Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/__Vi4q8I7RNlxyXyMGOHGFGduG8.roa
File: __Vi4q8I7RNlxyXyMGOHGFGduG8.roa (raw, json)
Hash identifier: 8LrRyIvb0AX9aJ4Lw0CvWk1Y8i/mczq96DDQw9ffRHo=
Subject key identifier: FF:F5:62:E2:AF:08:ED:13:65:C7:25:F2:30:63:87:18:51:9D:B8:6F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D61286EAA451F851F902E665382C6041B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/__Vi4q8I7RNlxyXyMGOHGFGduG8.roa
Signing time: Wed 31 Jan 2024 20:14:16 +0000
ROA not before: Wed 31 Jan 2024 20:14:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:61:28:6e:aa:45:1f:85:1f:90:2e:66:53:82:c6:04:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 31 20:14:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fff562e2af08ed1365c725f230638718519db86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:82:90:6a:e9:6e:8a:ad:8d:12:97:ee:d8:
e6:0f:6d:46:b3:17:53:e1:8b:22:d8:4f:50:51:ab:
e7:d4:e4:18:26:fa:cd:c6:26:7f:99:c0:e9:64:ba:
57:8d:4d:83:1f:10:4b:4f:64:e9:d2:6f:e2:05:23:
14:13:79:bb:14:56:24:ce:26:60:24:ce:7e:3f:53:
d4:88:1e:80:2a:34:84:61:62:50:5e:24:bf:73:90:
05:dc:46:83:66:28:41:19:b6:52:9a:52:09:4e:f6:
f7:39:72:66:aa:54:a5:db:ce:cf:23:47:16:b5:b3:
e8:48:24:f7:35:f2:cb:e8:8c:ba:6e:66:71:21:02:
bb:9c:da:03:cb:0e:3c:5b:5b:a0:10:a8:96:bf:b0:
64:31:e4:0c:c1:3a:fc:54:6a:1e:4c:ed:53:ea:e1:
78:c4:5b:e3:5e:67:7a:b2:6e:1b:2d:c9:ec:51:16:
45:ed:f0:7a:f0:e4:7b:53:9f:1e:87:2c:a5:3e:a0:
e6:c3:35:fe:bd:21:65:79:10:cd:b4:82:5b:d8:ba:
f0:08:8f:5a:83:87:45:6c:dc:ad:18:2d:78:80:ec:
38:1d:86:86:46:45:01:a3:fb:45:b4:5d:d9:6d:3e:
04:74:0e:b8:9e:92:57:fd:30:c1:18:63:83:61:5d:
2a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F5:62:E2:AF:08:ED:13:65:C7:25:F2:30:63:87:18:51:9D:B8:6F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/__Vi4q8I7RNlxyXyMGOHGFGduG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:97:dc:88:98:36:ee:98:71:32:cd:12:b9:46:1f:80:78:6c:
05:84:69:25:1f:6b:29:17:34:ed:31:6f:52:f2:6f:dd:7a:0b:
ef:2e:f9:1c:5c:35:65:e2:bc:1b:2c:68:e4:9c:5d:16:7c:02:
51:fb:8b:ab:58:19:e5:d5:a7:85:ec:28:f7:e8:44:16:26:47:
36:17:26:b4:78:f6:96:3a:b9:85:61:16:55:e0:a8:18:a8:2f:
4c:90:f7:84:17:18:25:ca:f6:48:47:8d:c4:9e:92:53:23:77:
59:cd:c4:3f:5a:c5:87:dc:82:58:24:72:9f:c3:5b:17:12:35:
4e:60:8d:1d:3f:28:e1:14:72:68:3b:39:66:3a:8b:59:44:ff:
de:de:5b:72:ba:be:c4:54:5f:d1:2c:90:da:e5:cd:b9:b3:bc:
71:2e:8a:0d:43:f7:40:6b:19:49:2e:08:93:33:28:26:fe:61:
40:30:30:9c:6c:94:b4:d7:85:97:ee:45:86:76:78:90:08:03:
62:2a:a3:22:50:11:b8:a3:10:ec:16:3c:47:0b:a7:fc:55:81:
74:42:aa:2e:9d:84:79:76:06:86:46:77:50:37:b1:f6:2c:59:
57:24:b9:38:40:22:06:32:ce:b0:4f:5a:83:2c:1e:eb:64:ac:
71:b7:32:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:09 2025 by rpki-client