Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zCm_0jNHmqRzt7uq5RxUlPYt5Ws.roa
File: zCm_0jNHmqRzt7uq5RxUlPYt5Ws.roa (raw, json)
Hash identifier: IoE3G5aHyhzrES+F7JLj5gBzH/4UKPmpc+mBelox10I=
Subject key identifier: CC:29:BF:D2:33:47:9A:A4:73:B7:BB:AA:E5:1C:54:94:F6:2D:E5:6B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E2C26961E1299E1C274B74DFA16007F14
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zCm_0jNHmqRzt7uq5RxUlPYt5Ws.roa
Signing time: Mon 11 Mar 2024 06:15:10 +0000
ROA not before: Mon 11 Mar 2024 06:15:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2c:26:96:1e:12:99:e1:c2:74:b7:4d:fa:16:00:7f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 11 06:15:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc29bfd233479aa473b7bbaae51c5494f62de56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:04:d0:c4:8e:ed:b8:c4:e2:41:ba:73:f2:e3:
ae:b0:90:1c:da:db:e9:30:df:46:8a:ca:ff:0f:61:
f6:b4:3f:6a:f1:81:c9:40:9f:1b:83:d4:60:d6:6c:
da:ce:4a:09:85:63:4d:25:7b:2e:e8:09:c5:0b:39:
b4:ef:c5:d3:20:83:47:62:c8:f9:20:3a:34:19:9c:
f6:22:13:36:b7:02:3b:cc:c6:65:c7:bb:78:2c:5f:
28:f8:6b:e1:b9:f1:11:e5:e0:9f:ba:85:77:cf:a8:
73:5f:ec:a7:2d:0c:02:6a:92:50:4f:58:0a:49:ea:
7b:40:5c:b1:58:b1:9d:a7:7b:47:c6:7b:27:fd:25:
5e:db:23:31:44:af:df:d9:db:9d:78:55:5c:4b:42:
97:f3:e0:78:84:5d:ae:0f:64:00:00:71:ec:a1:7c:
81:f8:b6:22:9a:d2:ff:be:ee:83:4c:1b:64:fc:4d:
97:87:33:9c:44:48:d9:4a:69:db:ee:46:26:af:55:
89:e2:c6:7c:9a:c8:bf:c8:28:9d:d7:12:16:a2:8d:
c7:e7:01:11:e0:6d:5d:ad:30:4e:f5:aa:0d:14:83:
86:32:83:fd:7b:04:df:6d:98:63:c0:b6:a1:d6:15:
cf:4f:05:62:a5:0e:a1:9f:fe:81:fe:70:0e:94:33:
ac:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:29:BF:D2:33:47:9A:A4:73:B7:BB:AA:E5:1C:54:94:F6:2D:E5:6B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zCm_0jNHmqRzt7uq5RxUlPYt5Ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:52:89:c3:41:db:bc:cf:cb:e5:b5:36:7f:70:c3:c0:95:1d:
4f:ef:da:21:42:c7:dc:cc:4c:f7:a0:72:32:ee:b8:02:e9:1c:
09:7e:48:0c:c3:a3:d7:e6:7c:76:8d:d7:13:b5:b2:ea:b0:b7:
3e:61:e4:0c:74:ec:a5:f4:31:73:ce:c9:b6:f8:67:a5:56:b3:
49:a5:33:de:18:47:25:30:8c:db:63:04:83:4b:c2:b5:fe:36:
70:ed:b4:ae:45:59:f1:f9:3f:8d:23:9b:6d:b4:b6:47:98:09:
0a:6d:2a:4d:f3:1b:52:a9:eb:10:78:04:e8:6d:21:06:3c:97:
2b:e9:4d:0d:cf:10:31:a1:c6:0e:b4:d1:1f:c8:6b:9b:b1:c5:
8a:3b:db:7d:25:81:5a:a6:69:59:b7:ef:50:df:8e:7d:7d:88:
ce:78:83:99:17:99:d2:86:22:bf:96:12:48:47:73:73:00:0f:
9c:ca:66:fc:20:a5:93:9e:fc:b2:0b:88:c0:cc:88:4e:24:ba:
8f:a4:2c:4c:f5:85:1f:a1:c0:4a:82:87:e3:9f:f2:86:dd:22:
2a:2a:49:f9:ff:74:85:e3:f9:54:15:d3:bc:4a:0f:94:44:05:
ce:33:f5:6b:d6:21:ec:a8:bb:12:3e:e9:8c:c2:30:9a:ac:6d:
24:ca:b4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:49 2025 by rpki-client