Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tnYkJxA3X3diFiV9y3tJUCsy9IA.roa
File: tnYkJxA3X3diFiV9y3tJUCsy9IA.roa (raw, json)
Hash identifier: qjHbiPbfPnCMLrmb3cj0ix6ytyO//9H4E614obW3PbQ=
Subject key identifier: B6:76:24:27:10:37:5F:77:62:16:25:7D:CB:7B:49:50:2B:32:F4:80
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9AAB7A1C2C916AC10B2F6C4E3EDCBB53
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tnYkJxA3X3diFiV9y3tJUCsy9IA.roa
Signing time: Sun 24 Dec 2023 07:12:58 +0000
ROA not before: Sun 24 Dec 2023 07:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9a:ab:7a:1c:2c:91:6a:c1:0b:2f:6c:4e:3e:dc:bb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 24 07:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b676242710375f776216257dcb7b49502b32f480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:34:83:df:87:ed:a1:4f:a7:14:3c:57:c2:
b1:62:c2:25:04:e6:11:8f:01:1d:c7:d1:b6:aa:41:
05:66:79:6e:4d:6a:88:89:69:96:01:6e:f7:be:29:
18:2a:3a:50:b4:76:36:a1:83:84:7f:e2:5e:88:88:
85:f4:29:d9:25:b8:95:fa:be:2e:e9:51:38:0d:88:
8f:33:9d:9d:26:11:0d:5b:da:96:15:12:2c:be:5b:
49:66:32:33:43:82:a6:12:f4:5c:cb:c8:06:1e:c2:
7b:7b:80:81:69:8e:59:db:19:bc:20:01:36:a9:5f:
02:00:5d:b1:2c:5b:de:cd:34:73:dc:6a:99:20:cc:
c1:1a:93:9d:3e:fe:c3:13:89:6a:b7:aa:b3:a4:b0:
bc:2d:9b:db:7f:14:87:26:83:b9:ff:e2:08:26:ca:
a8:d2:d0:6b:6a:f4:aa:f1:c2:bb:92:55:b2:d2:26:
5a:d5:aa:ad:54:fd:e4:f5:57:dd:3e:88:50:9e:eb:
49:18:3d:9b:5e:ce:ad:7d:d8:e3:e1:3b:47:79:cd:
85:33:b5:c1:da:11:d5:36:39:11:5a:f3:ee:8c:ac:
5b:60:b0:83:5d:8e:24:12:ec:77:f8:27:5d:c6:9b:
fc:ea:12:a4:2a:47:cf:46:f7:56:c7:f3:50:33:12:
c1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:76:24:27:10:37:5F:77:62:16:25:7D:CB:7B:49:50:2B:32:F4:80
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tnYkJxA3X3diFiV9y3tJUCsy9IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:67:da:b2:2c:db:fa:33:88:4c:a2:c5:1e:d6:c3:1c:f9:b1:
86:93:14:55:6c:3a:31:25:02:a7:57:df:60:6e:93:14:6e:73:
ed:a1:7d:92:e8:7c:12:70:32:94:3f:65:d9:a1:d3:44:2b:5e:
b6:bd:f5:43:73:e2:e1:4b:68:ba:76:8b:cf:4c:ed:e7:5e:ea:
52:ab:3b:f2:20:b7:88:94:09:7e:6b:35:91:fc:af:10:93:0b:
72:e1:48:78:5b:69:e1:7b:5a:1c:d4:d9:1b:4a:54:e8:19:0d:
c2:6b:30:c7:fd:db:df:27:cc:9f:a7:da:e2:ef:43:5e:75:2f:
b9:d1:10:3c:53:d8:4b:1e:f8:4c:a3:de:dc:a2:a6:ea:6f:03:
23:af:25:34:7c:32:bd:f1:62:e4:9b:c8:77:d3:80:fb:24:10:
b1:e4:45:53:09:02:98:dd:b5:fb:0d:bc:52:ad:9d:dc:b3:2f:
3f:2f:e8:48:19:27:0f:b1:9a:86:52:45:c1:28:09:0e:a2:3e:
72:d9:ae:c4:0f:57:e2:59:4b:f7:dd:5e:5e:2a:d1:2f:2a:af:
61:75:81:86:af:0e:f1:6b:c0:fe:63:c3:a8:bb:4c:31:ee:c6:
39:f2:28:25:6a:7b:d0:c5:d8:00:ec:8a:55:01:67:e4:42:0b:
97:f6:f0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:38 2025 by rpki-client