Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XhUG6N2sH_cejyLphkGF6Sf5YCA.roa
File: XhUG6N2sH_cejyLphkGF6Sf5YCA.roa (raw, json)
Hash identifier: pyQ7aehHP38o7jkijD2qTpfPiuBOMbQk1EgYOZwAt34=
Subject key identifier: 5E:15:06:E8:DD:AC:1F:F7:1E:8F:22:E9:86:41:85:E9:27:F9:60:20
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D85331B9FAC372400B3C6531510350975
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XhUG6N2sH_cejyLphkGF6Sf5YCA.roa
Signing time: Wed 07 Feb 2024 20:12:15 +0000
ROA not before: Wed 07 Feb 2024 20:12:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:85:33:1b:9f:ac:37:24:00:b3:c6:53:15:10:35:09:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 7 20:12:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e1506e8ddac1ff71e8f22e9864185e927f96020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:94:50:b7:f6:07:8c:f0:93:d3:30:ae:16:cb:
d2:ae:95:38:c3:0b:99:0e:53:1d:b9:5d:6d:d3:0a:
92:11:3e:45:4c:fd:e0:2d:a2:46:1f:31:d3:d6:4b:
07:12:28:4b:74:6e:ed:a9:f9:1d:58:56:58:bf:76:
69:39:5a:7c:e7:59:4c:b1:ef:90:a4:43:d4:d5:71:
96:73:d1:54:28:a5:f3:e1:ad:4d:a2:20:23:a6:1a:
10:27:ce:e7:06:aa:a4:b8:31:c9:25:d5:6d:a1:1d:
a5:20:bd:61:8c:d4:48:8d:ee:82:76:48:c6:e5:9f:
9c:a5:fa:a8:11:fa:db:b4:84:69:65:ec:5f:13:35:
5d:e8:d0:ca:fb:a1:70:96:bf:44:8a:a8:61:cd:f6:
cf:de:ba:86:d5:9f:29:8d:7c:cd:e1:be:27:d2:d5:
1a:1d:35:8f:91:f4:2f:38:8c:8b:5b:42:60:ba:47:
00:2c:10:c9:1e:55:43:f8:96:56:5c:a4:cc:af:57:
80:32:cf:6e:4d:b0:a7:ad:e1:7d:44:77:02:36:25:
40:ba:8a:2d:02:bc:e5:31:67:cf:bb:62:b1:4f:53:
91:4e:0c:4c:d2:b7:76:b5:e2:22:91:2e:91:4a:50:
78:ed:da:cc:85:cb:07:bc:2a:ed:39:33:79:e3:9a:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:15:06:E8:DD:AC:1F:F7:1E:8F:22:E9:86:41:85:E9:27:F9:60:20
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XhUG6N2sH_cejyLphkGF6Sf5YCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:b6:92:15:51:44:4f:ed:7b:b6:d6:f8:77:f8:5f:33:9c:12:
fb:56:fe:ae:67:6e:5e:b0:f6:82:c1:bd:75:9a:83:47:9a:8b:
1b:b4:18:29:e7:74:59:0d:ad:36:b7:8a:a5:17:ea:61:09:c4:
8b:69:b6:55:03:e0:b9:33:3d:71:da:b7:5e:ab:e2:0d:65:e3:
79:99:62:e1:1f:8b:b0:a0:f3:11:9c:4c:f7:48:f1:0b:2d:79:
58:32:0f:bd:3c:a5:9b:0f:67:8a:44:73:cf:51:20:45:dc:bc:
33:60:3c:48:5d:25:f4:c2:b2:a6:39:c9:06:a7:0f:98:9e:6b:
ad:47:c7:3a:dc:5b:d6:f7:97:3a:63:08:87:32:83:fc:1b:94:
88:80:7b:3d:22:cb:cb:f4:e8:9f:62:72:5c:38:9e:a9:45:3b:
fd:b4:f9:c8:71:ec:58:7c:8b:11:00:f4:c1:20:9f:e1:3e:25:
4f:4e:f3:80:92:c5:2f:ff:91:ce:54:f2:67:69:7d:2b:5a:c3:
7f:ed:ed:ed:c8:41:40:66:32:d6:f6:9e:5b:11:e3:3c:2b:8f:
3f:51:d7:0c:b0:27:86:e8:3c:db:a8:58:99:74:8d:65:2c:47:
1c:56:37:08:ab:f5:fa:30:7b:ad:48:70:00:fb:c2:e8:c2:08:
d2:80:44:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:27 2025 by rpki-client