Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xeOkKNZTWzPIvOoGAyLH9KNRKFY.roa
File: xeOkKNZTWzPIvOoGAyLH9KNRKFY.roa (raw, json)
Hash identifier: /39jZRLHKcvznnGJ0TwjtFM+PuVbVpS/MlBRN2d8ANE=
Subject key identifier: C5:E3:A4:28:D6:53:5B:33:C8:BC:EA:06:03:22:C7:F4:A3:51:28:56
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D17FD96EF336B54779818555F1FD5C42D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xeOkKNZTWzPIvOoGAyLH9KNRKFY.roa
Signing time: Wed 17 Jan 2024 15:15:11 +0000
ROA not before: Wed 17 Jan 2024 15:15:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:17:fd:96:ef:33:6b:54:77:98:18:55:5f:1f:d5:c4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 17 15:15:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5e3a428d6535b33c8bcea060322c7f4a3512856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2a:9c:00:2e:5a:fa:59:a0:fb:3a:f5:99:e7:
6a:b5:6d:f6:f7:53:8c:dc:eb:ec:0d:f1:ed:54:e4:
5d:d5:b3:a6:f1:ba:32:19:aa:74:03:c5:f1:6b:11:
10:c8:d8:7f:4a:1e:37:59:f2:40:97:ba:3f:9a:c6:
be:cd:a4:10:28:72:5d:c2:2f:7e:9e:ad:75:4d:e4:
82:56:9c:ff:e3:e3:f4:b8:c2:f7:fb:bc:83:9b:5f:
89:df:d5:c3:93:f8:71:d6:f8:28:c2:64:a9:7e:cc:
20:f3:80:bd:f7:88:4b:97:9d:10:fc:4f:72:fc:8d:
f3:5a:30:6f:1d:e1:de:1e:5b:db:e8:c2:a6:57:c8:
4a:f2:3d:8b:b4:89:a0:4b:b0:ff:c3:1f:10:29:42:
82:66:50:c4:2d:59:94:c6:70:b1:8d:a8:6f:73:e5:
26:c6:01:94:53:8a:20:20:bf:40:6b:b1:cb:a0:a7:
9a:ec:0f:ff:bb:03:f3:17:b3:8b:41:d0:97:fc:d8:
18:58:b6:da:ee:49:ee:b5:d0:88:f9:13:78:70:46:
a8:13:0f:19:fb:01:ba:2f:3b:6d:11:a9:fe:d7:db:
40:e3:6a:76:e3:06:0f:36:a1:9a:8e:0c:51:55:15:
ae:28:50:2e:ea:10:70:4a:b2:e8:5b:1d:4c:63:71:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E3:A4:28:D6:53:5B:33:C8:BC:EA:06:03:22:C7:F4:A3:51:28:56
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xeOkKNZTWzPIvOoGAyLH9KNRKFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:e1:73:52:b9:85:37:a0:7d:e5:45:14:76:21:7c:63:ea:24:
61:15:69:1b:48:d5:e8:20:99:96:b0:79:80:95:73:83:e7:e0:
47:5b:79:17:7a:12:1c:bf:5c:db:1e:c9:2a:81:13:5f:db:8c:
fd:05:3e:37:93:18:8c:e3:1a:c2:0e:ef:bd:ba:66:f7:43:ff:
c9:39:04:a7:9d:81:67:94:a4:89:4e:e8:5b:4e:62:7c:b6:b7:
3e:d5:da:9c:32:05:51:e7:9a:51:8f:c8:5c:30:49:37:0b:5e:
16:36:61:8b:14:ab:46:7c:36:7d:4b:52:ff:dc:66:8c:dd:1b:
b4:a6:27:6c:e8:8e:fe:80:54:0e:43:1a:dd:54:42:75:b3:89:
66:03:a6:fe:77:50:40:cd:fa:16:47:d1:59:f6:05:42:fb:75:
51:cd:44:0f:bb:67:66:64:f5:97:bb:a3:29:69:2d:9c:bd:80:
7f:7c:aa:5a:7b:47:7f:2b:f3:8b:42:0f:09:a5:fb:d2:82:6d:
0a:81:b2:63:4c:32:bf:28:fc:b8:e8:4d:e4:b1:8d:3e:3e:c3:
b2:f7:5e:40:6d:52:6d:d4:4a:d8:d8:a2:86:8b:8c:63:ad:3b:
81:8c:28:e9:05:86:e3:d0:3e:5e:2f:58:ed:bf:2f:0e:d6:29:
25:f8:c3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:24:42 2025 by rpki-client