Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gEw6KEHQlgEZN5Vvf6QDvchq1Is.roa
File: gEw6KEHQlgEZN5Vvf6QDvchq1Is.roa (raw, json)
Hash identifier: rpNLB/id4TlPg3suwc0SE8E4ySIRIdOwyjbvc/UEyQw=
Subject key identifier: 80:4C:3A:28:41:D0:96:01:19:37:95:6F:7F:A4:03:BD:C8:6A:D4:8B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9ADB154F2971B5C975838141B8AD9BE0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gEw6KEHQlgEZN5Vvf6QDvchq1Is.roa
Signing time: Sun 24 Dec 2023 08:04:58 +0000
ROA not before: Sun 24 Dec 2023 08:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:9ada:8296/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9a:db:15:4f:29:71:b5:c9:75:83:81:41:b8:ad:9b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 24 08:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=804c3a2841d096011937956f7fa403bdc86ad48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:d6:ef:ae:be:22:e7:6d:ca:04:f9:fb:45:
43:a5:88:bc:b5:11:ce:1f:4c:3c:17:2e:42:a6:db:
cc:c1:f9:e1:45:60:d3:88:1f:c8:47:99:1e:e2:52:
a4:89:6a:50:79:3a:c0:89:7f:0d:3d:2a:e6:99:c4:
f9:8a:e3:b7:d3:aa:a6:11:56:59:87:2e:c3:ac:a0:
21:50:c8:bb:45:06:a7:02:a2:cc:59:c6:c9:75:92:
c0:5f:83:f9:28:a9:8c:ca:46:5e:9f:3e:c4:05:bc:
ff:fc:2a:3c:56:a9:c1:40:b5:05:03:a8:3a:8b:dd:
24:53:0d:b9:e4:50:c4:fd:d5:83:8e:65:a7:bb:27:
0f:9e:19:de:9b:bf:e1:3a:d2:22:d5:14:6c:e5:bd:
f2:b4:bc:6b:bb:ea:73:75:e3:d6:ef:a3:9c:fa:44:
95:19:ad:c7:0a:f8:fe:60:95:3c:ea:5c:d9:27:0f:
50:b4:35:90:27:3e:1a:e8:66:a0:7b:21:fe:6b:ef:
ae:1a:20:4a:24:fe:11:33:8b:20:d2:60:40:f4:f3:
a5:09:23:98:fb:9b:b6:7a:cc:f3:e5:87:ef:83:7f:
4a:51:7c:91:a7:b9:cf:d5:c7:87:16:7d:83:4a:49:
94:ea:ea:42:87:4d:d9:d8:5d:ae:ae:f0:1b:51:02:
c0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4C:3A:28:41:D0:96:01:19:37:95:6F:7F:A4:03:BD:C8:6A:D4:8B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gEw6KEHQlgEZN5Vvf6QDvchq1Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:d7:36:4e:ac:d3:07:e8:8c:6f:d2:76:ef:3e:30:7f:7d:d1:
06:6d:1c:be:d1:36:59:d5:23:da:a4:9a:48:36:4e:8f:a7:d0:
a1:79:c9:c3:d3:66:f8:cf:ed:bf:36:39:00:ef:44:9d:c6:fb:
8c:1f:29:86:a5:5b:ad:13:31:e5:b8:b5:54:a5:f1:e8:e5:2f:
d4:71:4d:fc:59:25:cc:ff:3f:0c:dd:cd:3f:8a:3d:28:8f:7b:
dd:a4:c0:90:f4:29:ec:9a:bb:b4:9b:7d:34:5e:19:4e:25:8c:
9c:b2:36:5a:0c:bb:2a:e0:e7:50:79:92:c6:09:64:16:9f:8e:
cb:4c:46:14:0b:9c:62:c0:96:d8:a6:1c:19:2c:ac:96:19:36:
3f:94:27:87:23:38:8a:6e:d0:54:85:5b:04:12:e9:41:f7:a1:
ed:9d:6a:ac:b8:31:94:17:40:7c:b8:59:7a:da:e4:7a:12:a9:
ce:d9:8e:c1:3b:c7:71:4c:98:36:8c:a0:b6:b8:c8:c6:f6:80:
03:21:99:c7:af:10:38:60:d4:db:59:1c:47:fc:f3:c5:e3:0b:
8b:01:f2:ee:22:59:01:49:dc:8f:60:a0:5d:26:a5:70:48:5e:
e0:5d:2a:94:a3:b1:7e:86:ea:91:27:44:4c:c4:55:94:bc:00:
2a:f4:e3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:57 2025 by rpki-client