Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jiMZ_xTK8H-fomgpy6QW0QqnNNo.roa
File: jiMZ_xTK8H-fomgpy6QW0QqnNNo.roa (raw, json)
Hash identifier: iPhT8D8p7MrHRpzddIqMuaVRVWVKWsaBl7Mis/Z4wJU=
Subject key identifier: 8E:23:19:FF:14:CA:F0:7F:9F:A2:68:29:CB:A4:16:D1:0A:A7:34:DA
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E122FB877582BF9B97729DB90CF63847D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jiMZ_xTK8H-fomgpy6QW0QqnNNo.roa
Signing time: Wed 06 Mar 2024 05:15:01 +0000
ROA not before: Wed 06 Mar 2024 05:15:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:12:2f:b8:77:58:2b:f9:b9:77:29:db:90:cf:63:84:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 6 05:15:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e2319ff14caf07f9fa26829cba416d10aa734da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cf:03:b1:de:3d:43:9f:ba:93:56:94:70:e2:
32:06:e2:2d:37:3f:df:8f:1b:79:78:67:4c:01:e0:
d2:15:00:06:af:e5:6a:42:2c:52:7d:42:42:69:49:
a6:e3:6d:32:22:23:66:0b:4b:85:e8:a4:96:03:de:
15:fb:6f:6a:21:f1:c4:c8:3f:03:fd:9a:2f:15:72:
e2:f7:0e:63:f3:97:f6:78:10:1d:61:bd:ca:af:5d:
44:ad:13:97:fc:2a:c5:c5:31:38:b1:73:da:5b:ae:
5e:b0:bb:c8:47:89:50:e7:fe:ef:6c:ef:53:d1:18:
26:ac:05:79:e9:c5:9e:49:c3:4f:58:33:97:80:05:
71:e9:b3:66:67:fc:69:ec:d6:93:dd:cb:5f:43:32:
c9:b4:7b:ae:d7:31:6b:95:04:3c:0c:ce:0d:c1:1d:
d5:ec:93:66:e8:d2:8e:b1:7a:02:07:94:6a:00:8d:
74:c6:88:70:95:ec:e1:70:78:04:6a:67:8e:31:06:
c0:1a:32:5f:55:e6:5f:55:19:22:e5:ab:e8:c5:8a:
55:a0:06:01:2f:c5:80:fa:17:cf:5a:82:dd:7f:7b:
69:02:d4:e5:48:b2:1d:75:0c:99:f3:76:18:08:04:
ad:96:d3:82:30:73:c8:34:90:df:70:fa:05:ff:ca:
25:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:23:19:FF:14:CA:F0:7F:9F:A2:68:29:CB:A4:16:D1:0A:A7:34:DA
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jiMZ_xTK8H-fomgpy6QW0QqnNNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:26:7f:19:34:fc:1b:fc:25:76:53:9c:24:0e:ec:4b:06:65:
a7:6f:89:5c:57:68:77:52:c3:ce:b6:0a:97:f3:a3:fa:6c:f7:
ff:be:99:cc:fe:29:2c:6c:f9:64:d7:59:09:ed:c0:a2:ba:08:
fa:cc:15:ec:74:6f:19:99:a8:c8:03:c7:dd:ed:b2:a4:0a:97:
a2:f9:11:a8:97:13:62:d2:e5:20:25:1f:51:3b:e8:cc:58:4b:
d6:13:32:de:94:ff:6a:a7:2a:80:ba:9b:94:70:34:2e:d4:be:
44:91:03:a5:55:30:25:6b:ed:cb:9a:f4:1c:1d:89:30:a1:5d:
ff:37:ef:84:51:bc:2d:40:0e:a1:14:43:b2:9c:1e:fe:7f:b7:
a9:1c:d5:82:b1:39:a9:9e:7c:cd:e4:d2:7c:75:92:a7:e8:ad:
3f:47:d9:a1:e4:d5:23:44:87:db:47:4e:f4:d5:cf:92:a7:e9:
7b:6e:8d:ad:9f:39:a5:b7:0e:4b:f5:fe:58:30:24:c9:7a:e3:
fc:5f:b4:4d:11:93:89:ca:56:da:1b:10:b3:92:fc:bf:bb:85:
81:e8:c2:fe:58:b8:ff:d3:35:3a:85:29:57:9c:6d:d5:1d:f7:
18:58:68:e3:43:ac:39:6c:6b:45:c7:cf:b8:dd:c8:7a:43:a2:
34:a9:9f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:58:56 2025 by rpki-client