Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XhbAfiWeJMsvwu8wKLGuBFBjt3w.roa
File: XhbAfiWeJMsvwu8wKLGuBFBjt3w.roa (raw, json)
Hash identifier: zti5sXOrhQGlajsmHlMKIrHW4aMDzqRE1sXOHfG6ZEc=
Subject key identifier: 5E:16:C0:7E:25:9E:24:CB:2F:C2:EF:30:28:B1:AE:04:50:63:B7:7C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E3D4D12C7153A42C6876455D2E4DACDF4
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XhbAfiWeJMsvwu8wKLGuBFBjt3w.roa
Signing time: Thu 14 Mar 2024 14:10:45 +0000
ROA not before: Thu 14 Mar 2024 14:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:4d:12:c7:15:3a:42:c6:87:64:55:d2:e4:da:cd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 14 14:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e16c07e259e24cb2fc2ef3028b1ae045063b77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:19:86:ed:e1:92:83:0d:8f:67:81:ae:40:d6:
38:0d:2d:9f:d0:9b:46:5d:4b:a3:ee:7a:c1:8e:95:
76:70:d7:e7:a2:69:8c:73:3c:56:59:64:0e:28:74:
e6:6a:b1:ac:99:f0:a9:0f:3b:c2:c6:3d:eb:e5:23:
84:a8:75:ca:d4:f5:2b:70:eb:ec:2b:da:ca:96:a2:
f9:6c:82:70:f2:e5:29:41:e1:60:8f:de:db:8e:56:
17:f1:ae:88:6f:36:b8:df:b0:0d:07:6c:48:72:87:
42:85:2d:c3:e5:d1:03:6a:cb:08:48:0e:0e:97:ee:
c9:16:bf:9e:6d:92:88:dc:05:50:94:3f:de:ae:5f:
47:bb:f8:e9:f8:21:92:a3:31:97:ee:e4:d2:05:0b:
7b:dd:a0:38:93:d3:59:1d:d0:c7:37:f4:86:aa:aa:
79:2b:49:33:0a:c0:74:fd:7c:ef:54:c8:10:ee:9a:
23:a2:1d:27:d0:af:b2:b0:9f:2f:92:ed:b1:cc:08:
95:b9:63:84:a4:cc:5e:11:8a:4e:b1:60:bd:3e:4b:
88:26:28:a2:85:4a:0f:5c:ba:ca:14:98:10:aa:e1:
fb:f3:a1:b7:98:f4:a4:49:0a:3f:e2:14:47:79:60:
e6:db:39:9e:b1:88:7f:0b:c8:7c:d4:40:ec:69:be:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:16:C0:7E:25:9E:24:CB:2F:C2:EF:30:28:B1:AE:04:50:63:B7:7C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XhbAfiWeJMsvwu8wKLGuBFBjt3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:33:4f:8e:e7:b6:d7:00:4d:3f:4f:3d:de:3a:17:5b:dc:fb:
23:3b:60:94:a0:5e:1d:d8:06:54:49:8c:1e:5f:2d:ab:61:be:
ac:b5:23:57:91:6d:b4:14:35:95:3d:c8:2c:c9:8a:3f:95:70:
1c:07:42:1a:f9:03:9a:35:9b:3f:44:07:1c:f6:13:95:c1:2a:
b7:cd:fe:ec:f5:c3:e3:2b:fc:b5:4d:51:ba:48:ae:64:9f:29:
b8:31:bd:94:f2:b2:36:39:b0:1d:98:1e:90:f5:b8:12:93:80:
7f:32:d2:c2:67:09:32:16:f9:83:86:7b:6f:ae:31:49:bc:36:
4f:8a:b0:70:a7:11:31:8b:06:b2:c6:46:12:5e:a8:2a:4d:8f:
48:d9:74:a4:85:9c:b2:bd:bb:4e:43:ff:8d:58:93:e8:f0:d9:
18:c2:81:61:e0:94:8b:1f:cb:12:b9:82:0b:41:d8:90:b5:20:
89:78:1d:64:c2:71:18:58:ec:7e:03:77:8e:86:c0:b8:e3:d0:
ef:9b:6d:fa:07:25:f9:78:80:8b:92:bc:9f:17:b3:eb:d4:f1:
7d:cd:8e:89:54:ce:90:f6:58:0d:90:52:1b:c5:37:cb:46:7c:
04:15:5d:d9:9e:eb:e7:e3:24:b9:60:26:a0:e3:a1:36:20:34:
af:1d:37:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:40 2025 by rpki-client