Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZPTd4RWQJzIZUSXfigJkLdwvXaw.roa
File: ZPTd4RWQJzIZUSXfigJkLdwvXaw.roa (raw, json)
Hash identifier: zNAvyXmSUEUtLnY+P3neiMfofYlhQux594hy6v87H0U=
Subject key identifier: 64:F4:DD:E1:15:90:27:32:19:51:25:DF:8A:02:64:2D:DC:2F:5D:AC
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DFDCB308AB7FCAFEFAE6AE7D19B1145C7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZPTd4RWQJzIZUSXfigJkLdwvXaw.roa
Signing time: Sat 02 Mar 2024 06:12:48 +0000
ROA not before: Sat 02 Mar 2024 06:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fd:cb:30:8a:b7:fc:af:ef:ae:6a:e7:d1:9b:11:45:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 2 06:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64f4dde115902732195125df8a02642ddc2f5dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:f2:38:de:a1:8b:81:60:f2:f3:40:0a:c6:
00:d5:85:33:29:db:29:7d:d0:1a:cc:3c:15:a4:ca:
4a:4b:c9:cd:dc:1d:12:cd:68:b0:ac:9b:5e:56:de:
11:5d:4a:a7:36:0c:39:17:e5:7c:2c:63:d3:91:b1:
57:45:e1:56:69:a3:b4:01:f6:11:fd:9a:40:ae:82:
a1:22:ba:22:2f:9e:dd:d0:7a:37:4b:32:5c:fe:e8:
46:f4:1f:4b:b7:af:38:75:73:b4:84:1f:db:3e:00:
21:18:c9:20:18:18:d7:6d:c7:30:6a:87:3b:ec:af:
fa:8c:ad:56:62:7e:70:90:a5:5a:0f:be:cd:92:56:
e8:7f:fa:c0:23:dc:8a:fb:f0:c6:98:06:95:a8:c4:
ae:1b:9e:31:98:d8:30:aa:59:8b:b8:c1:9c:af:e9:
b4:8b:05:f3:ad:d6:2a:84:df:1e:4f:ec:82:20:02:
d6:d9:7b:4b:2c:14:43:9c:c2:6e:d2:6a:53:a2:a1:
96:c2:d6:80:05:bc:26:31:05:dd:be:8d:a3:1b:be:
38:ff:6c:f4:3e:98:91:3d:fb:b1:2b:2a:d2:96:8a:
b2:20:25:c1:19:44:73:50:d3:ce:73:42:fe:ed:67:
1e:ce:2a:5f:37:c7:90:37:84:7f:ed:c4:65:61:3b:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F4:DD:E1:15:90:27:32:19:51:25:DF:8A:02:64:2D:DC:2F:5D:AC
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZPTd4RWQJzIZUSXfigJkLdwvXaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:1f:b3:fc:d5:4e:82:d5:97:86:07:65:81:fc:40:d9:47:ac:
70:a6:0f:ed:e0:2a:76:5c:f7:ea:7b:d2:14:56:2e:68:16:92:
03:b6:b5:cb:77:9f:f0:0f:e9:e4:2c:fb:96:37:43:3f:83:6d:
f8:77:ca:9e:8c:10:84:0f:55:31:e2:86:f5:47:f0:bc:ad:db:
c0:e2:ac:48:98:cb:38:c6:90:6c:9f:ee:fc:a4:22:04:ea:7d:
f6:bb:9b:c5:56:c6:fe:76:25:a1:6b:5c:54:1d:10:fe:38:b2:
ad:ca:1a:19:02:28:a9:46:2d:09:f1:f5:a1:6f:3a:9a:af:4d:
c6:b8:e5:a7:bb:7d:34:14:1e:14:69:12:9e:28:70:1c:e3:5c:
6d:43:3a:0a:01:ff:3a:7a:2c:4d:48:fb:03:92:ba:7a:c8:64:
fe:23:10:16:fd:78:02:ab:ac:27:7a:7f:74:3b:14:ba:9b:08:
d1:cf:c0:1f:d0:e4:cb:62:98:c0:83:63:75:78:cd:86:de:4b:
ed:af:7f:7b:8f:15:22:de:40:4d:8b:e2:10:f7:c5:be:c2:57:
3c:32:88:a7:e1:ea:45:e1:53:e1:26:4f:4c:ac:27:8c:77:c5:
bd:08:f6:9e:8f:b6:37:dd:44:de:cd:ea:65:44:27:6a:3c:29:
90:e5:cb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:32:03 2025 by rpki-client