Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UrfFVljMbOIiAvEhJoT0ydVghKc.roa
File: UrfFVljMbOIiAvEhJoT0ydVghKc.roa (raw, json)
Hash identifier: scHuiEtZ/pAoGpiETbMXnwbyTw1hN8aO5GeluwJTGOs=
Subject key identifier: 52:B7:C5:56:58:CC:6C:E2:22:02:F1:21:26:84:F4:C9:D5:60:84:A7
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D1644A5C2E5FF63712EF39D4BB6AF7D1E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UrfFVljMbOIiAvEhJoT0ydVghKc.roa
Signing time: Wed 17 Jan 2024 07:13:34 +0000
ROA not before: Wed 17 Jan 2024 07:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:16:44:a5:c2:e5:ff:63:71:2e:f3:9d:4b:b6:af:7d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 17 07:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52b7c55658cc6ce22202f1212684f4c9d56084a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:6b:77:0d:d9:30:b1:43:db:b1:de:fb:e8:
1c:1f:12:6a:fe:48:be:be:31:88:4a:c5:ea:97:91:
11:19:5b:fe:32:91:03:32:06:9c:65:ad:e7:93:82:
76:c7:f0:80:e8:3e:fc:ac:7b:c9:54:f9:a4:37:6a:
62:10:fe:35:a1:66:1c:25:79:d0:6e:c8:3c:c3:2d:
0e:a4:9f:b4:31:d9:a6:54:f1:84:27:52:3b:54:b3:
0a:89:28:09:10:cc:ed:be:ba:44:0d:18:ea:3b:4b:
53:d8:b2:de:5a:0d:4a:27:52:a7:bf:3e:d4:5f:32:
90:d6:e9:2d:26:d1:50:b1:f3:2a:61:fc:39:f8:b9:
23:88:d0:6c:f6:89:9e:2e:75:4c:73:d2:dd:fd:ce:
c3:ec:32:94:74:8e:a5:38:19:6d:f1:24:65:76:91:
0a:41:c3:04:a7:8c:a7:2f:11:7c:bc:cd:4b:cd:27:
40:0b:33:3d:f2:19:f6:c8:3d:87:a8:67:2c:57:6e:
5b:1e:c0:9c:c2:b1:d9:50:c1:cc:53:a6:c0:70:17:
82:9b:54:7e:82:49:ec:b0:12:0e:2f:58:c6:c8:fe:
79:86:42:b5:a8:6e:66:d5:76:55:79:81:8c:ec:c7:
0c:d8:12:8e:45:18:1a:df:0b:6c:f9:52:4b:68:1a:
f0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B7:C5:56:58:CC:6C:E2:22:02:F1:21:26:84:F4:C9:D5:60:84:A7
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UrfFVljMbOIiAvEhJoT0ydVghKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:bd:da:84:db:be:c9:4f:bd:9a:9a:ac:1b:d4:a9:54:69:ae:
93:c5:9b:71:04:37:b1:2a:2b:26:33:5f:d0:0b:32:f1:9f:6a:
1f:50:7c:78:8a:96:ac:d0:58:73:62:59:5d:cc:14:8f:ef:ac:
7c:14:01:16:dd:24:01:f3:11:76:7a:f1:e8:f4:fe:21:09:2d:
e8:e9:c6:f0:1b:20:ac:46:2a:67:14:f0:84:c8:01:ea:9d:3b:
77:bc:e3:d7:5a:a6:92:b2:c5:06:5c:dc:3d:8e:fd:59:f7:cf:
26:48:bd:69:c2:49:ba:23:aa:81:3a:97:bd:b8:88:a4:70:d7:
61:34:b4:f6:94:87:42:24:7b:a2:34:fc:37:b1:ef:6d:c5:e5:
9f:01:eb:17:15:8f:f8:4e:19:ad:94:4c:0e:9d:d4:70:97:f0:
40:ef:df:31:a6:ce:0f:12:28:1b:ec:09:56:5f:e1:c9:4a:50:
4b:c7:48:ba:21:a2:56:7b:2f:25:55:86:cc:94:be:df:da:14:
b0:2c:23:b3:a2:da:79:f5:c9:5a:ef:d1:17:ea:83:01:07:ea:
0f:86:b2:ba:9b:7c:aa:5e:6f:66:7c:d2:d1:d2:e7:78:bc:88:
b6:74:aa:45:d0:7e:5b:c5:13:fc:73:3c:dd:b8:88:a5:b7:75:
9e:88:60:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:53 2025 by rpki-client