Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vLKK2XFPrWa-dU8_svEleSvrkgI.roa
File: vLKK2XFPrWa-dU8_svEleSvrkgI.roa (raw, json)
Hash identifier: famu0uQFx7Ppzaxo4gYoV7rdx9VVl4u0Jz36mm/ujkY=
Subject key identifier: BC:B2:8A:D9:71:4F:AD:66:BE:75:4F:3F:B2:F1:25:79:2B:EB:92:02
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D672A84CC03B3667F7CD8118F9DFD045F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vLKK2XFPrWa-dU8_svEleSvrkgI.roa
Signing time: Fri 02 Feb 2024 00:14:16 +0000
ROA not before: Fri 02 Feb 2024 00:14:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:67:2a:84:cc:03:b3:66:7f:7c:d8:11:8f:9d:fd:04:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 2 00:14:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcb28ad9714fad66be754f3fb2f125792beb9202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7f:f1:cb:56:b5:2b:85:b8:d1:c3:09:ad:e4:
61:fb:b2:10:b4:ee:24:a4:69:fc:e5:5b:35:87:50:
02:fd:a4:a6:ad:d0:33:5b:f7:48:e5:35:58:f8:e8:
6f:4a:b5:0d:76:48:45:24:e5:64:78:8f:84:34:28:
59:02:c3:7a:c3:14:65:20:84:83:5c:df:cf:53:80:
d9:cf:e4:27:21:8b:f6:08:7b:40:c9:6c:4f:4d:ac:
b1:dc:24:d3:19:3e:e3:60:9b:f5:9a:66:5a:71:0f:
8c:6d:cd:5c:89:cf:c3:9c:99:45:3f:e6:f7:19:d5:
c8:95:c2:cc:7e:f7:68:b4:95:9c:44:f0:8e:50:76:
81:d8:da:69:f1:d0:c5:2a:4f:5e:a8:c1:da:80:46:
91:3e:f6:75:e7:74:92:3c:97:19:a2:7d:0c:6e:5a:
35:fa:27:2e:93:14:c8:31:24:ff:67:6b:14:f3:ec:
43:f8:b9:ff:8d:5c:37:6f:67:33:9a:a5:90:28:d2:
4f:83:59:c6:aa:56:0f:90:5f:01:eb:a0:0c:74:f6:
e0:46:b2:bc:7c:3c:14:15:29:c8:35:08:47:a6:5f:
0c:6f:48:f3:7e:68:b1:b1:77:a8:d9:7e:57:cb:72:
6c:75:1c:54:10:27:15:f4:3b:dd:81:88:52:b4:56:
1d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B2:8A:D9:71:4F:AD:66:BE:75:4F:3F:B2:F1:25:79:2B:EB:92:02
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vLKK2XFPrWa-dU8_svEleSvrkgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:4a:60:5b:d8:49:35:00:da:ac:3b:52:09:18:7e:16:c4:e9:
e9:0e:5c:8c:bf:8a:29:af:9e:98:9f:39:14:61:97:42:b1:f9:
3d:18:50:f2:58:52:c4:2f:37:a1:d6:97:b3:08:f6:7a:8f:21:
3f:4f:e3:bb:0d:c1:b2:e5:96:fb:a9:03:2f:84:b7:43:20:42:
5c:02:bd:bb:85:c0:44:7f:25:12:91:89:0b:ec:b7:e6:07:1c:
14:3e:6e:21:9e:4b:6e:44:a5:bd:f6:7a:60:66:75:b9:4e:5f:
f7:4e:cf:d8:94:c5:b3:47:b8:33:1d:55:b8:fb:fb:3a:4e:c7:
fe:e7:e5:e9:05:99:1b:fe:c4:95:5a:47:af:3d:62:9a:1d:fc:
e9:93:79:49:68:f2:db:d2:05:73:76:d4:b4:7e:8c:8c:85:c7:
11:a5:a0:da:8e:df:5c:26:55:03:0e:7d:43:43:01:de:28:97:
76:cc:d1:1a:d0:02:f6:07:c2:89:e4:2a:1e:b4:be:1f:e7:79:
e8:77:9f:1e:3f:29:9f:c3:61:3c:c7:d3:cc:0b:58:47:be:58:
0c:7f:c4:20:f7:7d:c8:51:05:a7:63:23:14:98:72:60:93:47:
9f:b0:5e:4f:1f:9f:eb:be:2c:89:07:d9:22:8a:ef:cc:d6:d8:
19:dd:16:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:47 2025 by rpki-client