Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zUQ-uTIurnAtmMnleRKxqINEwj0.roa
File: zUQ-uTIurnAtmMnleRKxqINEwj0.roa (raw, json)
Hash identifier: duejRZHhYmqFuRmgnUJJYlyRgv48OCL5NFSlb5KpavQ=
Subject key identifier: CD:44:3E:B9:32:2E:AE:70:2D:98:C9:E5:79:12:B1:A8:83:44:C2:3D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EC7B59F5CD2DF2F710D1C366D20019DD8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zUQ-uTIurnAtmMnleRKxqINEwj0.roa
Signing time: Wed 10 Apr 2024 11:12:32 +0000
ROA not before: Wed 10 Apr 2024 11:12:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c7:b5:9f:5c:d2:df:2f:71:0d:1c:36:6d:20:01:9d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 10 11:12:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd443eb9322eae702d98c9e57912b1a88344c23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a4:40:65:b2:dc:9a:ee:e8:52:4d:09:c7:6c:
eb:1d:45:1d:bf:47:0a:0b:75:82:b2:94:ba:98:35:
b5:c7:47:72:c5:a9:ac:97:c5:7d:9b:4e:04:48:0a:
9c:c3:ad:b3:c8:d6:67:e2:6a:b9:ca:26:da:f4:46:
08:f6:0b:41:6f:ee:62:2c:77:dd:ce:e0:38:f0:42:
43:b5:39:7a:4e:84:b6:ce:37:00:c8:24:18:59:68:
39:28:52:8a:4a:72:55:be:df:b1:6f:1e:6c:da:da:
7d:20:77:e0:8b:98:f5:fc:f4:2d:7b:83:f0:3e:07:
0d:84:e9:38:e1:40:72:f3:81:ca:3c:5f:14:4d:50:
80:87:18:b7:bd:76:ff:ae:1b:0d:f5:ea:f0:e0:5f:
bd:f9:ad:a5:ce:f7:2e:b0:36:24:6c:be:d0:6a:d9:
12:c4:f0:d0:2a:a4:44:c1:f4:7c:6a:18:af:55:36:
8d:bf:57:84:95:38:09:4f:60:60:7e:9c:98:92:46:
e7:e6:38:ea:a8:85:26:30:67:7d:58:f3:b3:5b:98:
3d:23:24:75:9b:cf:0c:52:4b:e9:2f:3c:97:78:ba:
c2:09:32:50:ad:ba:23:20:47:f6:75:b9:86:4b:3c:
67:39:92:d4:d5:a4:ea:df:6c:a5:b8:37:02:37:a7:
fd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:44:3E:B9:32:2E:AE:70:2D:98:C9:E5:79:12:B1:A8:83:44:C2:3D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zUQ-uTIurnAtmMnleRKxqINEwj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:c7:a0:b5:1c:b4:6f:8c:cb:65:9d:e2:eb:69:c8:02:b2:0a:
a4:05:f4:8e:86:46:fe:63:bf:cb:c3:af:ce:87:0d:57:2d:4a:
6c:d8:32:e5:a6:ba:c4:ea:51:fc:27:a2:dc:a8:2e:d1:5a:b8:
1d:24:8b:74:18:69:d4:52:44:69:69:73:71:f5:6f:45:12:d3:
d5:d3:d6:54:f1:cf:de:f1:e8:c6:01:e7:89:18:72:0a:17:89:
3c:1f:26:e8:af:19:f8:ce:6b:34:5c:d1:c1:be:87:bf:7b:2b:
a1:92:db:db:fc:73:5d:9a:5b:e2:87:ab:83:6b:a0:48:51:f3:
49:4d:b1:d7:97:fc:fa:9a:ba:d8:a5:c3:2c:aa:ba:ae:4b:4c:
7c:25:91:53:4f:52:43:46:a1:84:bd:ad:2e:a2:aa:71:d6:43:
f4:4a:26:8a:c4:1e:40:1f:4e:32:de:14:b6:b2:55:3a:4a:eb:
69:70:a1:3d:9e:9b:4e:70:0f:e9:70:9a:42:33:30:a0:bd:4d:
3e:f9:9d:99:03:1e:1f:d0:ca:7e:9c:b8:39:bb:79:bd:0a:78:
fd:85:4b:78:db:b0:ac:22:b9:a6:ca:bc:ba:5e:09:1a:9f:86:
62:c5:38:68:c5:b9:9e:75:77:46:01:ed:96:71:ce:09:98:ba:
a1:c6:e9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:08 2025 by rpki-client