Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zvXH-IDBKyQan_TFjgYXuoQeXpU.roa
File: zvXH-IDBKyQan_TFjgYXuoQeXpU.roa (raw, json)
Hash identifier: Y4lmkMnttJttjboz/3KjvBW7ZLsZ0/FawniNX3QMfPs=
Subject key identifier: CE:F5:C7:F8:80:C1:2B:24:1A:9F:F4:C5:8E:06:17:BA:84:1E:5E:95
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DA4C34EC9312A1862B906DE791E1DD7FC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zvXH-IDBKyQan_TFjgYXuoQeXpU.roa
Signing time: Tue 13 Feb 2024 23:17:59 +0000
ROA not before: Tue 13 Feb 2024 23:17:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a4:c3:4e:c9:31:2a:18:62:b9:06:de:79:1e:1d:d7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 13 23:17:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cef5c7f880c12b241a9ff4c58e0617ba841e5e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:77:7f:62:37:51:50:87:d1:74:13:90:59:aa:
da:d8:6b:16:b9:77:c3:e3:e0:d5:07:75:af:76:b1:
5e:54:80:2b:9b:d1:9a:ad:0d:53:53:58:0e:5c:c4:
ea:40:9d:79:c0:5c:ef:41:43:ba:f9:ba:03:66:d5:
b9:71:67:a9:8f:1e:f7:76:01:ec:d2:e0:43:21:bd:
ea:82:1c:63:82:dc:c8:c7:7a:cb:94:56:62:09:ed:
d1:22:a6:96:ba:13:2e:8e:a5:49:ee:fd:ce:39:fa:
30:ee:25:53:0f:0e:ee:1a:06:08:d1:d3:cc:cd:95:
2f:6f:20:ce:3b:03:d1:7b:14:de:e0:13:d9:c5:7a:
be:24:84:de:70:1e:c6:da:17:cf:cd:1e:b5:e6:a0:
5a:f2:5c:d7:4a:99:b2:b0:fa:51:dc:91:eb:8e:6e:
d4:86:32:c7:82:46:a8:1b:d0:56:40:f8:9e:1f:f0:
55:2b:55:3d:ee:32:a9:d0:12:c4:36:5c:cd:39:61:
df:01:31:62:ec:f7:f4:6d:28:8c:49:dd:8c:f4:91:
a3:e9:ef:a6:44:97:a2:51:6b:b4:2d:6c:92:cd:7b:
e1:02:ff:bb:26:21:0f:8d:f1:38:1c:13:54:5d:e8:
4b:c7:36:3d:b8:e3:4d:7d:76:be:32:50:c5:bd:65:
63:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F5:C7:F8:80:C1:2B:24:1A:9F:F4:C5:8E:06:17:BA:84:1E:5E:95
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zvXH-IDBKyQan_TFjgYXuoQeXpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:a2:07:e2:a0:09:a1:38:14:18:9a:f5:d7:f1:4a:fe:92:54:
45:8f:16:6d:16:7c:ea:3f:e1:ba:fb:d6:df:c2:85:77:20:85:
01:f9:61:c7:5a:68:1c:7c:31:f5:e8:a9:97:f1:cf:d6:b4:15:
e2:bc:88:df:65:d5:9c:f4:ec:cd:4b:9c:7e:65:d3:e9:85:f3:
89:c8:50:2c:aa:40:c4:62:d3:38:5d:e9:d1:33:d9:13:39:b8:
fe:55:f8:de:f5:20:3a:8c:78:82:65:9d:1f:91:92:59:17:73:
15:77:87:57:e3:34:e0:3d:98:21:fa:78:26:af:cd:46:aa:38:
e0:7b:85:1b:76:6f:3d:a3:72:0f:93:ed:1d:d2:14:66:f0:ea:
3f:45:44:29:c0:57:db:51:aa:ce:0b:16:6b:97:ff:cd:d5:64:
aa:3f:f4:00:2d:68:9d:d2:45:9d:e0:cd:7d:18:b6:23:88:e0:
a2:1b:37:b6:25:46:c0:41:dc:ea:1f:97:43:2c:05:00:c8:46:
0f:cb:97:25:c8:50:38:7f:5c:18:9b:4d:d9:e6:ca:02:55:f8:
41:71:7f:8f:6a:96:f7:0d:11:b1:2c:c0:fd:4e:ee:c1:2c:07:
d6:13:71:b5:ae:90:21:9f:17:05:f1:d2:87:51:f9:02:ce:0c:
cf:05:2e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:24:25 2025 by rpki-client