Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gKheiYYNf7Rqd_IqoMnoz2HlMMY.roa
File: gKheiYYNf7Rqd_IqoMnoz2HlMMY.roa (raw, json)
Hash identifier: x2lpKcEUqgX2S4Rml5pRUEXiTSMO1vZri9/lNgL/jj4=
Subject key identifier: 80:A8:5E:89:86:0D:7F:B4:6A:77:F2:2A:A0:C9:E8:CF:61:E5:30:C6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E1896854918F055D1903A9E8F625AC00E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gKheiYYNf7Rqd_IqoMnoz2HlMMY.roa
Signing time: Thu 07 Mar 2024 11:05:01 +0000
ROA not before: Thu 07 Mar 2024 11:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:1896:2c49/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:96:85:49:18:f0:55:d1:90:3a:9e:8f:62:5a:c0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 7 11:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80a85e89860d7fb46a77f22aa0c9e8cf61e530c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:25:1a:68:8d:48:fe:72:23:d9:1b:08:00:
16:64:c4:37:1c:f3:be:ed:79:71:d0:4b:71:bf:a0:
fe:e9:0d:06:68:a4:e0:82:54:ec:f0:ca:23:60:34:
1b:b5:67:f8:cc:d0:26:08:a1:38:26:ea:56:35:bb:
99:08:31:e3:1d:57:52:2b:ac:68:08:27:cc:82:40:
fa:7a:54:28:80:8e:da:53:a5:4f:ea:87:da:fb:c9:
0f:9d:74:03:7a:2c:e8:67:40:88:e3:94:97:39:51:
36:8c:96:15:ef:1b:8d:ff:3e:68:63:3c:72:7d:4c:
b1:b1:31:20:9d:98:76:31:3a:0d:ee:13:44:44:8f:
db:54:80:88:40:f2:50:5f:8a:e0:40:0c:36:14:f8:
a1:a3:f1:21:e7:dc:76:5a:df:e0:0b:0a:3c:6f:21:
6c:dd:af:f2:58:3d:f3:fc:b0:8a:a9:3c:bd:db:65:
85:d7:ef:39:ea:a0:79:88:6b:ac:f9:50:6e:fd:29:
9a:e1:25:14:4b:51:b9:a0:d2:e7:66:d6:b1:eb:13:
03:a3:02:3c:6c:20:4e:4a:92:fe:98:a6:11:d7:1d:
a8:3b:5c:18:b0:63:42:32:87:1f:77:28:73:62:1e:
37:a0:f5:8c:1d:4f:06:75:09:fc:47:9f:74:a8:de:
4b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A8:5E:89:86:0D:7F:B4:6A:77:F2:2A:A0:C9:E8:CF:61:E5:30:C6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gKheiYYNf7Rqd_IqoMnoz2HlMMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:69:7f:d4:d2:54:c7:0c:d4:66:38:3c:50:3c:71:0e:7a:e1:
19:f9:dd:06:f9:e1:aa:4f:e7:75:18:99:6c:ea:93:78:1e:14:
f9:05:76:ae:33:01:a2:d2:f3:20:4a:21:8e:66:06:b9:2a:1f:
12:1f:a8:16:14:6f:7e:c2:4e:84:28:37:14:dd:9f:29:45:3c:
de:44:eb:67:75:22:b8:c2:ea:66:c7:6a:72:01:49:32:74:07:
cf:3a:e2:35:fb:23:2b:3b:6d:3f:74:42:1e:7c:30:5e:33:e1:
ec:e4:49:dd:8b:24:46:ed:ab:41:56:c4:a5:a8:d7:b5:c7:32:
0f:11:29:e9:37:4c:7f:af:35:c4:14:80:9b:63:45:1f:a4:79:
19:df:a1:de:29:d4:9e:18:c3:f5:85:9c:d8:3a:a7:8e:4e:3e:
9b:da:4b:13:db:d9:b0:cc:c9:93:68:e5:10:34:ec:6d:35:f1:
b7:6a:c5:13:c8:9c:dc:3f:fa:20:25:87:a4:e6:3b:e2:ef:78:
41:9c:45:94:ec:f9:d5:1d:a0:7d:f8:23:c3:d8:42:f8:37:8d:
db:c1:ba:f3:c1:99:ca:47:4c:22:fa:69:43:0b:7a:3a:5d:e4:
ac:1c:1c:49:90:8a:01:32:a5:f8:77:ab:5b:7d:63:bb:da:93:
0c:38:a0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:33 2025 by rpki-client