Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yhndjF2jI9jdCu43w9jP53xjsV4.roa
File: yhndjF2jI9jdCu43w9jP53xjsV4.roa (raw, json)
Hash identifier: QmGem/usc2C6KwAllmnfG6zbidRpxDiLfYc6MfRf3SY=
Subject key identifier: CA:19:DD:8C:5D:A3:23:D8:DD:0A:EE:37:C3:D8:CF:E7:7C:63:B1:5E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DE822C0F7676F045BD78153BE1BA41364
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yhndjF2jI9jdCu43w9jP53xjsV4.roa
Signing time: Tue 27 Feb 2024 01:16:48 +0000
ROA not before: Tue 27 Feb 2024 01:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e8:22:c0:f7:67:6f:04:5b:d7:81:53:be:1b:a4:13:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 27 01:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca19dd8c5da323d8dd0aee37c3d8cfe77c63b15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:0f:46:d6:65:72:07:ad:30:df:52:78:69:
f5:ab:b7:13:2a:69:62:67:db:46:22:c2:fa:3a:8f:
87:88:56:4c:c2:6d:32:63:b0:8c:8c:db:c6:75:75:
26:64:d7:9b:d3:e5:f0:cf:bc:d4:f9:25:36:59:75:
80:27:7f:00:d5:b4:b8:dc:e9:d8:a9:69:84:3c:49:
6d:1f:68:cb:50:23:9e:da:a3:18:f7:81:84:25:10:
d8:c1:cd:8c:1b:40:18:ab:25:6a:35:12:1d:ab:d3:
12:30:d8:e4:bb:a4:b9:c2:e2:51:48:cc:09:fa:31:
93:74:7a:8d:8e:b5:82:08:36:43:8e:a8:20:4e:fb:
0f:f7:3b:f9:b2:a4:ef:09:93:f1:80:55:00:4a:67:
10:e6:e6:ad:93:9a:93:1a:70:4c:b3:e5:98:b0:e6:
b1:e4:4b:cc:ac:64:05:e1:0d:9c:40:b5:58:cd:93:
94:f0:3d:18:4c:ee:a6:6f:5a:ac:ab:8f:35:2b:62:
24:01:58:98:b9:75:9a:68:07:3f:c7:7f:d3:23:53:
af:97:63:e5:ee:c8:fc:a1:2b:9b:99:5e:84:07:8d:
cb:5b:db:ab:8a:c3:6b:32:19:64:5d:59:52:61:64:
23:de:e5:71:89:f6:67:ec:ee:b0:10:04:f9:a4:ad:
68:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:19:DD:8C:5D:A3:23:D8:DD:0A:EE:37:C3:D8:CF:E7:7C:63:B1:5E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yhndjF2jI9jdCu43w9jP53xjsV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:8c:cd:4d:49:be:38:61:97:1c:00:be:e8:e7:82:e5:86:b4:
29:ca:e8:43:5f:57:bc:b2:1e:57:45:7f:84:94:34:2a:15:39:
cb:33:d3:6c:cb:d1:85:94:5a:52:98:10:f7:80:45:68:57:94:
04:71:0a:b3:7f:c1:a5:d1:60:f4:24:5d:6d:bc:ed:39:48:3d:
eb:b3:3c:bf:b7:c7:ad:f3:8f:98:3d:4e:b6:cd:08:c6:6a:fb:
96:c2:f2:64:6e:27:0e:7c:c7:77:82:18:02:68:c0:04:36:92:
b3:8f:ad:55:c2:c4:d2:9c:1d:7b:27:b8:b7:cd:95:c0:7a:89:
40:61:4c:7e:a0:29:36:31:82:5d:1f:7d:a6:bd:04:db:66:95:
af:5b:86:d7:21:b6:e2:a6:e2:16:82:c4:89:e3:75:78:08:7c:
97:d9:ac:2e:a6:b4:d6:9b:93:3e:8b:64:f5:02:a6:2e:8e:70:
d9:68:16:2b:28:d7:28:2e:d6:8c:32:c3:c6:6f:62:73:c5:63:
d1:41:49:28:be:d0:1b:1f:e7:7b:70:e7:58:b0:a1:57:90:e1:
24:2f:f3:c8:fe:08:c3:2a:83:29:9b:cb:0d:cc:a6:d5:76:56:
83:b1:bd:0d:75:ba:49:7d:f8:e6:ea:cc:18:fa:bd:0f:01:ee:
a4:de:06:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:21 2025 by rpki-client