Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ldoNsUyN7efn26CBBZtgOh_Te4g.roa
File: ldoNsUyN7efn26CBBZtgOh_Te4g.roa (raw, json)
Hash identifier: UoeUeB3AHEFw4vwoyOunuiKCl6v0gkSWprsl9QGAFxI=
Subject key identifier: 95:DA:0D:B1:4C:8D:ED:E7:E7:DB:A0:81:05:9B:60:3A:1F:D3:7B:88
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E1265BCA99EC9A35CBCA50EE862651F8E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ldoNsUyN7efn26CBBZtgOh_Te4g.roa
Signing time: Wed 06 Mar 2024 06:14:01 +0000
ROA not before: Wed 06 Mar 2024 06:14:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:12:65:bc:a9:9e:c9:a3:5c:bc:a5:0e:e8:62:65:1f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 6 06:14:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95da0db14c8dede7e7dba081059b603a1fd37b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:10:25:87:ef:4c:09:f2:4c:0b:7b:7e:74:39:
88:5f:35:99:f1:24:ab:ef:22:9c:42:e2:f5:73:44:
3e:fa:50:d8:ad:0b:75:91:9d:1e:24:c6:94:d0:3b:
60:83:c8:86:85:1a:7b:8b:00:f0:9b:3f:68:36:67:
29:7b:9c:8b:72:bc:ff:92:8a:80:30:50:02:6c:53:
ee:45:7d:b4:1b:26:a8:76:87:3e:bd:5f:7c:19:d6:
4b:23:48:1b:f2:e2:1b:66:31:01:7d:9e:5d:be:4c:
9e:2d:74:2b:a9:4c:fe:16:aa:6c:2b:31:70:88:6b:
fc:61:72:7e:43:92:22:86:9e:7e:4b:26:d7:09:f8:
f0:12:e5:b8:b0:8c:49:fc:61:19:69:0d:11:38:3a:
eb:08:a8:9d:aa:3e:0b:f1:ee:38:b6:af:58:e4:15:
25:70:24:e4:4e:6b:b8:08:dd:f6:fe:a7:b5:32:98:
e0:66:b4:6b:7e:df:d9:c5:9a:12:26:07:b0:fe:98:
67:5b:60:85:5c:ad:7a:19:4e:9d:49:d7:46:7d:05:
7b:24:60:71:9b:a9:df:37:57:56:a4:4d:bb:94:9a:
6c:cc:b6:82:33:da:25:71:4e:0b:26:f4:a9:61:07:
a1:54:b4:7d:c6:35:e3:c6:1c:2c:3f:1c:2e:b8:f1:
1b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DA:0D:B1:4C:8D:ED:E7:E7:DB:A0:81:05:9B:60:3A:1F:D3:7B:88
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ldoNsUyN7efn26CBBZtgOh_Te4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:61:85:e8:21:f0:24:36:b8:6f:d0:14:40:59:1f:5a:2c:81:
70:4c:0d:98:23:ff:fa:02:9a:81:ba:09:3f:57:89:96:9f:cc:
a1:80:86:1c:76:64:3e:88:1c:99:ea:40:39:09:c3:f7:77:86:
59:5c:95:3a:9a:eb:1d:c2:29:a8:4d:60:e8:35:24:e1:62:2b:
16:77:14:ec:df:bc:75:9f:d4:33:d6:b4:ff:83:e4:24:4a:f4:
c8:5b:a5:b2:2f:11:cd:b3:c9:0c:0c:f5:d4:d1:14:39:de:e0:
32:26:6a:f5:f7:b3:ad:7e:bf:45:78:7c:6f:ce:23:97:6f:14:
7e:42:da:f2:13:20:20:22:5e:43:ff:48:26:76:db:f4:22:2d:
d7:5f:b5:21:5f:b1:f5:5f:fb:9b:d0:9a:22:b0:88:78:89:62:
45:20:73:c9:41:f8:f7:d5:91:99:3a:f9:25:3c:79:31:fe:83:
58:c3:f1:df:3a:8c:e6:6c:ae:dd:31:b1:1d:19:62:8a:0f:01:
a1:1e:ca:fe:d3:56:4d:75:3d:08:35:65:78:43:73:bc:95:16:
bc:09:16:21:f3:15:42:37:21:3b:d1:87:c2:a2:8c:69:fb:37:
0a:98:1e:4d:ac:24:42:2f:5e:7d:4c:c6:2e:30:4c:40:2b:0e:
9c:ad:68:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:26 2025 by rpki-client