Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dKAJ7913ZiwphaswTw3Yu3mpSaw.roa
File: dKAJ7913ZiwphaswTw3Yu3mpSaw.roa (raw, json)
Hash identifier: rJdzP3In0qUVk3axGdBF2C4sw/UhOB0O68XLREBFJg0=
Subject key identifier: 74:A0:09:EF:DD:77:66:2C:29:85:AB:30:4F:0D:D8:BB:79:A9:49:AC
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E303554B6CDCB2557E996032C8CFDC9C8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dKAJ7913ZiwphaswTw3Yu3mpSaw.roa
Signing time: Tue 12 Mar 2024 01:09:45 +0000
ROA not before: Tue 12 Mar 2024 01:09:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:30:35:54:b6:cd:cb:25:57:e9:96:03:2c:8c:fd:c9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 12 01:09:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74a009efdd77662c2985ab304f0dd8bb79a949ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:42:a1:72:00:93:98:fb:52:e7:15:47:4b:
b2:59:4e:e5:8d:0c:8e:a7:00:24:9a:c3:a6:19:a1:
7a:90:50:c1:8d:d6:8c:c5:b9:73:f1:d6:f9:d9:c1:
b6:85:75:82:6a:5d:f6:e3:f7:3d:5d:63:43:0c:ca:
70:15:f3:df:4d:24:99:9e:b5:0f:0e:9f:6d:10:72:
87:cc:95:6e:ee:ba:5c:f0:a9:20:fa:cd:1d:07:08:
7e:61:1a:6b:4b:f3:bc:04:0f:59:08:14:7b:0c:99:
bd:23:56:ba:e3:bb:e2:00:c2:db:67:c3:87:3e:08:
21:39:28:56:68:40:b1:1d:23:67:9b:a8:3b:96:0d:
06:04:3b:4b:ab:c2:5a:32:92:77:cc:da:b4:5a:32:
3c:f7:10:7c:ab:0d:c2:0b:3c:a1:7b:b6:dc:27:a0:
b7:32:99:00:4b:52:d1:7a:98:54:33:45:b1:c2:a9:
09:e7:87:33:11:e0:5a:ab:78:77:6a:8a:17:a4:04:
8f:88:6d:89:3d:12:2a:a2:7e:04:2c:2a:0a:c9:49:
6b:68:e5:d8:2e:3d:8c:f3:18:49:02:ad:91:9c:dd:
28:95:6a:13:0f:f3:e8:cd:cd:91:13:b2:ce:af:96:
c1:73:52:e8:4d:f2:89:a9:66:c7:49:e4:11:68:ef:
9d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A0:09:EF:DD:77:66:2C:29:85:AB:30:4F:0D:D8:BB:79:A9:49:AC
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dKAJ7913ZiwphaswTw3Yu3mpSaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:c8:9a:e4:d6:78:21:a0:bb:39:c1:8a:19:c5:43:18:52:e9:
09:ba:1d:ce:2b:6b:5e:2b:9d:84:8b:c0:f0:3a:cc:24:1d:cb:
52:53:20:85:a6:a8:b5:74:9a:93:13:e5:36:34:ac:0f:a0:b4:
e2:76:81:c7:be:a4:b5:3f:44:bd:74:6f:4c:82:56:7c:a4:1d:
55:07:05:42:a8:6e:e5:68:9e:6c:b1:4a:d6:fb:3d:55:fa:1e:
2c:b7:2e:d7:9a:9b:fc:11:85:01:eb:50:1a:52:10:f1:c5:eb:
e7:6c:7e:8c:52:ea:6e:62:88:3f:8a:7a:b3:f3:04:98:c5:95:
68:10:da:b8:5d:12:3b:85:5e:f9:2c:d8:0e:43:92:50:7a:f4:
f9:58:f6:6d:97:b6:71:dc:d4:fb:ef:4b:90:16:8a:a8:e8:4d:
c9:81:a8:e1:2f:66:f1:bd:4b:3b:83:56:7c:b9:59:11:9a:76:
15:38:90:a7:7e:6d:3a:4c:34:6b:68:74:04:cb:4d:8f:bd:44:
8c:d5:80:91:19:58:3d:88:19:15:a4:31:e6:29:81:a6:9a:cb:
39:4e:9c:96:91:24:64:d9:66:b0:f6:9f:7d:02:11:0e:59:be:
36:be:6e:6d:88:2f:85:80:8f:70:c9:44:91:b0:ff:86:98:e4:
97:a0:f5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:47 2025 by rpki-client