Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/v2k6TUuKEsJRlT7PZIbILnbI9R8.roa
File: v2k6TUuKEsJRlT7PZIbILnbI9R8.roa (raw, json)
Hash identifier: LtNe+xfO83jmZQj2hGdWlLUDp13KLIoKrEs4e/usNOM=
Subject key identifier: BF:69:3A:4D:4B:8A:12:C2:51:95:3E:CF:64:86:C8:2E:76:C8:F5:1F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DDB744BFA594885C4752C8A3DE9C61341
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/v2k6TUuKEsJRlT7PZIbILnbI9R8.roa
Signing time: Sat 24 Feb 2024 14:10:48 +0000
ROA not before: Sat 24 Feb 2024 14:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:db:74:4b:fa:59:48:85:c4:75:2c:8a:3d:e9:c6:13:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 24 14:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf693a4d4b8a12c251953ecf6486c82e76c8f51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:b0:2c:c6:2b:e6:70:9a:89:2a:14:d2:80:
bc:e2:68:0a:f4:af:98:0b:02:89:49:e2:48:d4:46:
e6:e7:b9:43:29:be:c1:1e:30:0b:63:ca:a1:8b:57:
60:c5:91:e4:31:8e:df:59:ae:75:e8:e0:18:96:6f:
b9:61:ea:1f:8f:de:47:4e:a3:46:80:98:ad:b3:f8:
4f:d6:04:c9:72:4f:9f:96:65:29:8b:4f:ed:e7:ae:
83:5a:3e:e6:e7:a7:cc:37:8b:27:c2:03:42:c3:48:
fd:ea:4f:6f:69:24:f7:7e:ca:98:2f:d7:93:53:27:
3d:f3:bf:c3:1c:3f:be:28:fe:fe:56:e7:7e:a4:f4:
c4:3a:b6:b2:31:6c:e0:ff:b2:1c:12:57:bf:7a:44:
51:8a:c2:ed:1f:57:9b:3a:c2:46:32:03:db:e7:5d:
da:a9:ba:9c:83:d7:68:bb:0c:c1:d7:1d:7c:eb:da:
fd:10:cf:83:d0:28:c3:08:6b:9e:2c:8d:83:82:af:
81:6e:45:60:9d:31:12:d6:bd:1f:95:59:df:1f:f0:
56:76:5a:b0:07:e4:ca:a2:b9:01:72:00:7c:47:6c:
e6:e4:49:76:a0:f6:37:87:7a:30:ad:0a:36:63:83:
6e:0f:c6:c0:3c:20:f6:c9:d0:04:8b:79:b1:c8:94:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:69:3A:4D:4B:8A:12:C2:51:95:3E:CF:64:86:C8:2E:76:C8:F5:1F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/v2k6TUuKEsJRlT7PZIbILnbI9R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:5a:b1:d3:80:6d:dc:99:20:65:92:5f:da:a5:66:10:a2:c8:
41:d0:6a:1f:06:aa:f3:96:b4:ae:e6:d3:c0:d3:dd:5c:d8:77:
85:fa:3f:22:0a:1b:85:8f:8e:ca:69:0c:a4:10:8e:45:33:c4:
76:c5:7e:c8:2a:ea:d6:71:52:72:bb:fc:9f:d6:dc:9d:06:0d:
c6:05:75:66:d4:ce:ad:33:4e:79:8c:5a:2e:f1:55:2e:c1:3b:
38:4a:bf:c2:05:c6:c2:64:ef:e1:fb:cd:10:eb:0f:8c:f5:dd:
12:a4:53:7b:97:1d:07:88:ab:cb:60:0f:2f:14:c9:b9:bb:44:
6c:1b:92:8b:1c:12:7d:e0:59:06:aa:a7:3a:69:65:c2:8b:a5:
38:83:7b:8c:0c:d8:84:6d:aa:69:9d:ed:72:35:e3:db:d2:d5:
5f:ef:91:d7:fa:a6:44:96:aa:95:e0:5f:ce:d2:b0:81:2f:61:
17:6e:1a:a6:b6:43:5f:38:02:eb:9b:06:9b:41:12:c1:43:66:
c2:d6:5e:9e:4b:96:6a:8c:a6:79:2d:7a:9a:5d:6e:a8:f0:ed:
37:1c:69:e2:04:58:56:b0:02:a2:b3:31:e2:88:52:4b:9f:cc:
c8:0b:06:9b:02:86:84:7b:c5:1f:d5:9d:04:6b:f4:10:72:2e:
c9:94:77:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:27 2025 by rpki-client