Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Vt3TNwucGADGZJn0XtNvsCgDeP8.roa
File: Vt3TNwucGADGZJn0XtNvsCgDeP8.roa (raw, json)
Hash identifier: qXgM7x5TENhNBWrIkKciU4v5aHhG/NF++oOXrvvfP8s=
Subject key identifier: 56:DD:D3:37:0B:9C:18:00:C6:64:99:F4:5E:D3:6F:B0:28:03:78:FF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D34F646FA7EC13F0B0D1D0D7CC311FFEC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Vt3TNwucGADGZJn0XtNvsCgDeP8.roa
Signing time: Tue 23 Jan 2024 06:16:11 +0000
ROA not before: Tue 23 Jan 2024 06:16:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:34:f6:46:fa:7e:c1:3f:0b:0d:1d:0d:7c:c3:11:ff:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 23 06:16:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56ddd3370b9c1800c66499f45ed36fb0280378ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:a2:1f:b4:ba:87:4d:6b:5e:bf:c6:10:74:
ff:18:6f:f8:af:1b:74:14:6e:1a:bf:ee:0c:9c:4b:
66:f5:d9:3c:5f:39:1b:7b:3b:8d:3f:dc:8e:c7:0d:
d6:d0:de:e4:46:c5:c9:7b:be:06:f1:9a:ff:da:53:
34:cb:71:c3:db:37:ee:c8:7a:4a:1e:59:82:79:17:
5e:72:2a:5a:39:5b:93:8e:ff:87:fa:cf:cd:2e:68:
34:91:9b:28:bd:fe:e9:53:c6:6f:5d:3f:2d:3d:fc:
21:f2:6e:87:92:2e:51:a7:0a:f9:40:e0:ea:b5:9c:
3f:22:e0:fd:e3:10:63:07:af:15:fd:15:46:d3:61:
9e:63:e5:cd:06:68:78:99:28:f4:fe:62:d7:e4:14:
ce:23:96:74:6c:55:34:fb:f4:6e:d2:8a:9f:d4:fa:
a0:93:6b:20:55:c7:2f:95:8b:b4:27:c4:86:5f:88:
2c:31:58:aa:10:42:ee:9e:f2:6f:2e:10:22:6b:2e:
17:27:c0:a3:80:18:13:70:36:e4:c5:6d:c2:09:71:
3c:3c:d6:ff:63:2f:90:50:6d:89:53:ef:05:19:f7:
a3:ab:5f:56:72:06:5d:75:38:b5:b7:02:31:54:4d:
ec:89:01:b8:4c:a1:ac:89:65:94:b1:f8:85:c4:5f:
d3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DD:D3:37:0B:9C:18:00:C6:64:99:F4:5E:D3:6F:B0:28:03:78:FF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Vt3TNwucGADGZJn0XtNvsCgDeP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:3e:f7:78:eb:27:64:4e:15:94:46:d6:de:ab:15:2e:ca:98:
90:51:a9:3e:20:c4:04:a1:b0:66:ca:fb:99:fd:45:f6:b0:47:
73:39:a3:b0:4e:f0:4d:1c:2c:07:03:19:1b:d9:3c:ff:08:e4:
d8:07:19:65:fa:4a:cb:2c:47:47:08:0d:6c:22:66:3e:b8:c1:
3a:a1:32:4d:52:49:dd:cd:69:c2:0b:38:b3:fb:23:31:f0:6a:
c6:b6:70:dc:3b:3c:87:9d:39:fd:1a:a7:0b:1c:6c:f7:cb:58:
75:6c:b1:58:7e:2b:78:f3:57:13:00:8f:f0:93:e5:7a:dd:73:
4e:68:6d:f2:45:d2:79:31:52:8c:a7:4b:d9:f8:a0:b0:38:d4:
1e:c3:ff:4b:b5:4c:b6:05:98:74:14:b8:9d:c2:e2:c5:aa:db:
60:83:f4:40:47:f2:d2:a6:8b:3b:db:b6:23:69:6e:e7:56:91:
7b:0e:e0:9e:d9:3a:6f:b4:81:96:e1:0a:cd:bb:40:a3:bd:d6:
33:27:45:13:a8:58:c4:71:82:19:08:c0:fe:13:a6:45:f5:0a:
6b:09:e4:c6:79:8b:6a:44:b0:2b:76:5d:7a:f1:52:94:cc:4e:
df:5f:89:33:6f:de:cf:fc:5e:0c:1f:42:da:92:09:81:df:4e:
35:0f:69:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:45 2025 by rpki-client