Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zkmPNzch3akzBMCVg7-lFCUDHhU.roa
File: zkmPNzch3akzBMCVg7-lFCUDHhU.roa (raw, json)
Hash identifier: uLSxFseFlH8ntY4vuLgBEhASzoz5L6bB7oPMetX3uko=
Subject key identifier: CE:49:8F:37:37:21:DD:A9:33:04:C0:95:83:BF:A5:14:25:03:1E:15
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E77086E89C74DDCCED095F0FEA94382DE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zkmPNzch3akzBMCVg7-lFCUDHhU.roa
Signing time: Mon 25 Mar 2024 19:13:45 +0000
ROA not before: Mon 25 Mar 2024 19:13:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:77:08:6e:89:c7:4d:dc:ce:d0:95:f0:fe:a9:43:82:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 25 19:13:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce498f373721dda93304c09583bfa51425031e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:57:0d:4f:e4:81:0d:84:b1:54:a9:ae:b3:36:
48:d6:17:f3:5d:b2:1a:c3:a8:96:a6:d4:64:ec:07:
1a:39:0c:b5:d8:37:ad:e1:b3:c7:93:06:92:73:25:
4c:72:09:05:3b:33:6f:ab:1d:07:28:85:36:28:3d:
7a:a7:cf:e1:be:53:80:e0:bc:16:8f:4f:65:50:26:
79:6a:85:6c:ba:74:9a:f9:08:34:57:85:96:4b:81:
5e:e2:ee:3c:44:2d:ee:5a:5d:ac:09:3e:27:97:a4:
5d:a9:24:ab:b6:48:70:74:b7:2a:77:ae:5e:10:68:
69:dc:34:9f:a4:bc:2c:ba:e0:d0:9d:82:46:38:1e:
46:14:58:af:97:ad:25:3f:30:3a:e7:e0:52:bc:16:
d4:b0:bc:4b:82:ea:d1:23:9d:3d:bc:1f:ec:ea:20:
cc:e1:e4:7b:d3:6a:9c:8d:9d:c2:69:ab:47:29:3c:
fd:93:19:b1:9d:15:60:11:77:ab:06:54:16:57:18:
6c:ca:ce:3f:7f:55:ff:b3:ca:5e:d2:20:22:e2:52:
03:dc:a5:cd:b4:83:6a:6d:c8:4a:5f:56:d5:ea:10:
4f:cd:cb:64:35:5b:51:b9:56:5e:30:f5:17:60:1b:
8b:a1:7d:5f:f9:1f:2d:a0:de:7c:29:e7:8a:66:47:
a0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:49:8F:37:37:21:DD:A9:33:04:C0:95:83:BF:A5:14:25:03:1E:15
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zkmPNzch3akzBMCVg7-lFCUDHhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:fd:f1:f6:64:d8:97:b9:0a:f9:0e:1f:6a:1e:42:26:c0:17:
a0:c2:f0:95:47:b8:91:fb:60:58:a0:1f:8d:e4:3d:05:0b:23:
80:b7:f7:4a:16:9c:95:44:5d:cb:de:05:52:76:31:eb:ae:b0:
ac:aa:98:16:4b:06:f9:17:2a:93:96:eb:17:12:89:6c:9b:98:
9e:69:0f:41:c5:25:a2:d1:3f:fa:99:37:65:45:06:03:40:90:
37:50:fa:20:f2:82:16:7d:27:b0:a5:b2:b1:22:d2:ad:d5:a3:
93:6c:43:ac:ec:86:e7:1c:68:2e:62:6c:bc:2a:f3:ca:f6:25:
15:03:12:b6:6b:34:a9:16:5b:aa:7a:da:e8:17:dd:24:22:b1:
7b:65:88:24:41:f6:c2:6b:91:4f:64:c3:a0:b1:fd:65:55:dc:
98:ee:fe:84:8e:fa:44:07:6c:18:0a:b1:ba:12:70:d1:9f:c5:
41:40:73:16:26:02:a4:b8:8b:a4:58:b2:e3:3d:63:d0:7d:cf:
17:aa:ee:b4:ff:d7:f6:a6:7e:7a:ad:8a:9b:04:fe:a3:57:51:
fb:4f:56:d8:ab:f3:07:61:7a:db:40:7b:5e:15:dc:fb:fa:12:
72:c9:84:da:43:d0:9a:07:b5:3d:27:3c:04:cf:8e:f4:60:4f:
b5:66:9b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:06 2025 by rpki-client