Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lKWWfo_Pks7Iwb2G3adXMd9Ji84.roa
File: lKWWfo_Pks7Iwb2G3adXMd9Ji84.roa (raw, json)
Hash identifier: M7JoqpOUj7oZjBvEh2r1oAZaXC19T3eYubLkteo/dD0=
Subject key identifier: 94:A5:96:7E:8F:CF:92:CE:C8:C1:BD:86:DD:A7:57:31:DF:49:8B:CE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C969073A67AD41B8CE987D2A26E8F1AC2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lKWWfo_Pks7Iwb2G3adXMd9Ji84.roa
Signing time: Sat 23 Dec 2023 12:04:58 +0000
ROA not before: Sat 23 Dec 2023 12:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:968f:dcdd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:96:90:73:a6:7a:d4:1b:8c:e9:87:d2:a2:6e:8f:1a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 23 12:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94a5967e8fcf92cec8c1bd86dda75731df498bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:86:dc:59:98:d5:d8:1f:99:40:68:fe:65:
27:5b:bb:e0:20:77:54:4b:8d:f8:ad:7e:0b:aa:a1:
73:88:25:15:b5:ad:01:de:26:17:67:16:c4:1e:95:
54:cc:de:66:d0:c3:34:3b:05:63:26:e9:1e:34:c3:
01:eb:74:02:85:1a:3a:ef:ce:d3:26:2f:39:99:d8:
c5:55:07:2c:c4:6c:9f:69:a3:91:c8:63:13:3a:b2:
82:dd:c3:d8:24:40:fb:c5:b7:1d:e3:91:34:51:12:
c1:d6:e1:80:67:d5:80:35:aa:a3:5d:17:28:a8:5e:
2e:50:be:77:48:a1:22:a9:02:19:57:1d:f8:00:fb:
c3:f9:68:50:cf:b3:9c:d5:0a:8e:38:9f:29:5e:9a:
08:3b:23:d5:48:e2:c7:00:f9:b9:cf:b6:21:63:32:
83:b9:e9:6a:f3:bc:49:23:ed:e4:04:6f:09:62:f7:
8a:ad:87:08:d1:8b:fe:eb:67:d0:01:76:b0:d0:df:
0b:65:2e:c1:25:3a:b0:68:f3:88:ff:36:76:73:6b:
ba:8d:b5:c0:37:98:94:e0:d3:bb:7a:5f:f5:48:05:
97:a0:48:df:ff:d9:80:bc:57:dc:69:ea:ae:fa:4e:
d1:49:90:38:bd:ad:43:be:4c:75:5b:4a:06:2f:25:
e4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A5:96:7E:8F:CF:92:CE:C8:C1:BD:86:DD:A7:57:31:DF:49:8B:CE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lKWWfo_Pks7Iwb2G3adXMd9Ji84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:95:13:03:f0:cd:03:be:66:a4:32:65:53:23:db:66:4c:6d:
aa:00:f7:4d:73:3d:1f:b5:18:80:bc:51:55:bf:93:c4:e0:ef:
53:12:e1:7b:7e:ad:dc:8e:a7:d1:71:4a:03:21:06:72:72:ab:
a4:b5:79:a4:86:95:d0:7f:2a:ac:f1:7f:ec:b6:98:08:91:5e:
18:a3:00:e8:12:38:b8:52:e4:3f:1d:ec:70:59:f2:99:2b:99:
7f:8b:b4:69:a7:89:02:68:79:ab:01:67:60:ab:1c:62:c8:ad:
56:d1:ee:1a:61:aa:22:d7:9b:d7:d1:d9:45:28:bc:75:3a:be:
14:8c:0b:41:ac:2f:9e:40:40:f2:67:63:3b:76:d9:f5:7a:52:
a7:d1:13:a7:d4:92:9b:6b:e3:e8:9f:cb:02:3b:02:a7:a1:1a:
d8:4e:db:b1:e0:27:f9:61:e4:29:03:97:02:6c:ec:7a:9e:32:
b7:a1:81:43:28:f1:3b:c1:6d:68:c2:d8:33:2a:a1:6a:df:70:
db:98:66:90:07:2f:b5:e4:02:10:c2:18:65:b8:01:10:db:94:
c4:85:cb:3b:f3:10:20:c4:b4:15:10:d9:73:57:be:a9:6d:b5:
b3:87:04:a9:5d:02:54:76:68:f0:93:43:64:48:8d:43:e3:a4:
8f:36:cd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:53 2025 by rpki-client