Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Z6Hhje0MPGza9R5j8I0TQuYvp0o.roa
File: Z6Hhje0MPGza9R5j8I0TQuYvp0o.roa (raw, json)
Hash identifier: T5lL8lLR6LjVI8eyxV9YFjdsD5nwUBXleSFA3bA4TLc=
Subject key identifier: 67:A1:E1:8D:ED:0C:3C:6C:DA:F5:1E:63:F0:8D:13:42:E6:2F:A7:4A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CD539F9716953773D51D868DC8107D56E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Z6Hhje0MPGza9R5j8I0TQuYvp0o.roa
Signing time: Thu 04 Jan 2024 16:06:35 +0000
ROA not before: Thu 04 Jan 2024 16:06:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:d537:eb1a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d5:39:f9:71:69:53:77:3d:51:d8:68:dc:81:07:d5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 4 16:06:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67a1e18ded0c3c6cdaf51e63f08d1342e62fa74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:52:fd:5d:92:42:07:99:52:89:b1:95:e6:
dc:f8:60:97:da:ae:5a:13:8c:ff:7c:c9:bf:e1:38:
a6:01:d6:5a:82:57:27:04:f4:08:20:76:2a:0d:43:
04:1f:30:61:74:a3:3b:c2:4b:9f:ad:d4:ad:76:da:
dd:f6:ff:1b:72:33:47:d1:7a:d8:53:ef:1c:6b:36:
d4:7c:2d:20:63:cf:d2:1f:a7:54:ed:f1:65:a8:35:
14:86:99:04:ac:99:55:1a:3b:df:1a:b6:34:c5:c4:
f1:f3:9a:d9:58:de:bb:b5:e6:d9:5b:a1:94:88:5a:
34:56:89:27:2c:ed:80:4a:1c:c8:98:b2:9d:6c:87:
80:b2:9c:7d:05:19:24:e5:5e:dc:fb:95:51:8a:cd:
35:04:00:21:7c:cd:c5:6a:18:34:7c:05:8f:d4:d7:
21:3f:ed:09:06:35:86:e2:ef:e3:d6:67:b6:d9:b7:
ef:dc:21:75:7b:dc:91:29:e1:f9:2d:dd:da:18:e4:
0f:a1:97:7f:a1:48:02:9f:ae:3a:46:01:48:c7:c0:
1a:49:5c:03:5f:67:16:be:bc:72:5a:11:f8:c3:41:
c3:aa:4d:b8:85:b4:42:2c:3d:34:0a:fb:0f:f9:d4:
6e:e9:dc:8b:33:aa:3b:06:d2:9b:9a:d9:21:8d:6c:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A1:E1:8D:ED:0C:3C:6C:DA:F5:1E:63:F0:8D:13:42:E6:2F:A7:4A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Z6Hhje0MPGza9R5j8I0TQuYvp0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:82:5c:4f:52:1e:f2:97:6e:d6:53:b0:4b:39:40:1e:bb:a9:
81:25:9e:14:11:cb:09:91:1e:d2:90:fa:db:db:84:42:35:9f:
ef:5f:70:2b:4c:58:56:5c:34:cd:81:5a:ca:58:f1:a9:d6:e7:
c7:47:6d:89:80:8c:4f:ac:e6:74:a0:b5:c8:fa:c3:99:77:40:
e7:93:73:07:6c:ab:02:ec:85:2d:1f:76:81:ae:47:b1:62:0f:
81:21:bc:b6:7a:d1:fa:67:ac:c0:66:97:f6:52:d8:46:d6:98:
92:b2:1e:91:3b:71:8d:e0:93:38:aa:15:6b:21:ad:a2:e0:1a:
65:89:bb:f4:8c:ef:46:3c:7e:b5:19:71:9c:c8:f4:a6:d4:9c:
e2:83:df:b5:60:5b:e9:4d:59:06:24:92:0e:6e:7d:f1:bf:d5:
ec:7e:c2:e9:bb:fe:97:9a:64:18:2b:af:65:19:fb:53:2f:93:
9d:16:78:be:a8:38:5c:cc:c0:f9:be:c1:76:95:6b:9b:65:17:
ac:88:b8:5a:aa:d5:ce:78:b0:ba:17:12:ad:68:8a:32:ba:43:
ee:b1:9a:74:49:37:d7:1c:b2:4b:a6:ec:2e:77:37:81:ac:b0:
60:c3:57:53:8d:26:ea:5e:f0:01:d1:e4:d8:1b:7e:5c:6f:e9:
9a:b3:e6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:04 2025 by rpki-client