Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uZ18LNCzyKLvYDR_c-E9rF9r5KI.roa
File: uZ18LNCzyKLvYDR_c-E9rF9r5KI.roa (raw, json)
Hash identifier: tEuEO2NwjkDwXUHj9eZLNOvftN4nzPcACZaxryVcTBU=
Subject key identifier: B9:9D:7C:2C:D0:B3:C8:A2:EF:60:34:7F:73:E1:3D:AC:5F:6B:E4:A2
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E43F5C9AD897ADC48F4C3BDC89D3FDC21
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uZ18LNCzyKLvYDR_c-E9rF9r5KI.roa
Signing time: Fri 15 Mar 2024 21:12:45 +0000
ROA not before: Fri 15 Mar 2024 21:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:43:f5:c9:ad:89:7a:dc:48:f4:c3:bd:c8:9d:3f:dc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 15 21:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b99d7c2cd0b3c8a2ef60347f73e13dac5f6be4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:4f:3b:82:eb:57:aa:9c:bb:3e:73:c1:9a:
de:8a:28:ed:ec:fd:e1:82:04:4b:15:86:1e:74:a3:
2b:3f:22:4f:c7:94:94:e0:43:54:99:71:b5:9e:76:
f7:ae:f9:5f:e1:a0:97:21:9b:11:31:b7:9b:63:aa:
c1:ea:23:8b:ca:94:22:b6:cc:bc:18:08:8d:e3:4d:
0e:44:47:61:c5:97:29:c9:68:a4:4e:0f:cb:45:4e:
3b:ae:52:28:a2:7a:67:1e:13:2f:f9:34:dd:9b:6b:
8b:5f:94:58:ef:bd:59:24:e7:33:dd:e7:96:a5:be:
3f:d3:c3:68:b5:16:db:e1:0a:f5:27:f9:09:ac:0c:
34:c0:44:bf:d6:ab:51:b2:f8:02:50:3a:f4:2f:4e:
4e:0a:a5:0f:9d:57:68:f6:8b:5a:b2:d9:2f:45:30:
f0:20:fb:fb:53:50:e4:55:a8:74:b4:15:6b:f4:21:
19:c6:26:27:20:93:31:0e:bd:b9:6e:9c:b4:d7:62:
1a:cb:c1:1c:33:48:f0:da:df:5b:72:00:7a:20:4c:
78:3a:ca:36:dd:fc:3a:31:0c:a3:3d:8f:7a:ac:76:
97:82:ea:05:5f:f8:aa:ed:3b:5a:d4:14:0e:05:02:
62:b5:dd:0e:c0:8c:3e:42:2c:11:3d:56:bd:08:d6:
48:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9D:7C:2C:D0:B3:C8:A2:EF:60:34:7F:73:E1:3D:AC:5F:6B:E4:A2
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uZ18LNCzyKLvYDR_c-E9rF9r5KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:a1:b0:dc:29:9c:7b:f0:ca:c4:f6:92:84:19:41:b2:76:d5:
fe:cf:eb:54:9b:a5:32:48:f7:0e:62:12:24:f9:de:48:5f:04:
62:6f:c9:7d:b4:ee:f4:6c:ba:29:3e:26:3a:4c:98:c9:6e:6d:
64:67:de:9d:5d:fc:c6:33:4d:c5:d1:8d:83:5c:ac:65:9e:03:
ce:5c:36:32:b6:5c:69:fe:a6:5b:70:69:83:74:39:a4:0a:a6:
6d:48:a5:7f:00:b8:86:4f:0d:16:2f:e8:af:f6:af:11:c9:12:
56:85:ac:f3:79:3f:69:34:b6:90:f7:e5:f7:e9:77:12:3e:df:
50:e7:b6:67:9e:55:1b:69:c3:3e:d4:24:bd:3a:43:d0:10:40:
40:38:7a:fd:a8:5a:f8:59:d6:57:70:66:05:1a:39:cc:dd:3b:
d2:92:5e:c3:e3:08:79:f5:0b:a8:ef:e8:e5:1b:87:25:81:b2:
60:4b:d7:b7:a1:54:72:1a:b3:39:ef:65:c1:c0:91:a0:1c:4b:
1f:c9:a3:7e:bf:69:13:99:88:0d:22:43:34:74:44:de:de:d6:
8e:85:c3:30:5d:35:29:03:a0:3e:48:41:e9:5b:95:8f:82:17:
de:c8:78:f0:92:15:24:c6:a8:49:0f:dd:6a:91:d7:50:95:c8:
22:61:55:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:57:00 2025 by rpki-client