Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cSciE7YZ000X2fc80Qe3dlMCD-M.roa
File: cSciE7YZ000X2fc80Qe3dlMCD-M.roa (raw, json)
Hash identifier: 0eoY3xJ1wWnBVPTU75u/4IuIJ5q+mLlPkEGVvFxH/t0=
Subject key identifier: 71:27:22:13:B6:19:D3:4D:17:D9:F7:3C:D1:07:B7:76:53:02:0F:E3
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE0690537DF34F3864D59718544811842
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cSciE7YZ000X2fc80Qe3dlMCD-M.roa
Signing time: Sat 06 Jan 2024 20:13:48 +0000
ROA not before: Sat 06 Jan 2024 20:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e0:69:05:37:df:34:f3:86:4d:59:71:85:44:81:18:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 6 20:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71272213b619d34d17d9f73cd107b77653020fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8d:e3:25:22:cc:fc:13:39:99:c5:e9:15:e3:
ea:21:34:2e:04:95:39:9d:09:02:e7:ec:5a:db:69:
a2:ec:b4:f2:31:f1:b7:7f:d5:74:e1:15:7b:4a:1c:
62:75:f0:4e:97:84:46:6b:36:66:75:f4:86:08:8a:
8d:5f:3c:1b:86:d1:00:62:de:38:1d:e5:67:46:51:
33:b3:14:e6:d4:4c:b6:82:2b:95:5f:ca:f8:2a:cd:
76:db:e3:74:1a:ea:76:75:19:8a:ff:4f:58:35:4c:
ba:9c:8a:35:d2:1e:1b:19:50:d7:37:2c:0b:81:30:
33:66:0b:d7:e3:7f:07:00:2c:56:d9:f7:d7:d0:2b:
02:ab:ad:13:9a:3c:10:13:c1:d6:18:5c:a1:31:3d:
02:86:50:b3:af:a1:5a:13:ef:57:db:a1:16:eb:6e:
6c:7d:25:14:db:7b:38:a6:bb:35:52:c4:2f:fe:15:
bf:ee:34:67:71:75:77:fc:53:6c:05:86:d9:4c:c0:
ff:9e:81:88:31:98:a8:2b:02:85:89:8b:e8:21:d2:
2c:a0:78:24:10:e6:fb:7d:59:11:6e:b8:c0:e9:f5:
7c:d5:d2:a9:fe:e6:41:b5:28:85:c5:c6:13:59:55:
4f:d6:52:33:1b:54:0c:c5:53:1b:67:72:1a:ec:2c:
26:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:27:22:13:B6:19:D3:4D:17:D9:F7:3C:D1:07:B7:76:53:02:0F:E3
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cSciE7YZ000X2fc80Qe3dlMCD-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:83:41:3a:02:55:31:70:9c:8f:8c:97:18:60:e6:9f:ec:a8:
1f:cb:31:77:65:1e:87:81:80:65:af:7c:24:f6:92:14:da:8b:
8b:56:7e:62:ca:ee:61:9c:65:e8:c5:47:1b:69:b6:21:aa:a2:
9c:ac:b1:eb:84:c3:79:b5:af:b2:7a:5e:53:d1:c9:4d:ed:e6:
d5:52:b0:3d:95:9a:42:53:61:ce:a5:3a:5e:4c:16:4d:80:88:
93:53:d4:23:14:1d:2f:be:e3:3b:a3:99:cb:fd:e3:98:94:6b:
e4:59:e1:b8:27:64:bb:db:42:29:0c:c7:29:70:af:35:13:b3:
42:ba:ea:10:88:da:37:95:84:ee:8c:44:f7:5c:a3:68:47:5b:
db:70:e8:05:e3:06:06:2f:2f:cb:d4:bc:40:07:47:03:87:ab:
d8:ad:3d:6b:d7:93:08:bb:41:c0:54:a9:4d:e6:cb:a6:56:dd:
d1:59:5c:f8:bf:b0:a0:21:4c:95:e0:c2:f1:58:fe:d3:b2:3c:
cb:60:20:7c:12:38:06:49:e9:65:e6:31:ff:df:91:2c:ff:fb:
77:41:9e:7e:8e:ed:ab:9e:a5:95:2c:a8:9f:ec:de:05:03:57:
e9:f4:51:c0:9e:a8:39:ef:1e:8b:0b:a5:e8:f8:de:d7:8a:91:
5f:52:31:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:59 2025 by rpki-client