Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XIJgIeIb0ksVU5jIBg9iJmXqJMI.roa
File: XIJgIeIb0ksVU5jIBg9iJmXqJMI.roa (raw, json)
Hash identifier: Xh5NSYXzARABsxz0WjFw4YEI9VX0iLy9WrwNzxJ1nio=
Subject key identifier: 5C:82:60:21:E2:1B:D2:4B:15:53:98:C8:06:0F:62:26:65:EA:24:C2
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB39075FEFF9D5E9E73822D8FBEA64B46
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XIJgIeIb0ksVU5jIBg9iJmXqJMI.roa
Signing time: Fri 29 Dec 2023 03:13:58 +0000
ROA not before: Fri 29 Dec 2023 03:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b3:90:75:fe:ff:9d:5e:9e:73:82:2d:8f:be:a6:4b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 29 03:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c826021e21bd24b155398c8060f622665ea24c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:c9:a6:59:76:01:42:13:ab:13:91:41:79:
77:39:91:ea:5e:14:28:b3:7c:fa:68:68:72:f9:54:
30:ea:46:ca:b9:7e:3d:c6:48:56:b6:73:63:95:f0:
4a:e0:d7:b2:61:0b:ee:58:67:65:47:00:42:9b:90:
90:d1:c0:b3:a5:01:d7:96:4e:51:5e:28:48:1a:a8:
6c:d7:42:37:b1:fd:55:34:41:c3:ae:67:51:ad:d3:
ea:07:22:92:e6:77:8d:4a:a1:cf:96:af:d2:a7:b6:
de:d4:aa:a5:c9:e4:74:f0:c2:18:af:3b:06:d3:1e:
c2:a3:02:0a:a3:ae:00:9a:4c:90:98:ac:d7:89:78:
c6:71:d7:c2:73:99:79:b3:04:a8:75:3b:71:6f:04:
9b:8b:64:c6:1c:fe:f4:b4:f7:fa:65:62:ed:c6:06:
1a:4b:54:e3:8d:08:81:f2:20:d1:52:31:74:3c:49:
d9:4a:73:77:dc:2d:03:50:57:b4:a0:43:26:f3:1c:
43:61:05:5e:d0:d1:0c:5c:c5:a1:a0:e3:78:b2:b3:
1f:8f:de:8e:ed:63:e3:bc:5b:7d:b2:e3:fd:71:c8:
09:d5:8a:22:2e:ab:b8:52:dc:d8:3e:2e:5e:3e:40:
fe:21:b2:c5:27:06:30:2c:44:29:da:86:95:f9:83:
3d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:82:60:21:E2:1B:D2:4B:15:53:98:C8:06:0F:62:26:65:EA:24:C2
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XIJgIeIb0ksVU5jIBg9iJmXqJMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:61:ac:54:90:a9:d9:a8:bf:6b:24:7f:e8:4d:ad:2d:0b:aa:
3b:37:2d:b2:5c:c9:d0:77:12:84:34:47:3b:3c:de:e3:a1:c9:
a5:7c:11:2b:77:21:73:e7:01:90:a8:56:64:18:28:73:45:78:
1d:07:f3:ec:46:7a:8e:82:7e:bb:70:59:df:98:d1:59:2c:e4:
77:89:bb:9c:85:97:cb:a8:fa:7a:78:0d:c2:c0:94:d3:be:c3:
da:38:7f:69:0d:57:10:28:ff:e4:64:e9:1b:57:ca:54:2a:06:
15:4a:b4:09:4a:f9:c7:a8:53:79:41:14:09:b4:1b:64:c2:6d:
dd:c4:d2:06:8f:de:3a:f9:11:d5:bf:e9:55:e7:31:2e:76:17:
78:af:ab:80:9e:8e:fb:4d:aa:e8:fb:77:a3:78:ec:82:fc:eb:
29:67:33:83:af:b0:90:ea:7e:ef:2a:5c:70:28:3b:68:1f:1c:
c3:de:61:3c:1b:7f:01:25:d6:e0:79:8c:67:72:09:92:5d:02:
7b:a3:39:02:12:7b:86:36:68:66:2a:da:53:3a:e2:91:4f:a7:
54:e3:d5:37:06:6b:5e:0e:af:25:55:b8:03:ee:5c:d3:b9:58:
93:91:b5:57:99:a0:f6:17:ae:33:93:90:56:d8:da:2e:87:03:
9b:5a:2e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:11 2025 by rpki-client