Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dLoXMtQi7CBIbTt9-a8-SVzmPEU.roa
File: dLoXMtQi7CBIbTt9-a8-SVzmPEU.roa (raw, json)
Hash identifier: +b87lJCteKNV8gcu+stwYEb3DPJxy+OHSzUi0eD00tU=
Subject key identifier: 74:BA:17:32:D4:22:EC:20:48:6D:3B:7D:F9:AF:3E:49:5C:E6:3C:45
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EDD9A16E83FEF10FE24CA14A4A65A7977
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dLoXMtQi7CBIbTt9-a8-SVzmPEU.roa
Signing time: Sun 14 Apr 2024 17:14:06 +0000
ROA not before: Sun 14 Apr 2024 17:14:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:dd:9a:16:e8:3f:ef:10:fe:24:ca:14:a4:a6:5a:79:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 14 17:14:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74ba1732d422ec20486d3b7df9af3e495ce63c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:30:29:be:5d:7b:7e:b9:c0:55:cc:fd:69:
43:a3:93:10:28:f9:eb:7f:46:29:b2:62:e8:33:5a:
b4:09:47:d5:d2:f8:18:73:d4:e8:4a:c1:d3:8e:17:
6a:98:72:35:98:c9:47:e9:ca:70:55:7f:7b:60:cc:
48:25:3f:6c:0a:c5:db:e8:5f:be:b7:a1:41:a6:58:
5b:81:6f:79:5c:88:40:75:3f:2a:42:e8:92:e3:27:
10:1a:73:a7:57:d3:3c:e5:94:08:8a:2c:fa:55:29:
c2:53:21:ea:95:62:10:d9:34:9d:43:12:94:fb:10:
f6:38:8a:b9:25:d4:b3:db:36:03:e0:4f:03:ed:bd:
1c:f5:0f:1f:f8:e5:97:0f:8e:05:d0:c4:6b:b1:f4:
9d:4c:47:90:3a:f1:fe:b7:50:7d:66:f5:58:4c:1c:
42:5f:65:ef:8c:a8:01:4f:52:b5:dd:0e:66:fd:cc:
b1:ad:42:08:9c:9c:ef:db:b2:81:93:4a:1d:1a:bd:
8e:96:79:a2:80:4a:73:07:f0:59:2d:5a:b3:d7:d8:
7f:01:7e:b0:af:0d:78:aa:c4:89:d9:b4:28:94:72:
f3:d0:73:97:de:4d:e2:ca:7f:ed:e2:df:16:06:af:
23:2d:18:51:53:41:cf:9c:29:d6:e8:fe:3d:a2:4c:
1b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BA:17:32:D4:22:EC:20:48:6D:3B:7D:F9:AF:3E:49:5C:E6:3C:45
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dLoXMtQi7CBIbTt9-a8-SVzmPEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:d5:91:e1:6f:dd:8d:74:59:af:4a:39:3b:fa:30:a5:a8:45:
84:fe:c7:c9:a4:34:3b:0e:7c:07:f5:d0:0a:0a:95:f8:1a:8d:
33:0c:9f:8e:9a:71:c7:fa:78:7f:37:2b:a3:91:ff:92:85:94:
87:1b:77:24:a6:33:05:32:6f:80:ab:53:40:89:5f:0e:06:e3:
27:4d:a6:52:8d:ae:ad:27:f8:51:71:a0:b5:53:0e:24:ff:31:
29:62:91:fc:77:fe:cb:7c:af:6e:d6:2e:08:b8:e3:8a:db:0b:
e5:ec:56:2b:5f:2b:b4:6f:96:26:65:35:1b:a3:a2:84:61:b8:
16:7b:b0:5f:14:55:5b:c2:a7:cd:e7:51:ed:7a:35:0e:f3:72:
ab:7d:d0:3d:e9:e7:ee:39:ef:7c:24:3d:f9:c1:eb:49:07:e0:
6a:92:73:eb:ca:f0:ad:61:24:06:33:ac:85:1b:d1:59:44:a8:
e1:9f:f9:0c:e8:68:a8:73:6a:bc:1a:52:9a:c1:f4:74:7f:8c:
5a:33:88:7f:9b:84:92:cf:15:e1:2c:fb:17:4e:85:40:80:98:
78:39:46:60:1b:7c:65:0a:3f:13:e5:72:78:7f:89:ca:2f:04:
a5:9a:c9:50:fb:32:4b:5a:42:65:5d:6f:8b:a5:ca:ba:fb:85:
65:61:0b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:39 2025 by rpki-client