Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nVPqDwpYkp4sw2h3zRaxXE6mtbg.roa
File: nVPqDwpYkp4sw2h3zRaxXE6mtbg.roa (raw, json)
Hash identifier: IJ7/HQbAeiJWD8thWR9JlefHrXVYhHrs7s5eTm9EGlM=
Subject key identifier: 9D:53:EA:0F:0A:58:92:9E:2C:C3:68:77:CD:16:B1:5C:4E:A6:B5:B8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E3B2B6B6CE7988AA80622A3B8E4632038
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nVPqDwpYkp4sw2h3zRaxXE6mtbg.roa
Signing time: Thu 14 Mar 2024 04:14:45 +0000
ROA not before: Thu 14 Mar 2024 04:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3b:2b:6b:6c:e7:98:8a:a8:06:22:a3:b8:e4:63:20:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 14 04:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d53ea0f0a58929e2cc36877cd16b15c4ea6b5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fc:3f:0a:82:e9:07:ef:af:64:2e:d3:b6:ca:
50:a3:45:fb:b4:c0:12:c8:af:ff:25:78:1f:d2:3e:
4a:ba:77:6b:de:96:1a:b1:08:ba:5a:79:cf:0e:b6:
af:a1:91:05:c6:39:8d:c5:43:49:b2:b4:73:4c:f5:
98:de:18:de:7b:46:c0:e1:da:21:ef:76:bc:94:69:
af:12:f8:48:c7:52:45:85:01:4a:4c:25:5c:e9:9b:
9f:12:10:81:07:3e:fc:4f:c8:42:fe:fc:a1:d0:1f:
81:ed:ab:97:2a:71:fe:8a:d4:35:0e:65:5f:21:51:
4e:cf:88:5a:5f:6c:6b:b2:e9:68:50:a2:c2:d7:2d:
99:08:5a:a1:73:4d:f5:ba:49:f2:5f:34:ca:77:48:
d5:95:91:c0:9e:2f:35:a0:45:f5:0d:a0:b4:c5:3f:
15:e8:7c:4f:c2:02:fa:b8:67:0a:35:7e:38:86:ff:
39:2c:0d:1d:9d:2b:cf:d8:61:7b:d5:2a:16:f1:f4:
90:4a:63:a2:88:1e:4b:e2:bc:24:6a:bf:80:bf:81:
09:af:43:93:fc:46:56:4e:d3:7c:4a:86:3e:42:9e:
77:6d:ac:b6:d0:e6:35:77:4b:bf:93:2b:21:5c:62:
a7:d0:57:ab:d1:6d:70:9e:d8:56:c5:0d:e7:98:f2:
ff:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:53:EA:0F:0A:58:92:9E:2C:C3:68:77:CD:16:B1:5C:4E:A6:B5:B8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nVPqDwpYkp4sw2h3zRaxXE6mtbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:32:36:15:fb:a5:7c:66:1f:46:7c:7a:b4:6a:fa:7d:48:ec:
03:21:a4:b4:f9:72:98:2b:b3:a9:b8:0b:cb:1a:61:c4:da:5a:
0b:04:94:41:c6:49:3f:a3:f5:2d:d6:05:df:2f:ac:f1:0d:c0:
2d:b2:1b:7b:93:7c:31:03:ad:c2:63:19:0c:2d:7e:d0:84:a0:
61:e0:05:2b:cf:74:e4:e6:4c:41:e9:78:3a:c0:2f:87:d8:bf:
c1:13:f3:fc:71:a2:3c:2b:8a:13:9a:78:d0:eb:0a:76:51:c9:
ce:86:56:8d:b3:93:43:35:bb:17:61:b0:22:aa:1c:de:53:06:
dd:6b:df:00:a6:7d:5d:03:26:38:40:8d:60:5d:c4:77:e0:a4:
92:3b:a6:aa:41:81:73:ab:5f:e8:c0:fc:87:f6:ae:16:66:58:
ff:48:97:94:cc:87:29:51:09:64:02:69:32:2a:fd:a3:fa:5a:
e4:90:c1:ce:3e:6e:72:45:eb:61:0f:cd:13:e0:51:0f:e7:78:
db:65:a5:7f:9d:84:65:3d:60:5f:b6:9f:ff:61:9a:84:56:2c:
96:10:70:8f:cc:8b:ab:4b:30:a3:6f:17:00:a8:95:b9:93:da:
58:62:58:56:4c:e3:91:fc:42:16:a1:43:28:92:33:08:39:b4:
ca:d1:7f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:21 2025 by rpki-client