Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zEophY2zk4jmbJyNE1j_MW5xQOs.roa
File: zEophY2zk4jmbJyNE1j_MW5xQOs.roa (raw, json)
Hash identifier: 9vlejpwkyR8BWTNehAU1YIXc/WqCxtDebPoG5/Xwv20=
Subject key identifier: CC:4A:29:85:8D:B3:93:88:E6:6C:9C:8D:13:58:FF:31:6E:71:40:EB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB6163B8B6505ACDF0F4D9EA61167C6E1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zEophY2zk4jmbJyNE1j_MW5xQOs.roa
Signing time: Sun 07 Apr 2024 01:04:54 +0000
ROA not before: Sun 07 Apr 2024 01:04:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:b615:9d5f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b6:16:3b:8b:65:05:ac:df:0f:4d:9e:a6:11:67:c6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 7 01:04:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc4a29858db39388e66c9c8d1358ff316e7140eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:53:40:e9:cd:ba:2e:19:24:78:97:52:ef:ee:
30:62:88:0b:b2:d5:ff:7f:ce:36:67:19:79:91:ab:
c5:74:b2:af:ea:b4:ae:41:d7:f0:e3:1d:82:fc:f9:
37:0f:e2:5b:02:a3:7b:51:2c:6c:7b:19:56:d3:1a:
c4:29:ae:39:57:d1:12:22:7e:96:e6:30:a2:82:f6:
a7:2f:d9:a4:a5:d3:2c:d4:dc:0e:61:55:12:67:2f:
cd:2d:c5:ed:75:1e:7a:44:2f:a6:ae:f6:8c:ff:6d:
84:cb:51:a1:23:28:7d:2c:6d:f1:93:83:94:a1:69:
8c:a8:94:17:76:81:27:d2:1f:3b:a6:27:de:18:9d:
88:bd:8b:d4:83:2a:30:a9:0e:99:b1:88:1b:81:5e:
c9:ab:3f:82:68:f1:7d:fc:eb:4a:8d:60:73:d3:71:
70:29:fe:f4:0b:20:16:5e:07:f8:8b:d0:42:8b:0c:
1b:f5:09:2c:54:c4:5a:39:f3:42:43:e8:e5:59:e3:
55:54:a3:27:62:16:cb:46:72:64:06:a5:0f:16:28:
21:4b:52:09:b2:9c:7f:02:73:61:49:27:a8:e8:22:
aa:c3:f2:0f:3c:3f:ba:83:d2:56:1d:51:ae:a2:6d:
2d:5b:ad:dd:0c:c6:f4:93:c8:8a:6e:da:90:99:73:
d0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4A:29:85:8D:B3:93:88:E6:6C:9C:8D:13:58:FF:31:6E:71:40:EB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zEophY2zk4jmbJyNE1j_MW5xQOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:3c:06:96:cd:d2:30:36:21:f4:6c:ee:e1:74:bc:f4:1c:3c:
a4:94:a6:70:0f:f8:40:33:94:15:02:f1:60:a0:3e:3c:e1:3d:
72:20:f8:e0:f0:77:78:d0:53:1a:3f:f7:47:4d:ce:39:0d:dd:
8c:de:b8:ac:cb:49:42:a9:51:ab:39:e1:41:27:0b:f1:2d:ff:
8c:c4:ce:78:20:dc:d1:0a:29:66:bc:5b:75:0f:87:e4:49:85:
1a:df:89:60:cf:80:21:06:c8:f1:20:e4:38:e9:17:9b:02:3a:
38:1b:ef:8e:c7:6d:1a:41:86:22:2c:c0:fa:1a:9b:0a:bd:89:
4f:11:cb:f9:62:c8:34:98:e8:fe:97:6d:2f:94:cb:0a:05:e8:
27:df:b2:15:99:08:57:4c:73:60:11:68:d3:a2:37:46:e1:25:
5f:da:e4:01:5b:a7:6b:7c:38:7a:12:aa:7f:1f:9c:7e:89:af:
42:8b:c6:08:f6:62:b8:77:b7:72:3e:72:6b:1c:0a:ca:5e:dd:
88:0d:1d:64:54:b5:e3:af:c8:5f:51:da:f4:d6:a8:72:a8:96:
d4:51:3e:8e:96:ff:58:4d:77:fb:d8:b4:1f:b3:1b:c9:5c:8e:
e5:48:5b:a2:04:47:a3:a4:1e:dc:ca:ec:84:a5:fa:fa:4d:75:
0c:86:70:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:35:59 2025 by rpki-client