Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZKK2c1s9v8288pJU-HAQEg8W0Ng.roa
File: ZKK2c1s9v8288pJU-HAQEg8W0Ng.roa (raw, json)
Hash identifier: kmcC3Ob4UWp5BfQMk6r1sB7vO9IWtOMRQIIIzuY+xBA=
Subject key identifier: 64:A2:B6:73:5B:3D:BF:CD:BC:F2:92:54:F8:70:10:12:0F:16:D0:D8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D3F01FDF7F994737E3A09F4B3C6F18BD4
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZKK2c1s9v8288pJU-HAQEg8W0Ng.roa
Signing time: Thu 25 Jan 2024 05:05:11 +0000
ROA not before: Thu 25 Jan 2024 05:05:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:3f01:374b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3f:01:fd:f7:f9:94:73:7e:3a:09:f4:b3:c6:f1:8b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 25 05:05:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64a2b6735b3dbfcdbcf29254f87010120f16d0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:e8:b8:14:02:80:8d:3c:ae:1e:cc:2d:30:
59:3a:00:eb:9a:3e:e5:a2:c4:c7:06:20:11:f9:cc:
58:ff:4c:11:8e:c4:b7:4d:fe:b2:ca:94:db:58:45:
13:9e:50:d5:d3:b6:b0:84:91:c4:8d:5b:0b:6e:59:
f9:d8:00:fc:ca:f6:29:15:06:3d:2a:ea:90:f0:f0:
b7:a1:3b:c3:2d:a1:c5:51:12:9f:d1:47:b6:55:64:
e6:fb:eb:37:84:fc:6a:21:51:e0:ba:f0:c9:ee:1d:
c9:7f:df:8d:9d:59:1a:7d:f3:39:51:4f:df:c7:ec:
a6:91:4d:ff:6a:9b:4e:c4:e4:de:55:0b:da:43:88:
76:51:bd:2f:a6:17:6a:de:58:72:e3:41:bf:b3:a3:
3a:bd:0b:2f:a1:de:ad:a1:42:61:56:78:bd:34:19:
a4:8a:4a:2e:92:ad:5a:f7:7d:64:77:ef:e5:77:9b:
d3:7e:73:d4:ac:3c:2a:72:09:f2:3c:a3:70:c2:57:
6c:2f:75:ff:7f:ab:b4:44:67:49:54:c5:79:c6:d9:
fd:a9:25:6e:63:a4:f2:73:b6:3d:07:b8:db:68:70:
2a:f7:6f:c1:21:09:d9:12:6a:19:49:b8:b0:8c:66:
3f:fb:bd:32:9e:f9:d1:70:ac:1c:cb:96:aa:c4:14:
12:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A2:B6:73:5B:3D:BF:CD:BC:F2:92:54:F8:70:10:12:0F:16:D0:D8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZKK2c1s9v8288pJU-HAQEg8W0Ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:1a:30:48:a9:99:d2:85:70:09:62:02:21:70:08:f1:84:ec:
42:6f:5d:df:84:e6:7a:c9:eb:9b:fe:ba:45:bd:94:d1:1c:24:
12:ed:5b:92:84:1e:99:95:c0:86:d4:a4:56:f3:a8:57:87:50:
a1:32:2a:98:e5:26:e8:3e:df:60:13:fa:3c:f4:38:cd:12:51:
91:50:6c:3a:01:69:ce:98:79:ed:8c:69:96:bc:66:5e:68:1d:
da:8a:e8:51:b6:7c:75:86:1f:c8:61:93:b3:2c:86:1e:52:a4:
4a:18:74:35:91:32:4b:1c:f1:8c:07:17:38:3a:ce:6b:38:0f:
8e:29:9e:32:93:b8:ec:bf:40:08:73:96:e3:40:d4:df:53:6f:
30:d5:98:b0:64:e9:86:cc:80:ba:19:21:45:bf:34:c6:2a:f9:
f1:7f:71:ab:a2:87:15:b4:a4:32:64:af:08:2f:8e:4c:d8:01:
7d:0f:d6:ba:c5:51:11:04:27:5a:dc:4d:85:57:70:be:2e:a5:
93:86:9c:75:32:22:c8:9b:0a:dd:78:0c:1d:66:2f:32:f7:bd:
af:21:c7:9b:d5:32:0d:3f:a9:06:b8:00:41:58:5f:2e:45:eb:
0c:7d:40:fd:5c:86:fe:57:b4:e3:eb:7c:99:5c:c9:54:73:ef:
48:f4:09:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:52:06 2025 by rpki-client