Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/hzQteg-aDpDUC4qbAsEOlSSEQ_k.roa
File: hzQteg-aDpDUC4qbAsEOlSSEQ_k.roa (raw, json)
Hash identifier: dO2yEvMrmxEhfZyBmvClW2JqyVM5dWtbw5fFfAML3u4=
Subject key identifier: 87:34:2D:7A:0F:9A:0E:90:D4:0B:8A:9B:02:C1:0E:95:24:84:43:F9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CF6F1A4C596232F1E887665EEB6E92731
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/hzQteg-aDpDUC4qbAsEOlSSEQ_k.roa
Signing time: Thu 11 Jan 2024 05:14:40 +0000
ROA not before: Thu 11 Jan 2024 05:14:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f6:f1:a4:c5:96:23:2f:1e:88:76:65:ee:b6:e9:27:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 11 05:14:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87342d7a0f9a0e90d40b8a9b02c10e95248443f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:04:e1:ea:de:e6:0f:37:61:ac:39:d9:02:
06:33:82:6a:e9:3f:15:e8:77:b9:1f:ef:0f:dc:ef:
18:91:6b:37:ea:9d:57:8f:4d:40:a4:92:f8:e8:5b:
3d:8e:1a:cd:64:5c:2f:f0:a7:a5:75:9c:1d:bc:23:
48:35:1a:34:96:37:8c:91:e8:2e:db:4e:5c:70:59:
1f:d8:e6:86:7c:75:a0:78:71:78:7d:f0:05:86:52:
8f:be:12:7a:5a:8e:3d:ef:f6:2f:21:fe:c1:fc:d6:
e4:2e:d9:fd:8d:65:80:7f:74:c0:ab:9a:4e:00:47:
5f:05:97:0a:c8:06:ea:50:6b:f2:51:de:7f:5d:51:
21:52:46:d1:b0:a1:6a:92:40:d8:af:ee:12:d9:3a:
c0:f0:d5:33:33:8b:70:1d:7c:cf:01:c6:3c:f6:b4:
22:37:9e:80:7f:70:48:cb:f2:7a:80:4c:13:52:f2:
f1:57:92:82:ed:00:46:6b:a9:aa:8e:c6:cd:47:c2:
f3:8f:a0:02:20:73:bf:45:a9:5e:f6:3b:d9:61:63:
3d:80:d7:51:2f:75:d9:36:86:ae:4f:6f:f9:05:9f:
db:0b:c2:b0:14:04:30:8d:68:a0:fe:7d:38:ee:c5:
10:83:64:e3:5c:75:6e:1a:01:8b:3a:6c:a0:42:d7:
0b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:34:2D:7A:0F:9A:0E:90:D4:0B:8A:9B:02:C1:0E:95:24:84:43:F9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/hzQteg-aDpDUC4qbAsEOlSSEQ_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:bf:2e:20:8c:ae:19:5e:3d:44:32:2f:1e:be:fd:fe:d3:e9:
54:0e:4f:5d:a3:a7:a8:c0:7d:5d:ab:e6:ff:50:3b:8b:a7:e1:
cf:d8:c8:5f:12:7a:01:7b:e5:04:5f:e5:07:6d:8f:e6:81:55:
7f:5e:da:01:c2:49:7e:7c:ee:f6:e7:e9:ae:27:1d:52:07:c6:
e0:17:bf:f7:5f:a9:a5:5d:24:e5:04:4d:f7:39:6f:de:f1:62:
27:a9:64:65:53:39:b0:db:5e:25:8b:46:30:f8:69:45:04:ad:
7b:16:1d:3e:a5:f1:37:70:a0:9c:fc:91:3b:b9:cb:71:9d:ff:
f2:6a:a3:67:ac:ea:9e:e7:fb:7c:54:67:db:43:39:7c:4e:c7:
f9:85:d6:96:86:b4:0f:ac:5f:03:b9:01:1a:0a:84:4c:b8:4e:
bc:a7:d8:96:d5:ec:1e:1d:29:86:10:a2:6a:d0:c2:a7:d7:b5:
71:8b:5b:20:5a:dd:9e:48:9d:a9:07:8d:af:68:cd:6d:f9:17:
1b:a0:9a:6e:10:a8:28:35:bc:a1:3d:16:4f:65:95:8c:cf:ac:
50:ee:d6:e8:33:74:33:aa:fc:e9:67:1f:f0:cd:e3:17:18:9f:
1c:c5:bb:7a:72:ef:64:d5:a2:48:2d:33:1a:a6:36:32:4c:4f:
ac:a4:f6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:03 2025 by rpki-client