Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jJ6k_3nHjyRKQIcgceCUiXM0c9M.roa
File: jJ6k_3nHjyRKQIcgceCUiXM0c9M.roa (raw, json)
Hash identifier: 4iMfd00lKw4+ihVKdXe0L0K4oQQ6Nn7zsJFLkaMqCJY=
Subject key identifier: 8C:9E:A4:FF:79:C7:8F:24:4A:40:87:20:71:E0:94:89:73:34:73:D3
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CF7FB262FB4BCEDCD5ED48CE4C5E419ED
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jJ6k_3nHjyRKQIcgceCUiXM0c9M.roa
Signing time: Thu 11 Jan 2024 10:04:40 +0000
ROA not before: Thu 11 Jan 2024 10:04:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:f7fa:bbf2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f7:fb:26:2f:b4:bc:ed:cd:5e:d4:8c:e4:c5:e4:19:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 11 10:04:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c9ea4ff79c78f244a40872071e09489733473d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:77:68:90:34:55:7b:4f:fc:c9:b3:50:0d:60:
71:3d:fa:1b:3e:21:dc:06:d8:b2:53:7a:43:63:e5:
61:9d:42:58:e9:50:db:77:2e:d6:45:4c:5c:d4:2d:
2d:85:72:e9:67:c7:0a:61:d5:15:43:3c:22:a0:62:
0d:5a:f1:9f:7b:e9:84:0b:22:ac:e8:14:af:2c:b2:
da:8a:0b:2b:73:0f:cd:38:d2:7f:2b:4c:bb:84:8d:
3c:3a:0c:6e:9f:cb:cc:ca:9c:8c:14:b0:da:8b:94:
27:80:39:64:c0:3e:0c:f0:d7:00:fc:58:34:24:30:
53:d1:08:db:3e:01:7a:2a:52:e4:c1:57:26:68:59:
74:d4:2d:f6:96:d5:59:57:75:53:5d:da:76:50:be:
9c:4f:0a:73:b2:8e:4d:39:d6:eb:dd:d2:18:4e:f5:
48:a9:26:56:01:67:19:9c:ab:14:e5:2f:96:7a:fa:
e6:e7:a7:51:da:c0:d1:59:4b:13:90:ba:6c:6a:2e:
86:22:6b:50:fc:9a:11:a9:92:06:af:26:5c:66:d7:
10:23:2a:39:f3:f8:fc:f9:e9:ac:1d:da:64:ad:e8:
7c:ed:f0:91:4b:c0:28:f3:5a:b2:fe:eb:80:f0:ef:
54:83:41:c0:da:1e:ba:97:ea:53:0a:0a:cc:22:7a:
27:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9E:A4:FF:79:C7:8F:24:4A:40:87:20:71:E0:94:89:73:34:73:D3
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jJ6k_3nHjyRKQIcgceCUiXM0c9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:34:e6:bc:0e:ad:fe:3e:78:5c:34:6d:d1:21:2e:e7:4e:54:
29:3f:6e:d5:55:d4:a6:7e:34:62:7a:1d:18:59:e8:8d:4b:f5:
81:35:36:ed:11:bb:69:cd:fb:a8:10:01:1d:a7:48:bd:14:9b:
c5:95:81:27:ac:d4:7d:48:42:e1:d1:12:45:e3:78:6c:2c:08:
b5:94:45:43:42:69:61:90:be:27:bf:b0:a6:9d:af:e7:b1:16:
9d:ce:4e:00:cd:7b:70:ab:bc:43:ea:56:31:d0:66:4a:dc:a8:
91:31:dc:9a:e9:e2:94:86:ef:a6:bb:b4:c1:40:39:b5:34:f8:
b5:81:f9:1c:76:8c:c6:81:1e:4b:c4:b3:06:92:64:c4:2b:72:
d9:ce:e6:84:65:ec:35:0e:5a:ba:8e:61:d7:34:a0:b4:4c:5e:
3b:67:c5:7c:dc:bc:f3:2b:08:2f:5f:ae:08:cc:74:b5:cd:f2:
ba:e6:b0:ce:eb:07:5c:fc:de:d7:00:c0:58:67:89:e2:37:4d:
27:fa:48:c3:56:7a:41:0f:ef:37:b5:90:84:0e:d2:b4:f1:78:
64:1f:9c:b6:f8:a6:53:3e:4e:22:e1:37:ff:78:be:c7:50:4d:
4d:58:7c:03:10:9c:33:8b:5b:0a:0f:15:d1:d9:04:9f:e4:34:
0e:6f:fc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:06:49 2025 by rpki-client