Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/p2G9RtEkwo8mHksxK_vGi3Mg4pQ.roa
File: p2G9RtEkwo8mHksxK_vGi3Mg4pQ.roa (raw, json)
Hash identifier: wC4gycUGnzeY1Dl820NM0l7YiGITuDiYZ9gdl4KN2JA=
Subject key identifier: A7:61:BD:46:D1:24:C2:8F:26:1E:4B:31:2B:FB:C6:8B:73:20:E2:94
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CF1C79FFBE65E0B7209D3C7E3078E5B35
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/p2G9RtEkwo8mHksxK_vGi3Mg4pQ.roa
Signing time: Wed 10 Jan 2024 05:10:40 +0000
ROA not before: Wed 10 Jan 2024 05:10:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f1:c7:9f:fb:e6:5e:0b:72:09:d3:c7:e3:07:8e:5b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 10 05:10:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a761bd46d124c28f261e4b312bfbc68b7320e294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:58:94:3a:dd:5a:cc:b0:67:e3:fb:e4:58:
f3:c6:07:e4:06:9e:99:c0:40:c9:fe:4a:75:98:fc:
38:63:d0:df:55:2e:68:17:b0:cc:8c:23:85:96:6b:
f0:0d:72:50:7e:20:a1:4e:57:65:59:26:e9:63:73:
43:88:65:5c:d2:e9:2b:c9:c5:d0:53:6f:6e:30:93:
a0:6e:7b:5c:77:c9:dc:93:94:44:d6:83:81:a4:fd:
14:79:11:cf:22:22:d7:3e:9c:1f:e7:bf:ce:b1:8a:
b1:95:4c:70:3c:74:b8:05:f6:c4:10:af:c8:56:a0:
31:db:eb:7d:70:6f:a3:f4:56:6b:05:33:4a:70:68:
73:4a:f4:2f:6a:21:42:07:44:af:55:91:14:20:0d:
3e:58:d2:b0:dc:df:2a:5b:58:15:75:6a:1c:56:02:
b3:dd:30:78:3b:94:dc:af:49:1f:76:01:d8:97:74:
87:1d:5b:67:a3:58:c9:8a:be:7c:7c:b2:76:4a:06:
87:52:08:1c:c4:b6:85:8b:60:b5:43:6d:4e:34:9e:
40:22:13:f2:56:ee:94:65:08:ef:d0:ff:ad:c4:6c:
60:2c:8d:be:f0:7a:67:1f:b0:e2:73:32:3e:4e:48:
43:52:ba:99:f4:a3:ef:74:18:25:07:76:00:46:f6:
c3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:61:BD:46:D1:24:C2:8F:26:1E:4B:31:2B:FB:C6:8B:73:20:E2:94
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/p2G9RtEkwo8mHksxK_vGi3Mg4pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:6e:b3:eb:86:12:e5:03:78:9a:a4:33:f5:15:1d:ed:86:29:
36:57:c2:d7:9d:0a:c1:68:cf:0a:e7:c3:ae:4c:76:de:39:3f:
8b:c7:ad:55:e4:07:7f:47:bf:3f:7b:cc:74:d5:2c:00:14:0b:
05:ac:53:3a:e3:75:46:13:3e:28:4b:aa:5b:e6:46:1b:16:e5:
eb:ad:ba:5e:37:5e:92:31:03:f6:02:50:2f:f5:44:22:e5:7c:
6b:89:ab:05:ca:58:09:9d:c6:b1:3f:42:8a:cb:1f:70:94:ea:
18:22:3c:0f:7f:bb:09:19:92:8c:71:d0:44:6b:07:09:a1:7d:
09:47:f3:b6:85:d5:06:01:f4:54:2d:f8:2f:ae:7c:67:ad:86:
cf:06:b6:53:2e:76:f5:a4:49:ce:d1:ee:c6:98:87:7e:70:41:
43:97:ed:99:04:98:79:0f:67:42:a5:c0:48:e8:11:3e:03:85:
32:e3:95:fe:d1:48:a2:3d:97:92:36:d2:23:b9:a2:68:9a:b9:
b2:7c:29:c1:6b:9c:fe:55:1c:0a:52:83:02:b1:9c:68:a3:a3:
9c:90:e2:11:d1:7b:86:f7:e9:1c:e2:04:d3:ba:3c:aa:d4:47:
34:25:61:12:73:a5:1b:09:b5:5a:9d:49:87:3a:eb:b0:75:0b:
51:4d:c2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:35:48 2025 by rpki-client