Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Zv-1j0mRw84ZjRPNPV8wGn_pgd0.roa
File: Zv-1j0mRw84ZjRPNPV8wGn_pgd0.roa (raw, json)
Hash identifier: miv322NbcMtVrZ2dtuZDPFP7NLmRzUKVAbyT387Nzt0=
Subject key identifier: 66:FF:B5:8F:49:91:C3:CE:19:8D:13:CD:3D:5F:30:1A:7F:E9:81:DD
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D90C96AB8195B1405900C139E75F22C08
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Zv-1j0mRw84ZjRPNPV8wGn_pgd0.roa
Signing time: Sat 10 Feb 2024 02:12:15 +0000
ROA not before: Sat 10 Feb 2024 02:12:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:90:c9:6a:b8:19:5b:14:05:90:0c:13:9e:75:f2:2c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 10 02:12:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66ffb58f4991c3ce198d13cd3d5f301a7fe981dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:59:1f:98:3f:10:da:24:8c:cf:88:3c:bf:
8d:c2:44:0c:40:79:f3:d0:86:fe:d3:59:be:fb:a8:
51:4c:6e:67:36:88:b0:7a:a0:1b:3f:a4:9e:6c:6d:
5f:97:38:06:53:9d:a2:a7:0b:e2:9d:c3:62:ee:18:
47:f8:b5:98:28:c5:d4:d4:03:54:06:e1:7a:1e:bc:
33:eb:e7:7f:7a:3d:6f:df:44:51:0b:c3:83:3a:42:
78:08:9e:31:38:12:2a:c8:9a:73:d8:ef:9f:4d:21:
0a:13:fc:ec:76:09:2c:34:6b:45:18:7d:a6:54:80:
6a:67:e0:2e:46:7d:75:ba:fe:72:e5:64:3e:73:08:
4d:c1:7c:3a:31:00:32:06:7b:ad:56:1a:09:8b:4b:
d6:f4:93:4b:2a:2d:d0:9c:87:db:34:e9:86:b2:0a:
69:bb:e3:82:44:46:29:b7:07:93:a9:45:cc:b7:34:
d3:29:82:60:2a:da:aa:bc:93:a8:31:53:0b:70:a3:
e0:f9:13:c1:27:ae:d5:6b:40:00:f2:11:ea:da:6e:
e8:da:e4:0f:2a:e0:78:68:32:d2:16:f9:6c:59:b4:
a0:3b:eb:57:db:f0:10:0c:f3:49:f6:2d:7b:cd:82:
0b:83:ad:59:16:70:2f:1f:be:bc:50:04:14:9b:f5:
f2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FF:B5:8F:49:91:C3:CE:19:8D:13:CD:3D:5F:30:1A:7F:E9:81:DD
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Zv-1j0mRw84ZjRPNPV8wGn_pgd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:85:eb:34:2d:8d:49:2c:ca:77:3a:65:94:cc:cb:ea:2f:22:
c8:c7:34:87:0e:9c:5e:23:b8:ee:88:f0:e1:8e:0d:ee:34:87:
0e:4c:92:f7:c7:f8:8e:7d:99:93:79:4d:87:21:3f:9e:3f:09:
af:e5:05:99:ca:13:4f:16:24:21:41:6b:ba:97:a5:6c:ae:86:
9b:bf:ed:ec:72:5a:ce:d5:9e:c9:56:c1:fb:15:3a:ef:71:15:
18:16:e3:80:e4:7a:60:c8:34:aa:fb:21:70:76:47:cd:cb:fc:
f0:18:fb:ee:59:d4:b8:2e:e2:d3:22:4b:40:8c:5b:10:e9:b7:
89:63:1b:3b:5a:a1:ca:7a:02:dd:94:78:80:c0:8a:b3:8e:75:
06:d3:5f:b2:0a:a3:a8:d2:08:bd:de:5f:f8:49:5f:0f:7c:2a:
c8:1c:68:6e:ab:ec:b0:76:f6:5d:40:d9:1b:e3:bf:ee:38:5f:
6e:e1:7b:b8:29:dc:a6:16:fa:8a:04:67:82:43:33:3a:8e:bf:
30:7e:e5:21:68:61:e4:32:89:2e:b4:b8:4e:de:c6:80:80:9b:
ca:53:b0:71:73:3a:11:34:41:a8:15:0a:ba:da:33:81:8f:19:
d0:d8:21:1b:aa:86:04:43:80:4c:84:ff:54:77:74:d4:e4:09:
27:63:18:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:51:31 2025 by rpki-client