Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TVhh42tPizf3rIiwmmfIpppxry4.roa
File: TVhh42tPizf3rIiwmmfIpppxry4.roa (raw, json)
Hash identifier: zKZ30WduB4MRmcRSAvFgYd5YF/rxH2IRvGXadRBiIYk=
Subject key identifier: 4D:58:61:E3:6B:4F:8B:37:F7:AC:88:B0:9A:67:C8:A6:9A:71:AF:2E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB985231D1B743E73736A3F4C10EB5FD9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TVhh42tPizf3rIiwmmfIpppxry4.roa
Signing time: Sun 07 Apr 2024 17:04:54 +0000
ROA not before: Sun 07 Apr 2024 17:04:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:b984:9828/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b9:85:23:1d:1b:74:3e:73:73:6a:3f:4c:10:eb:5f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 7 17:04:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d5861e36b4f8b37f7ac88b09a67c8a69a71af2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ff:97:a1:de:ee:d7:e3:8c:c4:3e:27:a0:c9:
76:3a:e0:0d:fc:44:16:eb:4c:5f:36:0f:87:ff:bc:
38:d8:7c:ea:dd:f5:fc:e1:c9:7e:0d:42:d5:76:45:
38:14:d4:16:71:97:ab:f4:b2:5d:c3:45:b5:5e:54:
83:3d:fd:fc:8b:90:89:fc:d4:d2:b9:c9:b8:ab:3e:
c0:ef:90:db:b7:53:da:29:8a:60:0c:3c:59:e5:a0:
b8:1d:0d:86:e9:01:b9:73:ee:85:07:95:74:74:de:
ac:b4:31:98:61:f4:27:27:b5:18:b5:93:07:a6:c6:
aa:de:63:fa:c8:45:7e:94:9f:bf:ef:78:08:53:2f:
5a:d8:5d:b2:de:f1:14:d2:69:b4:dd:96:12:a8:00:
8a:60:f1:91:47:07:ea:3f:09:d9:0c:6a:d8:69:5a:
13:21:69:6d:e2:e0:43:0d:99:eb:04:4f:b2:6d:1e:
ff:47:5a:4f:e5:67:59:62:2a:43:80:51:a0:33:14:
82:2d:dc:ab:bf:64:2c:6b:ce:1c:44:18:6a:47:a9:
65:2f:20:bb:0b:bb:fc:90:34:a1:7a:b9:14:cb:7e:
87:07:71:1a:ef:58:9b:57:33:da:f7:72:19:8a:26:
94:35:5f:ac:34:8f:18:d6:9d:d8:4b:42:ba:81:36:
c1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:58:61:E3:6B:4F:8B:37:F7:AC:88:B0:9A:67:C8:A6:9A:71:AF:2E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TVhh42tPizf3rIiwmmfIpppxry4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:96:6a:02:f0:98:79:d3:8e:65:b5:a8:bb:97:11:30:a2:75:
7a:af:de:98:fc:63:55:ec:9e:fd:94:44:38:53:60:16:0a:66:
00:72:e8:19:8a:fd:60:e8:02:72:06:93:93:41:7d:54:7a:15:
20:b7:4c:d3:d2:a0:2e:ec:c1:85:f2:43:5d:85:fd:39:6f:5e:
7b:90:e6:9f:85:d7:82:96:f8:36:d6:63:66:3a:af:23:64:b4:
46:73:e5:75:42:23:b0:8d:9f:2c:a9:cd:d1:cf:d0:a7:87:50:
b3:10:48:c2:61:89:af:a4:87:dd:ae:d7:40:82:2d:91:fc:e4:
b2:f5:68:53:4d:a7:f7:fd:60:4a:81:6d:8c:2d:cb:2e:2e:4e:
94:59:b8:2b:e4:8e:1f:32:be:8f:4c:c3:61:59:d4:89:7c:db:
a1:af:9f:3b:f2:09:9f:ed:58:8a:28:4f:a8:c9:e9:e6:50:e2:
76:08:e5:4a:61:72:e4:49:99:28:16:3a:c8:9d:d7:b0:08:6f:
43:ed:2d:27:ee:6e:a2:7d:b4:46:3b:86:1f:4c:43:e0:97:5f:
90:77:64:84:3a:9d:de:7c:90:92:06:bd:5e:45:aa:fa:22:ef:
e0:63:62:66:f3:58:79:73:61:32:2a:1a:a0:90:4f:18:12:db:
54:7d:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:21:11 2025 by rpki-client