Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xk2OszEh7janxyQ2G2HDlvv1n6I.roa
File: xk2OszEh7janxyQ2G2HDlvv1n6I.roa (raw, json)
Hash identifier: qkM4U1bQUPkTrT+O99j9xKNQMPxup6nk2RXiKxRBAmI=
Subject key identifier: C6:4D:8E:B3:31:21:EE:36:A7:C7:24:36:1B:61:C3:96:FB:F5:9F:A2
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C98184BB84729183FDA964D3EEA0F4EEE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xk2OszEh7janxyQ2G2HDlvv1n6I.roa
Signing time: Sat 23 Dec 2023 19:12:58 +0000
ROA not before: Sat 23 Dec 2023 19:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:98:18:4b:b8:47:29:18:3f:da:96:4d:3e:ea:0f:4e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 23 19:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c64d8eb33121ee36a7c724361b61c396fbf59fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3d:4b:82:db:1b:20:cd:dd:d8:69:fc:39:a8:
25:2d:0e:46:d8:96:d0:de:42:60:90:74:0e:3a:ae:
79:5b:03:c3:01:a2:22:de:f6:6d:cc:4f:e7:c3:58:
82:25:56:7d:2f:93:7e:a3:b5:96:e6:3f:57:30:08:
0c:06:02:1f:f1:eb:a6:c7:a1:0b:93:3a:39:ba:2a:
62:c9:81:95:52:eb:ff:06:db:ba:0c:af:24:dc:5e:
10:74:7d:3d:b0:8c:e7:f9:13:bc:64:e7:cc:6c:59:
09:0d:7a:1e:e4:3e:ab:27:df:16:d9:14:34:c7:21:
17:57:1d:85:7b:58:c7:ea:d6:9f:b7:f2:5f:de:16:
93:11:a2:eb:14:70:86:b7:4e:19:8b:e2:2d:0e:26:
51:1a:88:94:1e:dc:2b:e5:7b:9a:b2:73:a3:06:53:
d4:00:56:ef:88:ff:f5:ac:06:db:75:29:99:b5:9f:
32:a8:a7:17:05:e4:4d:90:ea:7d:c6:17:55:5f:3b:
3c:27:8b:21:35:f1:26:59:74:a5:fb:8c:38:e7:69:
9e:7a:8b:2a:ce:99:f3:09:16:cb:e4:60:0f:6d:4a:
a4:84:e0:5f:fe:8d:bb:67:ad:cf:25:ce:12:16:05:
01:2b:bd:bb:54:4a:97:98:34:0a:97:a8:0b:f4:34:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4D:8E:B3:31:21:EE:36:A7:C7:24:36:1B:61:C3:96:FB:F5:9F:A2
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xk2OszEh7janxyQ2G2HDlvv1n6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:2b:39:9a:e4:da:b5:8a:75:49:7c:4e:64:ea:c8:23:06:18:
48:0a:8c:06:75:84:d2:bc:ed:07:4b:d2:e5:9f:83:63:5e:f1:
a5:ea:c9:d1:e5:f2:58:86:e0:c6:5c:7f:c0:db:89:80:e0:cb:
d3:38:59:cc:2b:b8:08:30:cb:a0:14:26:46:85:b7:3f:b7:5b:
01:c5:e3:28:34:74:12:da:5e:a6:b5:d9:fb:04:d8:02:90:3f:
67:06:31:7d:fe:b8:6d:3b:75:66:f3:bb:92:93:f7:b0:1c:31:
ed:15:02:10:1f:8e:14:c0:6f:a8:9c:eb:19:86:e1:a6:01:32:
96:18:c3:bd:91:66:61:bb:ce:da:87:3c:08:6a:1f:2f:e5:74:
f2:9e:e4:b0:21:c2:36:90:4d:2e:41:7b:12:71:66:9c:29:ea:
7e:a0:ec:83:74:7b:73:9b:d9:a7:d3:fc:06:bd:54:4b:51:bf:
83:c9:54:a2:1c:71:e0:5c:eb:f7:fb:08:57:86:58:75:63:a6:
36:8e:90:be:0f:ba:ea:1d:6a:86:a9:35:4f:89:cc:f2:ef:94:
24:a9:cd:66:51:92:74:c6:fd:0a:43:9b:a8:1f:0e:2c:11:5c:
37:a4:b4:4b:72:f5:2b:33:7b:4f:26:aa:74:2c:0a:73:c6:0e:
dc:9e:55:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:30 2025 by rpki-client