Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Z3_ZeQtnEQdtmPPrAZOkis8fwkQ.roa
File: Z3_ZeQtnEQdtmPPrAZOkis8fwkQ.roa (raw, json)
Hash identifier: QA6Ic4wL0YOyqFkPOFBbnrombQ6+2DCqW1PLXo2rYT4=
Subject key identifier: 67:7F:D9:79:0B:67:11:07:6D:98:F3:EB:01:93:A4:8A:CF:1F:C2:44
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D6C1BC7EECF5804159AE3A4E50947B713
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Z3_ZeQtnEQdtmPPrAZOkis8fwkQ.roa
Signing time: Fri 02 Feb 2024 23:16:16 +0000
ROA not before: Fri 02 Feb 2024 23:16:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6c:1b:c7:ee:cf:58:04:15:9a:e3:a4:e5:09:47:b7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 2 23:16:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=677fd9790b6711076d98f3eb0193a48acf1fc244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:0a:5f:95:32:c0:60:44:55:f9:f5:03:bf:
b8:03:47:02:ec:f2:ea:5d:d1:cb:dc:7e:b3:fd:e4:
ec:8a:f5:5d:eb:54:5b:9a:9f:d0:6f:e1:1d:c9:6d:
a9:02:c2:36:d7:30:ee:9e:e3:f7:6b:e9:88:f3:bd:
7f:5d:e7:f8:e8:0e:a3:f2:b5:a1:85:2e:8f:f2:f4:
ac:de:0d:d9:0d:7f:89:56:e8:b9:ec:7e:5d:56:c3:
e9:6d:e8:83:78:60:24:e4:86:95:11:ab:a7:40:45:
e7:4b:a2:83:d5:23:55:ef:67:00:ae:c7:df:24:d1:
2d:7c:a3:c5:4c:cf:7e:c9:11:74:df:62:44:a2:dc:
a5:aa:8a:25:6d:a0:c1:e9:b1:ad:83:bb:73:6e:28:
66:e1:7a:d8:17:8a:d5:c9:54:99:23:2e:8d:c2:7a:
b4:8a:50:d1:9e:16:40:76:ca:af:c4:e9:3f:2f:f7:
e2:a3:c5:4c:09:4f:79:0f:b9:b3:e8:02:60:2c:fb:
88:eb:46:9e:b1:6c:2b:76:de:28:8e:42:9b:d7:6a:
30:96:19:a6:54:f1:2d:76:7d:f2:31:e5:1b:5f:51:
00:86:77:e5:ed:51:14:59:b5:a9:4b:ab:6a:9d:df:
61:e6:50:e5:73:0a:8a:6d:4d:29:c5:df:e3:9a:2d:
ab:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7F:D9:79:0B:67:11:07:6D:98:F3:EB:01:93:A4:8A:CF:1F:C2:44
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Z3_ZeQtnEQdtmPPrAZOkis8fwkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:bf:9b:a2:94:e3:d7:04:9e:29:d3:cc:88:1e:e7:87:20:15:
27:56:c1:7c:61:26:b8:35:62:b5:50:05:2f:48:e0:1f:32:ee:
58:ef:73:0d:48:8e:86:82:e8:a9:5b:50:dd:0c:b8:79:f7:17:
52:b6:8f:b8:63:89:ce:3b:b0:8c:7c:d9:a1:15:bc:a8:c9:2b:
d9:6b:99:7d:ea:fc:16:50:90:79:81:d8:4b:17:55:a0:97:ad:
45:c1:be:96:ac:8b:d8:84:c1:d6:9e:67:dd:b5:1f:c3:58:0f:
d7:1e:d0:31:84:7c:7d:67:88:c2:d6:11:3d:1e:32:f2:62:96:
62:de:31:fb:b5:a9:05:f0:4f:f1:d3:6e:8a:38:cb:aa:c9:9b:
41:6d:18:11:ad:e8:d4:01:64:2a:4b:dc:c6:23:5d:1f:97:ae:
67:23:db:6c:81:83:4d:59:cf:79:3a:72:49:5c:6f:c0:28:ac:
3f:09:6c:9c:7f:d5:24:40:5a:c4:59:de:d2:52:70:ef:41:73:
ce:d8:43:05:2c:b2:55:8b:61:9f:0c:6d:e0:09:96:4d:37:a3:
ce:42:6a:4f:85:0b:e9:93:df:41:90:8a:53:49:85:c2:c8:5e:
ec:98:b2:cc:ef:fb:e4:c1:27:65:c0:19:a7:b6:93:b8:a5:c9:
cf:68:45:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org