Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XKz-EwIG0L68XJxo4aGwHWUY3s8.roa
File: XKz-EwIG0L68XJxo4aGwHWUY3s8.roa (raw, json)
Hash identifier: qMzJZGVJ+Vxoqx18k1hQSc+nEqsizZ1+YCuadp0lDJk=
Subject key identifier: 5C:AC:FE:13:02:06:D0:BE:BC:5C:9C:68:E1:A1:B0:1D:65:18:DE:CF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE88A22D6E467E1574EFD81AB10B685BE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XKz-EwIG0L68XJxo4aGwHWUY3s8.roa
Signing time: Mon 08 Jan 2024 10:06:56 +0000
ROA not before: Mon 08 Jan 2024 10:06:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:e887:c44c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:8a:22:d6:e4:67:e1:57:4e:fd:81:ab:10:b6:85:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 8 10:06:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cacfe130206d0bebc5c9c68e1a1b01d6518decf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:d7:7d:a1:47:ce:62:2b:69:cd:0b:b0:b0:
35:54:2f:83:c6:19:85:b1:d3:7d:4f:49:81:6e:e1:
09:28:88:8d:bf:d1:47:99:b1:9e:ce:35:c0:83:dc:
44:76:b0:59:74:51:21:f5:23:2b:c6:d6:f2:7e:2d:
1d:ba:0b:2f:10:0e:46:81:6c:9e:62:c3:16:80:6f:
95:85:f5:35:e0:90:05:88:77:ee:36:84:ac:e8:91:
ea:d2:2b:0b:f4:0b:60:93:f0:18:a4:26:b1:01:2e:
eb:4c:dd:c6:9c:9b:c4:b4:91:b3:d8:3b:ce:96:26:
2d:0c:dd:70:89:22:da:eb:33:31:f4:59:80:3c:2d:
e1:8c:26:b2:6f:ee:22:1e:f7:35:f0:f6:2f:60:4b:
92:6f:b6:33:1b:7b:1d:41:1c:cc:2d:e4:e8:c9:dd:
61:46:c7:95:19:48:34:c2:09:a4:9f:0d:73:08:37:
3f:a0:de:09:09:2b:24:f8:bf:71:5d:d8:d6:79:ce:
23:f0:02:82:24:00:13:ce:7e:5b:ac:72:e9:d5:5f:
b5:dd:b7:5d:6d:7c:a2:21:c7:94:ba:33:15:f3:83:
c2:20:3f:04:e8:f0:51:af:61:5e:8b:36:97:11:21:
41:84:21:82:0a:93:48:fa:aa:e2:74:38:9a:c2:b0:
60:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AC:FE:13:02:06:D0:BE:BC:5C:9C:68:E1:A1:B0:1D:65:18:DE:CF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XKz-EwIG0L68XJxo4aGwHWUY3s8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:54:38:71:30:14:23:7e:88:c2:23:78:90:66:17:4d:23:d9:
db:1b:71:3a:2e:82:da:5f:41:fb:2e:ab:25:8d:eb:c0:3a:e9:
cb:39:d2:0c:1d:19:35:ba:e5:c5:2b:03:1a:ef:2d:58:43:45:
02:3a:37:0c:a5:1a:73:00:c5:be:56:9f:b9:81:af:2f:7d:81:
9a:58:07:5b:94:fa:22:4c:fc:0a:f7:91:ab:c8:a9:c2:1c:93:
8c:2e:ab:c6:2d:59:53:77:53:03:20:79:86:16:04:b6:c3:37:
81:96:22:53:b1:eb:9b:e9:6d:56:67:bb:2e:f7:6e:a0:de:20:
31:de:ab:6f:e3:66:e4:aa:bf:0f:16:58:1e:7a:85:9b:98:a7:
b0:f1:66:77:1e:aa:01:67:16:0c:63:96:43:99:4f:bd:39:30:
05:c0:ad:f3:3d:54:5e:9c:ca:dd:e6:6c:a9:5e:c6:98:36:df:
8a:a5:57:7a:f5:88:a0:a4:ce:5c:ba:07:4c:50:44:ed:a4:7e:
89:c4:d7:e8:a2:0e:fa:be:df:8e:9a:3d:3e:f6:87:c6:d8:58:
4c:b3:5c:f2:41:d7:b4:c2:c9:07:8d:94:9d:12:68:41:90:b4:
01:a6:6c:37:fe:ee:1c:b2:5f:53:af:13:60:4b:e9:05:86:91:
bc:27:84:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:13:46 2025 by rpki-client