Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V1w4gSeUgxnFg-6nucCCswXT7-0.roa
File: V1w4gSeUgxnFg-6nucCCswXT7-0.roa (raw, json)
Hash identifier: OfYEVRuqb7eloQnNgsNIOnMeopU8vQ6CFkZcs2fO0Ac=
Subject key identifier: 57:5C:38:81:27:94:83:19:C5:83:EE:A7:B9:C0:82:B3:05:D3:EF:ED
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018ECA4A3DE399CCF28AC49EF2D34EF39AC9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V1w4gSeUgxnFg-6nucCCswXT7-0.roa
Signing time: Wed 10 Apr 2024 23:14:06 +0000
ROA not before: Wed 10 Apr 2024 23:14:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ca:4a:3d:e3:99:cc:f2:8a:c4:9e:f2:d3:4e:f3:9a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 10 23:14:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=575c388127948319c583eea7b9c082b305d3efed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0f:b1:86:92:36:84:e1:01:0f:4e:ad:fa:8c:
d5:48:cc:a8:73:6d:dd:27:0b:4c:60:93:bc:0a:3b:
82:aa:4b:3b:80:78:04:31:3c:50:1b:81:21:c3:ef:
37:f2:e6:95:c5:c6:25:26:42:00:1a:37:0f:f7:d8:
6f:d0:1f:87:26:ab:7b:20:aa:4c:64:a1:e5:f5:21:
1b:77:63:2b:91:9c:f1:b7:70:e9:8e:b9:76:8a:c5:
e1:95:49:85:7a:df:fa:7a:f6:33:fb:2d:71:bb:42:
7a:4e:46:78:32:ff:9c:aa:3d:cd:b4:b0:ec:b4:b7:
84:8e:8d:63:0a:35:30:cf:48:18:a6:57:6f:2a:48:
5d:98:d3:bd:b5:bb:8f:c8:19:0e:9a:a0:7e:ee:12:
77:bd:d4:c1:e0:ce:ad:49:3c:6f:3a:96:38:a7:89:
37:3f:80:f9:c7:b2:06:8e:b0:2d:c0:08:c7:a0:d3:
3b:b1:90:db:40:ec:1d:5a:18:41:ad:a7:90:96:67:
5b:6d:2f:e1:70:1b:18:28:d2:dd:77:39:01:ca:96:
2e:db:f3:32:d8:98:19:dc:97:de:b5:99:ca:ba:d0:
ce:55:bd:8e:01:dd:8b:d9:7b:f8:88:78:e2:72:38:
3e:20:aa:f8:e8:a8:39:b7:a7:4a:bb:f8:1b:e8:a7:
95:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5C:38:81:27:94:83:19:C5:83:EE:A7:B9:C0:82:B3:05:D3:EF:ED
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V1w4gSeUgxnFg-6nucCCswXT7-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:8d:c4:f5:ee:64:e3:08:7a:27:1c:98:5b:8a:e7:a5:f8:7e:
39:98:f3:3e:e9:fc:8a:48:25:96:c4:1b:1b:07:a1:fc:3e:98:
35:27:db:7d:da:73:8a:38:69:25:64:e8:2c:4b:7b:eb:42:01:
70:7a:b7:f9:6c:dc:26:fb:84:f8:1c:13:61:2c:3c:34:f0:cf:
a0:59:98:d8:d8:85:03:c5:21:88:c0:42:95:ea:37:27:ae:d4:
f2:7d:58:2d:9b:0a:16:06:f5:31:37:90:a5:23:93:3b:37:fd:
b2:28:bf:5b:76:78:c5:e2:ab:ad:91:0d:a2:b7:34:ba:4a:a3:
fa:81:5f:56:f6:a8:46:ed:d8:4f:42:07:52:33:7a:45:d7:6f:
c2:61:38:78:a9:62:db:c9:ad:b0:54:9a:a7:b3:e2:e0:57:85:
8f:bf:f6:52:cf:14:02:93:5f:03:34:f0:04:24:d2:ea:ef:84:
08:19:d6:78:24:51:84:4c:5a:58:7f:5f:e2:ea:42:bf:42:95:
60:68:82:01:54:ea:80:77:60:fe:c2:dd:01:a3:40:62:20:31:
3c:35:1b:9e:bb:8c:d0:e9:61:ea:17:90:be:d0:e8:84:99:fe:
96:37:d6:d9:dc:58:28:d8:84:3a:be:4a:c4:ad:a8:8f:18:b5:
9c:6e:ba:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:00 2025 by rpki-client