Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V7--VjDDeYSWsD1zcsEzrcjk3A0.roa
File: V7--VjDDeYSWsD1zcsEzrcjk3A0.roa (raw, json)
Hash identifier: 7j3isZVa63vvboBOIMWEqNefLduxooPbt3iA2mh9bhU=
Subject key identifier: 57:BF:BE:56:30:C3:79:84:96:B0:3D:73:72:C1:33:AD:C8:E4:DC:0D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D995F98577ABFFA91A8BFEC1728B075CE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V7--VjDDeYSWsD1zcsEzrcjk3A0.roa
Signing time: Sun 11 Feb 2024 18:13:15 +0000
ROA not before: Sun 11 Feb 2024 18:13:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:99:5f:98:57:7a:bf:fa:91:a8:bf:ec:17:28:b0:75:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 11 18:13:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57bfbe5630c3798496b03d7372c133adc8e4dc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:da:3a:dd:c5:10:f3:95:7a:e7:57:a9:f0:44:
66:82:24:4a:54:b0:c3:34:3a:d1:3e:4d:6d:c3:e7:
24:ad:08:62:c2:e5:99:a3:b2:81:8b:ca:a6:55:31:
e0:d5:0d:df:df:15:32:6d:45:7b:ef:a5:a4:3c:82:
ee:17:3e:14:9c:95:a3:ad:d5:66:9c:3f:69:dc:f8:
91:a7:16:2b:56:44:45:64:84:9f:7f:11:a4:38:55:
c5:ad:05:36:70:3d:82:ff:6c:43:6a:48:ca:d4:0f:
29:b7:6c:8d:10:1a:b4:ee:8f:1c:f0:3b:f7:40:44:
63:f0:f0:1d:49:49:7d:a1:31:87:70:74:b7:d9:ab:
68:f9:00:ea:ec:bd:51:87:f7:ca:8b:e2:e7:a2:27:
08:6c:f6:ba:57:7c:07:b2:d6:bf:f5:30:a7:15:83:
9f:45:ec:3d:b1:23:e6:66:16:db:1d:f3:39:3a:3f:
36:04:02:ce:89:f3:48:81:a8:8c:c3:7f:b5:dc:7a:
ec:09:5b:d8:74:1b:42:c1:7b:43:99:ad:bd:4f:e4:
6f:16:3d:a0:0f:d9:7e:e1:1a:a4:12:07:24:67:31:
14:85:a4:b2:ef:4c:d2:56:da:90:df:53:15:7d:be:
bb:06:88:bb:62:58:3c:ab:09:3e:12:4d:31:45:7d:
47:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BF:BE:56:30:C3:79:84:96:B0:3D:73:72:C1:33:AD:C8:E4:DC:0D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V7--VjDDeYSWsD1zcsEzrcjk3A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:46:3b:ad:ec:50:d0:00:a9:4d:84:e9:0f:af:b4:c3:35:4b:
63:ad:5a:07:06:32:0e:b1:25:33:4f:33:9d:c2:3a:f8:1e:3c:
a6:d2:fe:e7:db:c2:5d:dd:74:86:4b:76:d8:b6:6b:b2:2e:74:
4f:dd:bc:c0:5d:cb:4f:3c:fb:1b:c0:91:5f:6f:45:ef:9e:0e:
ea:56:c2:fe:11:6b:79:0c:b4:35:cb:c0:44:a6:1d:16:80:78:
d9:7c:ea:33:ca:b5:72:ea:b8:05:48:6e:8c:f9:88:68:e2:07:
94:00:ca:ca:d7:56:e1:75:24:ed:44:10:d8:45:10:14:cc:a3:
18:05:22:db:60:ca:ca:ba:1b:7e:39:b0:0d:35:f4:4b:88:e6:
56:4d:79:4d:8c:4b:56:ea:d9:9d:36:92:40:c6:25:9e:9e:3a:
91:a5:18:73:b5:69:c4:d7:ff:3a:c6:1f:db:84:0a:04:78:f8:
c3:a7:82:d9:48:58:c7:cf:4d:4a:62:53:c9:cd:08:44:31:4e:
f4:7e:4f:66:31:72:a5:92:1b:92:79:ca:7e:03:8e:2e:f6:84:
15:42:5f:49:2a:a0:fb:db:81:74:70:25:f1:cc:44:ac:31:e6:
9f:b2:fb:a6:d0:53:6b:16:b8:6a:77:65:57:f1:cb:4b:10:b7:
5e:cb:23:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:10 2025 by rpki-client