Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XPpDVTHa_rtug8VE8yEZfaehSkM.roa
File: XPpDVTHa_rtug8VE8yEZfaehSkM.roa (raw, json)
Hash identifier: FSzonvbLUpZ6WhebQ5Daref5RPnTCBGjj9ybwDKl8zw=
Subject key identifier: 5C:FA:43:55:31:DA:FE:BB:6E:83:C5:44:F3:21:19:7D:A7:A1:4A:43
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E3FDF5666C3910B3328FF4486BB89DBEA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XPpDVTHa_rtug8VE8yEZfaehSkM.roa
Signing time: Fri 15 Mar 2024 02:09:44 +0000
ROA not before: Fri 15 Mar 2024 02:09:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3f:df:56:66:c3:91:0b:33:28:ff:44:86:bb:89:db:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 15 02:09:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cfa435531dafebb6e83c544f321197da7a14a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:80:fd:cf:58:b0:7a:b6:cc:f1:b6:3d:f5:81:
e1:ac:a6:fc:92:be:b7:fc:8b:ae:17:e3:6d:38:1e:
f1:75:54:be:38:fe:f7:80:d7:a3:0b:73:5b:2b:af:
e9:07:ce:b7:e5:6a:09:31:ec:ae:2d:a8:12:81:71:
9e:aa:28:47:37:0b:94:b0:96:61:2f:82:7b:58:19:
09:66:35:20:5f:65:37:08:fd:18:41:76:0f:d2:7b:
be:d4:9c:7a:61:68:2e:c8:f5:a6:b4:5d:51:20:83:
39:e4:3c:7b:1e:5b:63:cb:31:dd:87:0a:3c:3b:26:
d3:b3:50:ef:c8:7e:85:b8:4f:09:d1:79:a6:4b:1f:
ad:65:c2:70:e9:a3:6e:7b:49:c4:2e:ae:d4:f5:ac:
14:6a:e3:7a:f6:ec:85:29:c3:29:b9:bb:f9:4e:c9:
4e:3f:81:8d:e4:c3:03:07:9f:24:e0:d3:79:c2:c8:
34:40:30:b8:39:2a:2a:77:c8:b8:0a:17:fe:1d:f0:
18:36:f6:c2:93:4d:a8:3e:f1:4a:f1:a0:e5:a7:e0:
c9:c5:a9:71:96:5f:72:36:bd:96:94:5e:e1:e7:77:
6e:e4:e4:2d:1f:df:d1:f0:e9:78:21:07:f3:0f:2e:
4d:c6:c3:ea:74:ec:ed:93:5a:69:98:ef:9c:f9:bb:
93:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FA:43:55:31:DA:FE:BB:6E:83:C5:44:F3:21:19:7D:A7:A1:4A:43
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XPpDVTHa_rtug8VE8yEZfaehSkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:e5:16:d9:87:f5:58:02:47:3b:46:0e:05:f1:3f:24:7a:bb:
5a:80:aa:0f:d9:0d:a4:3a:cc:89:c9:c7:3f:c9:71:96:25:d7:
dd:d7:71:04:32:29:fe:47:73:60:c9:a4:fd:0c:fb:6c:16:2d:
fd:98:35:8f:59:29:ad:7a:b4:eb:3f:e2:fb:cb:2d:bf:55:bb:
44:a5:1a:1f:f4:89:18:a0:cb:00:ed:58:8a:1a:ca:76:72:51:
30:ee:e2:10:e3:2b:b8:eb:b7:91:35:88:fd:12:a0:5c:da:79:
8e:29:59:33:a5:e5:d9:63:3b:0d:1c:45:f4:72:46:d1:f7:b4:
ce:85:48:e6:0a:5e:0b:82:93:fd:4a:38:55:25:55:82:5b:13:
86:1e:0b:9a:e9:d3:a8:5c:df:6f:7c:5d:ec:74:7f:83:56:ec:
58:e0:e6:3c:ab:f0:c0:01:99:74:a1:60:01:0b:77:79:b4:cd:
af:61:35:6c:5c:42:6c:d4:54:a8:35:5c:6b:fd:08:7e:94:71:
27:db:ef:c0:16:b0:e3:ff:05:ae:0c:e6:b1:32:a5:c6:f0:88:
95:c8:e1:b3:df:b7:ec:4d:37:3d:4d:9d:12:04:df:c6:90:a6:
f3:13:5f:8f:1e:05:9c:8a:13:94:e7:f8:c4:4b:81:2c:fa:88:
dd:12:38:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:39 2025 by rpki-client