsugl1cRjw9VKErSkjHE88c.roa (raw, json)
Hash identifier: J4Ki+Z4geifl7SaxidAvvnO9MyD5gLO9C20iF5U/Uoo=
Subject key identifier: 48:86:0D:3A:CB:A0:97:57:11:8F:0F:55:28:4A:D2:92:31:C4:F3:C7
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DAE3442B713AB90FB932B27B2E6EF750F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SIYNOsugl1cRjw9VKErSkjHE88c.roa
Signing time: Thu 15 Feb 2024 19:17:57 +0000
ROA not before: Thu 15 Feb 2024 19:17:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ae:34:42:b7:13:ab:90:fb:93:2b:27:b2:e6:ef:75:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 15 19:17:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48860d3acba09757118f0f55284ad29231c4f3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:c5:17:05:e5:ba:a5:c5:7c:c0:e7:2c:a0:
e2:0c:19:82:c6:72:d1:ed:50:7b:bf:bd:4b:43:85:
ee:c4:da:b4:4c:d8:d8:b9:67:f7:0d:37:01:df:f7:
0d:78:60:68:1b:54:7c:5f:3d:4b:70:33:4f:94:1f:
a7:1d:04:17:88:af:3e:34:2e:4c:f6:f8:04:ac:b5:
5e:c3:da:bb:8f:79:6c:1d:a9:c9:34:96:cb:a6:0f:
40:73:14:23:10:08:8c:ce:b1:98:94:84:40:71:10:
b1:35:ed:59:88:9a:93:5d:cd:e0:9f:66:d2:db:4a:
f2:db:f9:47:78:05:61:b7:05:23:13:b4:cc:88:04:
13:f4:c6:69:b6:0c:9d:25:f4:bb:de:85:0f:ed:20:
2a:2d:b6:4d:fb:ec:59:e6:e1:af:68:f0:90:e1:41:
19:a6:1e:82:81:50:8e:d1:46:4a:72:4b:d4:96:a5:
7d:7a:29:1e:61:f1:5f:d3:25:74:15:07:7d:5a:40:
da:31:db:e5:a6:c6:23:c7:60:3b:76:ef:28:dd:37:
b8:7b:a5:83:8f:f8:99:6a:72:51:dd:89:68:47:f1:
83:65:25:24:26:b9:c6:bc:d6:4b:90:68:0a:53:90:
76:11:97:5f:09:46:24:74:50:26:bf:3c:4c:b0:c4:
f2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:86:0D:3A:CB:A0:97:57:11:8F:0F:55:28:4A:D2:92:31:C4:F3:C7
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SIYNOsugl1cRjw9VKErSkjHE88c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:d5:c2:5b:89:48:de:3a:be:57:28:2e:3b:33:27:f8:ee:88:
c4:e9:f0:2e:cb:9f:02:3d:6f:d5:83:64:2b:63:e4:94:c3:3b:
69:60:53:c9:ff:30:fd:e0:12:28:80:58:6f:a4:14:fd:e9:6e:
48:03:d3:70:49:09:d1:0d:a6:cf:f4:63:b0:ec:8c:1a:9b:4d:
e1:b5:11:01:a7:28:e6:71:f1:ae:ad:3f:2e:fe:86:5e:08:0d:
2d:93:e6:45:3e:8e:ce:4f:40:0d:10:95:bd:44:cc:be:ee:5f:
40:db:72:6f:f4:2b:7b:e5:06:6d:06:7c:90:6a:56:75:f6:51:
b5:57:78:5b:b9:89:d0:a2:4f:d5:da:3c:ae:9e:61:c9:ae:3f:
96:9d:fc:dd:dc:06:3f:b2:c5:89:99:bc:6c:a6:d4:d4:39:28:
c1:c2:bf:2c:b2:4f:5a:de:a0:00:7e:c0:7a:b3:81:5f:d5:c3:
17:80:87:6d:36:02:b2:a2:75:18:78:6e:bd:42:9b:06:c5:c2:
71:aa:80:c3:97:9d:55:f5:c4:ce:78:a0:38:a3:28:de:2f:35:
1e:8a:11:e4:a4:ef:97:18:45:42:ae:bf:f7:98:70:14:c3:e6:
a4:b7:79:63:5d:23:d9:f8:bc:8e:68:9b:97:d4:bb:eb:46:19:
f3:f2:2c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:07 2025 by rpki-client