Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gzAUb90joalqkj6CrHKZTC7NfIA.roa
File: gzAUb90joalqkj6CrHKZTC7NfIA.roa (raw, json)
Hash identifier: p5hKTALxgPwD1ZetI+07LxBszbohBOPMmOtd/IemV4Q=
Subject key identifier: 83:30:14:6F:DD:23:A1:A9:6A:92:3E:82:AC:72:99:4C:2E:CD:7C:80
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E46B8935903FE4DD60A1EBE28D97FD99F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gzAUb90joalqkj6CrHKZTC7NfIA.roa
Signing time: Sat 16 Mar 2024 10:04:45 +0000
ROA not before: Sat 16 Mar 2024 10:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:46b8:12e1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:46:b8:93:59:03:fe:4d:d6:0a:1e:be:28:d9:7f:d9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 16 10:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8330146fdd23a1a96a923e82ac72994c2ecd7c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:99:86:4d:8c:c3:3e:32:5b:2a:d1:50:0f:09:
3b:71:a8:da:99:8d:c2:2d:1b:ec:90:56:03:df:8f:
41:ac:ff:34:6e:f4:8c:36:71:d7:45:71:9a:9b:6c:
ae:a2:b7:8d:d0:a9:1c:aa:97:7c:04:31:93:7b:63:
7a:ec:09:30:96:a5:c0:49:02:37:a6:71:77:f3:46:
6b:4b:b8:22:95:dd:0d:1c:77:27:61:5f:2b:9e:92:
fd:4a:bd:70:73:46:22:da:77:1b:c3:c2:8a:bf:1e:
d7:03:9c:69:35:93:4c:2c:9f:75:7c:0f:d2:59:9c:
68:cf:d6:d8:07:22:ec:24:c7:4e:89:57:e3:8e:5f:
69:1f:3e:58:d5:ca:72:f4:2d:17:a8:44:1b:18:b1:
2c:e3:c3:46:7f:d5:e5:3b:cd:d9:33:da:6f:61:f2:
f2:1f:b4:8a:d5:e5:f3:b4:8c:cd:17:bc:14:58:c3:
40:52:fa:ac:13:9c:32:4e:08:ac:10:bb:9b:92:54:
cf:4e:35:3e:ad:4c:f8:73:67:1f:36:e2:ee:8b:de:
88:26:3c:a8:20:9e:d5:15:9e:8a:86:61:c9:73:51:
f0:94:fd:44:3c:a8:54:4b:96:7d:4a:9f:1a:73:b5:
b4:b8:bf:ac:34:2b:44:2c:92:ca:d9:38:e6:1e:55:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:30:14:6F:DD:23:A1:A9:6A:92:3E:82:AC:72:99:4C:2E:CD:7C:80
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gzAUb90joalqkj6CrHKZTC7NfIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:90:0d:71:60:aa:04:82:96:ba:cf:db:df:9a:88:e5:bb:68:
31:0d:50:31:a5:a9:ab:88:17:16:fc:c4:44:92:75:d4:5e:5c:
3a:76:f7:d3:54:1d:00:bf:1f:96:84:10:76:c2:46:59:c8:74:
f8:d0:68:19:e1:9d:c4:46:1e:e3:db:70:6e:3d:ff:19:0d:d2:
35:91:5f:ab:b5:fb:02:64:82:4f:71:1f:c1:6c:ae:bd:db:b0:
2f:3f:00:1e:64:b3:1b:fd:48:89:90:b3:93:d8:2b:f8:fa:c1:
49:fc:46:4d:3d:25:31:8e:92:0d:28:a7:a6:9c:6d:d1:6b:64:
71:4b:da:0d:0d:d9:8f:76:e7:08:18:81:e0:89:bd:f7:c9:95:
a1:d8:94:b5:23:7e:86:92:d5:bb:3e:d2:7d:a7:d7:bb:64:ac:
80:3b:1f:c8:3d:30:66:6c:46:a6:9d:c5:af:20:48:55:20:f6:
50:60:4a:17:d0:66:ee:8e:7c:69:a1:7d:3e:8d:fe:95:fc:60:
70:e7:f2:d5:33:cf:bb:93:bb:e3:08:6e:a8:e2:49:a1:94:9f:
46:ba:b0:ce:fb:eb:51:03:a0:eb:2d:47:85:c5:05:8a:a1:ac:
61:38:cb:92:bf:54:01:3b:fb:8d:d5:37:fe:6b:82:cf:4f:49:
a7:5e:a8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:52:24 2025 by rpki-client