Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/igku0uOUXFIWqj8TKbM0E-9iwgY.roa
File: igku0uOUXFIWqj8TKbM0E-9iwgY.roa (raw, json)
Hash identifier: nlS4uq7Z8ouOk1n0X1QNgpu8rebX/qwrkvUaE+I6JLY=
Subject key identifier: 8A:09:2E:D2:E3:94:5C:52:16:AA:3F:13:29:B3:34:13:EF:62:C2:06
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E449A947BA3800C66DA286031FD961E03
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/igku0uOUXFIWqj8TKbM0E-9iwgY.roa
Signing time: Sat 16 Mar 2024 00:12:45 +0000
ROA not before: Sat 16 Mar 2024 00:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:44:9a:94:7b:a3:80:0c:66:da:28:60:31:fd:96:1e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 16 00:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a092ed2e3945c5216aa3f1329b33413ef62c206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:09:a5:0c:05:61:0e:b2:fe:17:d5:62:b3:bb:
ed:82:90:30:e4:e0:53:27:a1:a3:a3:86:75:74:a5:
b8:07:15:02:07:d1:85:56:50:7d:8f:21:98:db:fb:
2f:e4:c6:73:be:b1:0e:ab:25:ae:4c:1e:e1:bd:5a:
10:c5:de:5f:7b:14:9d:dd:5b:f3:1f:1a:99:ef:ee:
9b:79:0d:86:7e:33:69:87:60:75:50:3a:01:0d:b6:
5a:32:66:f7:0a:82:68:9f:8d:25:05:bf:f0:65:6d:
d4:c1:49:ff:17:dc:a8:fc:14:cb:1f:81:9e:34:b2:
ec:7e:35:1c:f2:f5:f9:2f:7f:fc:be:a3:8b:6b:04:
b0:a6:bb:99:c0:29:b9:13:d2:e1:a7:71:2f:ee:b5:
8d:54:46:1d:9f:a4:cf:11:c0:22:03:af:dd:06:68:
8e:8d:65:d3:8b:72:27:bb:73:47:de:69:b0:8d:2e:
c0:a5:71:51:7b:62:f8:6a:02:d5:f3:12:d2:5c:95:
4e:5b:ad:49:02:27:13:2e:28:67:5c:8e:fa:39:e5:
83:36:11:a8:bb:02:52:d8:f7:2d:2d:52:52:6c:fa:
fa:2c:3b:11:f8:a2:28:9b:7b:75:6b:10:f8:1d:f2:
58:24:e6:e5:bf:83:d3:7b:61:be:55:95:19:9b:02:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:09:2E:D2:E3:94:5C:52:16:AA:3F:13:29:B3:34:13:EF:62:C2:06
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/igku0uOUXFIWqj8TKbM0E-9iwgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:f9:a4:f5:9d:23:1e:e0:6f:f3:71:88:30:96:70:bb:0e:a4:
ca:5b:1e:be:8a:b3:a4:b9:57:c3:76:46:43:4a:22:4f:0e:54:
86:13:b8:43:42:3f:28:8d:d1:f6:8a:e2:36:33:7b:6c:75:8f:
69:f7:83:95:25:64:f9:d4:1e:e4:bd:c4:1e:48:94:ce:a5:0b:
5d:c8:f2:33:f9:d8:86:8a:05:46:1a:d9:83:f8:d5:d5:40:07:
dd:17:b7:66:92:bb:b1:41:94:6d:7b:7f:1d:36:9c:59:86:f5:
0f:65:38:53:50:a0:15:d0:24:c8:73:3f:5c:c2:e6:cb:06:0c:
a6:15:f7:b7:dc:70:76:10:3c:c7:73:fb:46:c9:82:ec:52:ec:
38:22:e9:f3:31:6a:1c:4f:e5:1f:e2:af:1d:13:73:99:76:34:
e2:8f:dd:c4:4c:48:80:fb:dd:70:83:64:cd:23:68:ee:63:56:
a7:fd:ad:71:b7:f6:84:28:81:07:47:72:56:61:e9:a0:ee:ac:
0d:a3:28:64:4c:af:ce:75:ff:a1:f3:18:78:2b:9b:f4:b4:76:
eb:a1:d1:ca:be:d4:a3:dd:c4:cb:aa:ac:c1:39:5f:8c:87:15:
02:14:02:22:6c:61:80:32:d2:02:0e:19:38:fa:b7:11:fa:bb:
18:cd:4a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:05 2025 by rpki-client