Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/a92tVjepq7Q5DG3yUkewjMzQFMQ.roa
File: a92tVjepq7Q5DG3yUkewjMzQFMQ.roa (raw, json)
Hash identifier: m54hFgHg0HuHjH6uqDz2t5uf1YT82kykVUaP2k4KhMk=
Subject key identifier: 6B:DD:AD:56:37:A9:AB:B4:39:0C:6D:F2:52:47:B0:8C:CC:D0:14:C4
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E72BBF8B00A2BC1CF687511973619C384
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/a92tVjepq7Q5DG3yUkewjMzQFMQ.roa
Signing time: Sun 24 Mar 2024 23:11:45 +0000
ROA not before: Sun 24 Mar 2024 23:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:72:bb:f8:b0:0a:2b:c1:cf:68:75:11:97:36:19:c3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 24 23:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6bddad5637a9abb4390c6df25247b08cccd014c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:51:e9:dc:25:c2:a9:99:cc:fd:8b:af:5a:
51:57:95:73:f7:31:f6:52:c4:13:4c:be:72:97:ee:
bf:4a:c9:da:d4:bb:26:50:1e:7a:80:35:62:b5:30:
02:39:f5:98:a8:78:80:1c:de:f0:c3:5a:ab:b4:9d:
c9:28:03:bb:a9:fb:46:a4:72:da:65:f3:96:98:97:
9a:b3:9d:ba:42:89:19:cd:f2:f2:77:ad:df:29:17:
cf:53:86:24:50:7f:ef:ec:ec:f7:9f:04:b1:42:82:
5a:aa:2b:c8:68:e4:62:79:3d:10:d5:70:73:cb:e8:
d7:01:e9:82:49:9e:47:87:89:3b:0d:47:8a:9d:fd:
5a:79:77:e3:70:60:e7:61:6d:66:59:4b:97:c5:cf:
24:5a:41:77:8b:61:3a:2b:fc:69:aa:33:e1:97:fc:
f4:55:3d:bc:cd:36:14:28:4c:68:e5:eb:8c:c9:fb:
d3:8a:c0:31:f0:18:6d:87:db:b3:82:6e:44:bd:91:
51:41:06:de:77:e9:7f:33:d3:84:ac:04:22:2e:18:
1d:91:27:b8:c8:38:c9:9a:3d:54:1c:7f:a2:2f:85:
51:bb:4e:a0:4a:7d:bd:88:c6:f2:5a:23:6f:2b:bc:
5e:7c:8d:c3:4f:b9:aa:46:3a:0a:4d:0b:9d:a1:49:
2b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DD:AD:56:37:A9:AB:B4:39:0C:6D:F2:52:47:B0:8C:CC:D0:14:C4
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/a92tVjepq7Q5DG3yUkewjMzQFMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:51:b0:f2:72:a9:d2:86:85:43:a7:64:25:8c:52:58:79:8a:
ef:8a:95:86:53:44:e9:1e:08:d2:d5:a5:e7:69:88:e3:9f:ab:
e5:e2:95:ef:dc:84:08:f0:16:1c:46:aa:35:ce:38:5c:f7:4d:
79:34:af:28:77:ff:86:d9:67:a5:3d:95:ce:e3:bf:2d:b3:ea:
e0:53:b0:db:ee:b7:6e:1f:df:91:90:c5:4e:f4:6c:3e:4a:f1:
20:c3:3d:f9:f1:0f:be:e6:e0:30:65:06:8a:1b:90:b5:a7:5f:
37:6b:db:84:4d:3a:49:be:e6:5b:86:9d:e4:cd:31:2f:b6:d7:
c2:27:ba:a2:19:99:26:aa:d6:22:4e:66:5f:4a:88:b9:d9:01:
34:5f:5e:0d:82:3e:d9:5d:b9:d0:2d:ce:00:be:fe:89:b8:07:
63:74:33:be:93:ff:b0:5a:18:09:40:97:e9:5c:de:0f:c6:c6:
68:68:84:40:36:1c:98:6a:4d:9d:a9:d5:45:40:02:99:01:23:
93:66:db:f1:28:89:01:6e:10:1f:be:a4:e7:25:ed:52:fd:6b:
a6:88:8b:56:32:44:51:8c:10:68:d5:a3:cf:b7:a8:7b:14:9b:
79:7a:83:f6:85:ed:a2:8d:12:34:39:6b:09:44:f9:9b:b2:59:
0a:f2:8d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:31 2025 by rpki-client