Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pvW2R9SeqOZn49swbb85nWDWXLc.roa
File: pvW2R9SeqOZn49swbb85nWDWXLc.roa (raw, json)
Hash identifier: 4r3TO/kPes4yMvIDtmjaCaFtbS3cNQKI+Tvj/Gi8ekI=
Subject key identifier: A6:F5:B6:47:D4:9E:A8:E6:67:E3:DB:30:6D:BF:39:9D:60:D6:5C:B7
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D9B4EE6849E598F7023722675EB872E01
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pvW2R9SeqOZn49swbb85nWDWXLc.roa
Signing time: Mon 12 Feb 2024 03:14:15 +0000
ROA not before: Mon 12 Feb 2024 03:14:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9b:4e:e6:84:9e:59:8f:70:23:72:26:75:eb:87:2e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 12 03:14:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6f5b647d49ea8e667e3db306dbf399d60d65cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ef:cd:58:e0:bd:91:9e:be:5f:0a:09:e9:52:
5d:df:08:1e:aa:c2:c2:fb:2f:dd:6e:d5:8c:c0:d2:
81:7b:3b:9f:ca:2d:94:6c:cb:72:04:29:c1:5c:60:
c5:83:96:21:0b:fd:61:fb:87:bc:0a:10:b8:e8:92:
1c:1b:34:b8:d5:70:03:de:80:a9:fa:d2:81:f4:30:
f2:e8:82:8f:9e:0d:e9:fb:74:3a:3f:6d:04:9e:13:
9d:fd:1f:0f:41:d7:54:2e:9f:64:31:97:a0:85:86:
33:6e:e5:40:44:d8:ba:2d:11:0d:b2:f5:e6:2f:fc:
49:57:82:4c:aa:75:31:e0:52:cf:0a:df:4f:69:29:
d3:67:f2:36:39:3f:d7:95:14:12:58:fe:87:e3:d4:
ae:7c:41:b8:98:0a:e5:0c:0b:82:b6:e9:d8:19:06:
70:42:b4:29:a9:46:06:9b:ae:1f:b1:c8:d9:51:b0:
4a:27:e9:d6:60:d3:e7:59:f0:a3:d1:b2:ab:2e:db:
cc:49:af:f8:d0:dc:c2:5a:03:45:f3:44:79:4c:07:
36:31:03:a3:04:8e:a6:63:f9:52:fa:51:8b:7d:07:
bf:67:75:38:b2:2c:53:81:16:7d:dd:03:a2:6c:0a:
6f:2a:ed:c9:05:2a:5a:c8:af:b1:e8:6d:bf:f1:14:
bb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F5:B6:47:D4:9E:A8:E6:67:E3:DB:30:6D:BF:39:9D:60:D6:5C:B7
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pvW2R9SeqOZn49swbb85nWDWXLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:ce:b7:62:c3:e0:06:0e:38:14:ea:b6:95:56:af:59:30:6e:
9d:ff:8e:54:a9:38:d8:69:0a:e2:eb:c4:41:d4:94:52:64:16:
41:70:a4:0d:93:61:e1:1f:ea:a6:e7:81:93:bb:72:30:5a:8a:
db:de:9c:fd:09:56:2c:b1:28:65:8d:6c:84:9f:b1:63:b9:d1:
dc:a5:35:7c:cb:67:0e:7b:57:b4:75:8f:ae:00:7d:c7:de:9d:
ee:bc:06:97:08:36:0c:f5:89:93:2e:73:94:78:39:b0:25:8e:
05:e7:02:6d:85:6b:69:5e:9d:79:a3:b0:c3:f1:f2:12:0b:a6:
70:80:05:dd:2f:7d:1d:06:74:46:d6:20:42:78:76:07:73:02:
9a:69:8d:91:b6:77:ae:36:90:60:d6:95:c3:2f:15:9c:9f:c2:
f8:d8:84:00:36:35:b4:91:f8:a8:e9:f5:ee:43:11:b7:9e:e7:
45:3e:c8:a5:a5:5c:4d:df:df:6e:48:66:73:8c:57:96:c2:17:
7c:5e:ca:4b:30:15:e9:2a:e6:33:d0:13:95:13:ea:ec:06:fc:
0b:33:c6:e5:56:a6:72:57:9c:b1:df:b8:ec:50:fc:f2:80:d2:
49:d8:77:47:11:2f:dd:be:ba:cf:a8:90:e0:49:bd:03:c9:61:
94:68:c4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:09 2025 by rpki-client