Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dxpvreZgTag2eYOrR-p7KDFxrm0.roa
File: dxpvreZgTag2eYOrR-p7KDFxrm0.roa (raw, json)
Hash identifier: lJ9+LLouFTczp94mJnRckSMv6GlDfDGh/RR2chb34fY=
Subject key identifier: 77:1A:6F:AD:E6:60:4D:A8:36:79:83:AB:47:EA:7B:28:31:71:AE:6D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E50D5AF48FA621E07D4ABD10DAD03EECD
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dxpvreZgTag2eYOrR-p7KDFxrm0.roa
Signing time: Mon 18 Mar 2024 09:12:45 +0000
ROA not before: Mon 18 Mar 2024 09:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:50:d5:af:48:fa:62:1e:07:d4:ab:d1:0d:ad:03:ee:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 18 09:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=771a6fade6604da8367983ab47ea7b283171ae6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:f5:bc:81:b8:c9:56:b5:00:e9:3f:09:1c:
20:14:ad:89:1c:25:14:88:5e:40:0b:de:05:35:1b:
4e:d6:b1:d3:63:59:4d:3f:66:06:fc:5a:06:a9:57:
20:10:2b:d7:e3:e8:b0:ae:88:91:c9:c5:2a:ad:2e:
4d:18:25:18:50:ea:62:b1:c4:02:47:9b:2c:96:74:
ac:a8:10:bf:3f:ed:51:37:f2:1c:19:96:f7:59:f4:
e7:9c:0a:1f:6f:c2:6e:ea:a8:fe:66:ed:25:0d:bc:
33:81:25:72:f4:1c:61:9b:53:d1:3b:39:26:fd:1d:
88:bd:a8:e3:fe:31:5f:51:14:ac:7d:31:8a:e7:4c:
24:45:45:af:6a:21:a5:03:8f:77:12:82:0d:b4:9d:
69:40:93:b5:9f:fe:2c:fe:23:69:0d:ac:d8:fc:15:
47:1b:09:fc:ab:62:64:53:05:e1:9a:de:e7:c9:2a:
ed:8e:68:e9:35:5c:ef:28:c3:fd:c9:b8:f6:18:0d:
ba:de:81:87:74:54:cb:ca:ff:b4:19:e8:2b:ab:14:
b1:f9:58:79:df:ee:46:17:68:bb:2e:52:87:d9:0e:
40:4a:ec:ea:3b:1c:d4:24:b5:ad:1f:63:b6:dd:51:
0f:7a:90:6a:ad:3e:0c:96:13:3b:73:3d:1a:18:b2:
04:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1A:6F:AD:E6:60:4D:A8:36:79:83:AB:47:EA:7B:28:31:71:AE:6D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/dxpvreZgTag2eYOrR-p7KDFxrm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:b0:e7:9e:a3:94:0d:bb:84:24:13:a0:64:89:b9:a0:14:32:
24:b0:23:d7:27:0a:2b:bd:90:ba:7a:3e:28:f7:af:a7:85:0c:
6c:5e:81:a0:90:3e:5c:77:16:10:c4:88:a8:6e:f8:9a:a9:1b:
f8:41:f9:df:78:8b:18:d5:66:6c:e5:a0:ac:76:18:06:54:f5:
3b:e0:32:05:45:01:b2:86:e9:8c:24:0a:af:ab:1a:d9:e0:54:
33:10:f6:a1:8c:c0:1e:6b:3a:b6:16:f6:f7:61:f6:12:f4:f1:
4c:4e:78:0e:dd:e1:ff:2f:15:37:7e:91:e0:19:3b:d6:6b:5f:
cb:13:f5:85:10:9d:f0:0a:a3:b2:14:a1:25:83:8d:3c:0d:fc:
b1:d8:e1:19:1b:04:73:06:56:3b:d7:d3:6c:f0:ee:65:72:2c:
ee:d2:d9:71:04:e2:c1:70:c7:06:b7:38:f6:f9:8d:bc:3b:93:
ff:9d:89:ec:88:47:dc:bd:cb:09:39:39:ed:48:ea:bd:b1:7d:
58:6e:f3:11:55:6a:50:2e:e5:47:01:b9:64:32:2d:2d:9d:36:
4b:5b:54:78:14:61:0f:7c:b8:a4:a7:cd:73:66:59:d7:13:37:
c8:63:4b:3d:40:d8:66:d5:a7:a7:7e:d7:70:f3:c0:64:af:7d:
3b:e6:c1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:19:56 2025 by rpki-client