Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lz3wzszSLfGsbQJQL8HMgD6hYR8.roa
File: lz3wzszSLfGsbQJQL8HMgD6hYR8.roa (raw, json)
Hash identifier: 96O1pFZ5LYDU3ZYCfQkIQmpUReqeTJ4cj/ngfPTXX48=
Subject key identifier: 97:3D:F0:CE:CC:D2:2D:F1:AC:6D:02:50:2F:C1:CC:80:3E:A1:61:1F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D9284877CDFA53EFF21D058B4D782B572
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lz3wzszSLfGsbQJQL8HMgD6hYR8.roa
Signing time: Sat 10 Feb 2024 10:16:15 +0000
ROA not before: Sat 10 Feb 2024 10:16:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:92:84:87:7c:df:a5:3e:ff:21:d0:58:b4:d7:82:b5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 10 10:16:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=973df0ceccd22df1ac6d02502fc1cc803ea1611f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c2:3a:60:06:13:de:c4:f5:e3:d5:2b:cb:87:
dc:40:fb:18:b9:52:6e:10:24:f9:63:ec:da:60:5a:
95:31:73:21:cc:f1:c6:5d:09:0a:fe:b4:94:98:ae:
da:76:15:22:1c:72:c9:5b:1b:7d:64:ac:dd:67:ef:
1f:26:2e:fa:7c:ce:93:78:ea:1b:dd:e5:33:2b:ee:
bb:0d:c3:ac:88:ae:b2:48:d8:c6:2d:48:7c:49:85:
42:b7:9e:21:38:ba:d5:f9:39:ee:58:77:b7:5f:61:
8a:00:34:10:bf:61:17:93:52:7e:ce:ed:e6:40:32:
d7:d9:1d:99:4b:ce:43:e6:cb:a5:86:7d:b0:e1:b7:
6b:e5:be:d2:05:43:d2:3e:75:ce:62:4f:1f:68:65:
55:46:f6:ca:90:ea:e5:51:01:ce:59:81:f1:83:6b:
2c:8d:3a:dc:e7:89:f6:9e:38:cc:a2:5b:ba:df:af:
51:10:ea:fd:ec:39:52:34:2f:ba:f0:aa:1d:2f:bd:
e8:87:7f:c8:17:82:e8:59:e2:fb:ef:be:c1:b2:82:
73:63:9b:7c:a9:a3:60:c5:83:73:5e:a9:29:ad:05:
fb:36:54:15:bc:cf:34:23:ed:53:a1:7c:14:ab:f3:
53:42:72:cc:ef:f2:ef:fd:d7:9c:42:c0:2e:18:54:
e0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3D:F0:CE:CC:D2:2D:F1:AC:6D:02:50:2F:C1:CC:80:3E:A1:61:1F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lz3wzszSLfGsbQJQL8HMgD6hYR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:f9:40:4d:a2:dd:fa:78:b0:24:27:97:be:c2:fc:10:09:3e:
a8:f5:7b:b1:b6:7b:4a:b8:6a:00:5f:54:ca:02:c2:40:1e:87:
01:e9:18:d3:6a:a7:d3:5b:66:d1:b6:d4:98:44:2b:18:40:aa:
79:59:d9:5f:e9:50:ab:21:9e:48:44:bf:d1:65:10:39:fc:51:
e8:54:1c:2a:2a:b0:00:09:0d:31:cd:03:dc:93:67:7b:c1:91:
61:68:67:e2:d3:7f:31:a2:91:84:fb:2d:4b:0d:cf:fd:cf:a9:
24:f3:02:96:3a:98:62:b3:3c:3c:86:ce:aa:a1:dc:96:f4:51:
ad:2d:ef:a8:df:e6:c6:c7:b3:ec:22:18:af:e7:63:40:84:72:
7d:5d:2c:0a:4c:0b:a7:2e:7c:c9:23:26:9d:b4:74:aa:c9:8a:
9d:fb:1c:14:cb:b4:0a:51:19:20:b7:0a:35:54:f3:80:34:4f:
80:5b:1f:dd:2d:90:9d:8c:25:8b:06:93:48:c2:4b:36:36:31:
b4:a5:09:19:8f:59:d5:63:c8:d1:16:5c:96:e8:df:12:c1:aa:
cf:e0:06:6e:b5:37:0f:65:60:7d:ad:16:0a:ae:50:de:5a:c3:
fd:49:f0:38:08:f8:ab:f0:ae:95:4d:26:90:c2:01:52:9e:a1:
4d:23:92:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:44 2025 by rpki-client