Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/d4WZw5Um51Fph1-O_F7Dd76SF6Y.roa
File: d4WZw5Um51Fph1-O_F7Dd76SF6Y.roa (raw, json)
Hash identifier: /GxQSYh+/z/lTcyer9EQca1RYe/SqfCjpIsvBpoWLoA=
Subject key identifier: 77:85:99:C3:95:26:E7:51:69:87:5F:8E:FC:5E:C3:77:BE:92:17:A6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9887FD81C2E8CC7E7377880FB2E57068
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/d4WZw5Um51Fph1-O_F7Dd76SF6Y.roa
Signing time: Sat 23 Dec 2023 21:14:58 +0000
ROA not before: Sat 23 Dec 2023 21:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:98:87:fd:81:c2:e8:cc:7e:73:77:88:0f:b2:e5:70:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 23 21:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=778599c39526e75169875f8efc5ec377be9217a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:8e:66:e3:3f:f3:2e:3d:bc:ae:f8:e0:8a:
a8:de:13:62:fa:e4:58:6e:9c:c1:9e:79:6b:90:54:
fa:9e:23:e0:86:24:99:e5:55:43:79:e1:35:6f:c2:
d8:66:fe:e9:c7:5d:67:97:21:dc:c2:e0:f5:3f:49:
0a:cf:bf:6e:d4:1d:39:92:57:82:ef:09:0d:6e:96:
9b:5d:17:ad:4a:e9:34:02:e4:c5:cd:c6:e9:56:0b:
ef:c0:cd:ab:b6:27:23:eb:1e:d3:73:fc:be:81:82:
4b:1d:4e:28:a1:07:6a:74:43:4e:07:5b:ca:a9:1f:
b5:fd:cc:38:94:2e:cd:64:8b:12:45:64:cf:26:68:
b9:c6:c6:24:c4:3d:91:75:9b:9b:15:dd:7a:11:f0:
ec:26:b7:c2:f4:89:01:9e:a2:f7:2b:ff:89:d9:6b:
00:f3:ed:98:dc:e9:7a:a4:07:99:5c:8b:8b:46:d3:
a6:c9:a2:65:89:c1:92:f2:0d:5b:f1:5d:62:ed:92:
91:97:80:6c:bf:16:d8:48:aa:67:1c:ba:bf:da:05:
13:d3:66:7b:41:87:65:75:56:18:ab:b0:06:c3:2f:
2f:d8:cc:41:be:c0:78:63:84:2e:ad:77:8b:fb:6c:
90:4b:ed:be:85:dd:29:2c:98:ec:0f:17:32:1f:65:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:85:99:C3:95:26:E7:51:69:87:5F:8E:FC:5E:C3:77:BE:92:17:A6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/d4WZw5Um51Fph1-O_F7Dd76SF6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:e1:34:10:23:73:58:bd:fd:4c:98:55:bf:94:e0:f3:bb:31:
e8:87:e8:77:20:8b:b6:58:21:e4:4d:91:c4:4b:95:ac:67:24:
4a:2f:b0:04:37:89:ec:7a:4a:c1:1f:87:fd:0e:ef:f5:91:93:
82:d1:09:e8:c6:12:3d:b4:34:12:e1:45:c8:0e:f1:2f:b3:fd:
71:9a:c4:ab:8e:11:ad:72:d5:13:fb:9d:97:d2:b8:b3:cc:c2:
bb:7d:e3:ef:db:31:5c:53:51:ef:10:a4:13:e4:37:9b:13:ab:
c7:23:b9:1b:04:cd:bc:ed:0f:4b:ea:f3:35:1f:5e:d2:7a:e6:
f0:b7:92:e8:b3:0b:86:be:85:06:bd:fa:2c:49:ce:d1:7a:e6:
d4:37:79:c1:0c:cc:ca:a2:61:f7:c0:e9:a6:b6:71:ff:2b:09:
81:ba:d2:27:4f:f1:a5:f9:7b:02:61:30:83:56:44:19:59:44:
df:6c:c3:a6:82:9e:5a:2c:c9:c4:c7:13:e2:8d:ef:84:2b:ba:
fd:09:b6:11:62:62:06:2c:b3:db:f9:05:70:76:50:e2:41:c0:
a4:34:d0:38:b3:c4:a8:a6:ea:1a:f9:e8:11:23:ca:43:63:54:
fe:b5:52:0e:72:8d:c8:92:d0:56:13:2d:08:cc:5a:f8:ad:43:
fa:58:9e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:13 2025 by rpki-client