Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YN3OPMaEQtiznCKhtxiN1k79_o4.roa
File: YN3OPMaEQtiznCKhtxiN1k79_o4.roa (raw, json)
Hash identifier: KEFPHSvKFN+xc/fjwloOMxhe3xQ5wU/IseJUs5TxB0Y=
Subject key identifier: 60:DD:CE:3C:C6:84:42:D8:B3:9C:22:A1:B7:18:8D:D6:4E:FD:FE:8E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E2A2F0C46B435871E48BB82992633DF41
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YN3OPMaEQtiznCKhtxiN1k79_o4.roa
Signing time: Sun 10 Mar 2024 21:05:10 +0000
ROA not before: Sun 10 Mar 2024 21:05:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:2a2e:448d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2a:2f:0c:46:b4:35:87:1e:48:bb:82:99:26:33:df:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 10 21:05:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60ddce3cc68442d8b39c22a1b7188dd64efdfe8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:2f:3a:35:99:4d:9d:51:0a:48:48:2f:b6:
82:92:a6:34:7a:ef:58:0a:bd:c9:6b:0c:5b:e1:15:
a2:fa:e2:74:e5:fd:94:94:71:e0:37:8e:4d:ae:12:
37:ee:99:a8:a8:b0:bb:53:5a:d7:05:1a:32:6d:88:
6b:d4:0f:e6:59:80:54:cb:8c:a1:98:43:1c:97:80:
bb:e9:a6:d1:34:b4:1c:0e:36:a7:0d:d8:2a:fa:f0:
95:cf:2c:0f:3f:cd:09:9c:35:a4:9f:b3:58:63:63:
6c:e0:2e:3b:d8:50:46:54:99:d0:0d:c3:f3:2d:85:
92:fc:c8:bc:6d:c6:02:5a:99:c5:29:c5:bd:bf:72:
73:72:9f:bd:60:84:59:94:75:3d:57:0a:4f:f1:35:
bb:58:44:cb:1a:b6:d3:44:21:ee:7d:ad:16:84:c7:
f8:5d:2e:4e:16:61:cc:3b:3e:1c:38:28:95:41:74:
70:60:d9:d2:8f:9c:3a:71:62:5b:80:e3:5b:86:d5:
35:80:38:62:33:fe:7f:e6:da:6b:d0:90:a3:24:0e:
9a:68:c2:01:40:d2:b4:4c:15:a0:65:99:f9:0f:21:
e8:b8:3e:e6:a6:58:11:b3:d5:d6:55:ea:50:64:1a:
97:52:fb:86:a6:df:1e:e6:66:4a:14:9d:97:53:21:
39:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DD:CE:3C:C6:84:42:D8:B3:9C:22:A1:B7:18:8D:D6:4E:FD:FE:8E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YN3OPMaEQtiznCKhtxiN1k79_o4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:b6:fa:ec:c2:4a:d0:51:52:68:ef:b2:5e:59:05:45:18:bd:
68:72:e3:86:36:33:ca:13:07:45:e0:2b:7f:1a:9f:90:c7:13:
9e:11:25:e4:b1:c1:b9:20:84:a5:78:d9:bf:61:62:4f:d7:36:
46:2f:f0:d2:75:08:32:54:5d:8d:db:b8:c3:6c:b1:5c:5e:1e:
6e:de:39:92:3b:08:5d:e5:58:41:fe:9e:1c:80:df:46:d3:b1:
e1:4b:8f:36:58:9b:3f:bb:20:ad:df:f5:80:ba:f7:fb:0a:a9:
ad:f6:6c:f3:e6:8e:e0:ea:47:7e:a5:be:fc:58:06:3b:33:d8:
42:f4:16:f9:15:9b:97:88:e8:ee:41:77:f0:18:e0:2a:ed:95:
3e:8a:ab:8d:c7:da:1a:46:82:0c:bf:63:68:bb:ca:cb:f5:ea:
68:63:61:f6:22:ee:b5:3a:9a:b8:de:06:ce:9e:04:df:42:3f:
4d:f9:6f:86:48:a6:cb:2f:d7:65:4a:5d:07:65:31:e8:d8:d7:
e6:83:a7:83:b6:b4:dd:56:df:d1:82:c7:c6:d8:4a:9d:8c:9d:
d4:86:34:33:7e:69:25:3b:de:7e:d3:8c:bb:24:ac:9f:17:9b:
32:93:18:02:12:b0:ca:01:5a:dc:ea:dc:7d:ac:ab:b9:29:e6:
37:77:59:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:39 2025 by rpki-client