Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/z1O8pB-zkkBEdrqsbAHOXkDbxV4.roa
File: z1O8pB-zkkBEdrqsbAHOXkDbxV4.roa (raw, json)
Hash identifier: GI8u+fsoBL+5TZEyPM57NIvmUtZdET+1/wXGPXrCwUc=
Subject key identifier: CF:53:BC:A4:1F:B3:92:40:44:76:BA:AC:6C:01:CE:5E:40:DB:C5:5E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E54E6A3DEC2262B19D85BDB379F7575B2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/z1O8pB-zkkBEdrqsbAHOXkDbxV4.roa
Signing time: Tue 19 Mar 2024 04:09:45 +0000
ROA not before: Tue 19 Mar 2024 04:09:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:54:e6:a3:de:c2:26:2b:19:d8:5b:db:37:9f:75:75:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 19 04:09:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf53bca41fb392404476baac6c01ce5e40dbc55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:95:d6:52:55:cf:91:0e:1d:f9:46:a0:89:
8f:95:74:6d:03:22:e2:c0:37:6f:1f:d4:ee:5b:d5:
6e:27:9f:b8:91:e2:37:ff:a2:0c:b3:8a:87:fc:b9:
2e:b5:dd:dd:ca:c7:cc:81:93:1f:f4:dc:a5:dc:51:
99:28:7a:9b:49:46:33:69:fd:28:b0:40:be:f3:9f:
00:df:d1:b7:5f:e4:5e:77:f6:20:ff:de:6d:e1:e1:
c2:8a:1b:5c:73:c5:aa:c2:0b:d8:1f:c1:fa:55:88:
d9:47:2b:03:1a:ae:9c:f0:ea:a8:7b:a2:a7:e0:92:
f1:6e:e0:14:5e:f5:8d:bd:1f:ba:07:d8:05:b0:d0:
36:ce:c2:07:36:01:74:cc:be:ff:91:93:70:9a:59:
7e:da:a0:7c:bc:15:36:34:c3:97:df:00:b0:03:3d:
be:32:03:51:02:fc:0f:cc:23:87:4b:a1:fe:ed:0e:
41:99:e9:67:02:41:44:c2:1b:9b:f6:74:49:9f:45:
b6:58:d3:9e:cc:c8:8d:8b:12:b8:46:5f:c2:5f:69:
aa:79:b9:f3:db:f8:0f:5c:b8:84:b7:12:ee:60:56:
af:7c:8b:c3:c2:a9:e6:2a:ee:c6:97:24:bc:c1:a5:
41:08:95:68:34:0d:f8:51:95:50:14:c1:ac:d1:ab:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:53:BC:A4:1F:B3:92:40:44:76:BA:AC:6C:01:CE:5E:40:DB:C5:5E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/z1O8pB-zkkBEdrqsbAHOXkDbxV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:87:bb:42:b9:36:94:b9:88:91:1c:94:1b:2b:d1:ed:2b:85:
b3:b4:b1:c2:09:31:68:97:67:a9:bf:35:ac:5a:2c:ed:f5:20:
a2:59:d3:5f:17:cc:76:fe:7a:e2:47:2c:ec:b0:f2:0d:e0:43:
8d:85:80:ff:20:ca:73:38:0a:87:4f:2c:70:9e:a8:a6:53:b9:
6c:eb:b1:42:24:b6:c6:c9:fc:03:64:17:77:4d:8d:76:5a:5a:
af:12:45:60:92:75:4c:8b:15:89:12:8d:e5:83:14:97:aa:a7:
1d:a0:54:ad:df:ca:0d:c5:b3:94:b0:18:0d:52:33:cb:e4:b0:
93:e5:42:f2:a7:3f:03:f2:5d:da:86:bf:24:29:54:67:01:ca:
eb:73:36:3a:f5:09:51:6e:c5:21:88:b1:09:17:37:ab:24:79:
8b:9e:cf:1f:2f:b6:3c:d6:03:57:2b:74:3c:6e:6a:b6:59:dd:
92:6b:29:17:2e:dd:f5:6b:23:1b:05:bd:d7:2b:b4:6e:2f:4c:
50:03:1b:ab:1c:00:ed:8f:39:ed:d0:2d:e8:b8:e6:5e:79:8d:
bb:73:0c:36:34:26:42:a1:d6:ef:f6:d2:51:a9:22:02:e7:c0:
d2:5e:8e:b4:45:1f:7c:00:f4:18:f3:5d:d2:87:b8:40:03:60:
e7:6a:24:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:07:28 2025 by rpki-client