Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ibkNhJx9hiUUJ8yqO4AhzZ_Aik8.roa
File: ibkNhJx9hiUUJ8yqO4AhzZ_Aik8.roa (raw, json)
Hash identifier: E4zHNAXc0pPgnEDRWcWIb98/a6mEuGKRk2zybx5DQ9Q=
Subject key identifier: 89:B9:0D:84:9C:7D:86:25:14:27:CC:AA:3B:80:21:CD:9F:C0:8A:4F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CFF190C81B8FCA98749BA4AE0B76766B8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ibkNhJx9hiUUJ8yqO4AhzZ_Aik8.roa
Signing time: Fri 12 Jan 2024 19:14:40 +0000
ROA not before: Fri 12 Jan 2024 19:14:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ff:19:0c:81:b8:fc:a9:87:49:ba:4a:e0:b7:67:66:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 12 19:14:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89b90d849c7d86251427ccaa3b8021cd9fc08a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:63:50:e8:13:7e:4d:0d:21:14:54:61:45:
5a:9a:0a:d7:e7:aa:88:7c:8c:d2:bd:d3:99:38:a1:
a6:5c:d2:ac:f5:ed:28:13:ba:e0:63:eb:49:7b:09:
23:be:a7:1c:64:27:fa:7e:cd:65:af:db:88:12:be:
ea:97:35:cf:ea:8b:2b:9e:5c:eb:f2:2b:20:64:3f:
74:0f:b6:52:06:83:ec:16:ee:cb:8f:9e:3e:0a:01:
73:41:6d:03:b4:e6:bb:ab:26:f7:c3:6a:42:f0:0b:
e3:65:4d:59:18:a7:c0:5a:41:61:2c:4c:ac:ba:d5:
d6:da:45:82:4f:4c:e2:8f:b5:da:9f:d6:a1:71:7f:
00:6c:af:1d:e2:37:c2:e2:49:20:97:83:37:10:37:
67:6b:a6:b6:b0:0b:99:70:0e:04:9a:d8:e5:c3:9c:
a6:56:d5:22:73:34:51:ab:df:f1:0d:62:2a:65:4e:
cf:b2:db:7a:20:1a:be:98:61:22:04:c4:4a:fa:ec:
5c:79:41:00:cc:1a:41:50:ef:a7:7b:1e:e2:e9:47:
c4:53:bb:ac:7e:d2:a9:79:2b:b4:fd:27:0b:e6:a6:
7c:af:50:f1:e9:e3:94:54:2d:84:39:1f:55:03:be:
28:3d:78:2f:c1:99:26:42:79:40:e6:e2:7d:88:db:
d2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B9:0D:84:9C:7D:86:25:14:27:CC:AA:3B:80:21:CD:9F:C0:8A:4F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ibkNhJx9hiUUJ8yqO4AhzZ_Aik8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:16:25:d2:33:08:4f:35:ad:54:91:d5:aa:e0:ed:80:0a:56:
7c:51:35:f8:3d:3d:ba:1b:e2:d4:83:78:d9:ea:63:f7:4a:07:
cb:ce:b5:7e:b7:07:58:b8:db:db:7e:3a:e0:62:b5:c8:87:13:
a5:5e:9b:06:95:0d:9c:40:90:bb:b5:0c:e5:88:54:9d:7f:9a:
92:9f:d5:3f:e6:a7:f8:ab:84:54:76:c5:10:a3:6f:0a:e2:c3:
3b:36:ff:03:70:6b:13:0b:bf:27:46:72:9d:bb:28:57:4b:a2:
dd:44:fb:e6:48:1e:4e:f7:15:3c:8b:9b:df:24:3a:b4:5a:83:
b6:11:43:63:37:6a:43:08:c6:de:ab:f6:13:da:79:e4:30:71:
a0:89:82:de:87:18:78:f3:a0:32:52:a9:ce:a3:ef:7e:86:53:
96:ad:42:e9:98:24:b0:b8:df:9d:8e:51:f6:9d:99:27:79:a0:
30:eb:de:13:b6:99:90:fe:62:d9:82:df:ab:b2:e4:e1:ea:b5:
c3:bc:a9:15:90:f7:3e:26:70:c1:c2:2d:d1:53:d1:23:98:a3:
45:fc:f0:7b:0a:49:bf:ce:ca:03:3d:46:2c:2e:0f:70:66:ad:
0e:2c:52:91:5f:51:50:81:70:b6:e3:9e:37:9f:8d:e1:40:7c:
b6:2e:2c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:32 2025 by rpki-client