Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zyE-N0KgyjobyUtMJWAChYsYr-g.roa
File: zyE-N0KgyjobyUtMJWAChYsYr-g.roa (raw, json)
Hash identifier: 9vzHmRlrM0tzKqjE405z7N18Ev4sRS6Uzw7T4kqxz3g=
Subject key identifier: CF:21:3E:37:42:A0:CA:3A:1B:C9:4B:4C:25:60:02:85:8B:18:AF:E8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D43C3A6344AAF3526C58BD42F3C500D89
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zyE-N0KgyjobyUtMJWAChYsYr-g.roa
Signing time: Fri 26 Jan 2024 03:15:11 +0000
ROA not before: Fri 26 Jan 2024 03:15:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:43:c3:a6:34:4a:af:35:26:c5:8b:d4:2f:3c:50:0d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 26 03:15:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf213e3742a0ca3a1bc94b4c256002858b18afe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:69:90:fc:41:ab:e5:57:87:c3:2b:e4:d4:9b:
09:bd:bd:69:b7:85:c4:38:da:de:f2:c1:3a:8c:50:
97:4d:18:06:15:10:51:ed:24:7b:71:68:3e:b7:ea:
94:2e:48:48:b2:4e:f1:ba:32:76:e8:e8:a8:04:4b:
74:84:d2:19:bf:52:18:ba:95:f0:7f:73:88:f9:86:
3e:8f:35:df:64:71:d9:3b:88:c5:68:77:98:69:a4:
b7:cf:4f:87:58:6c:b1:ef:16:44:c5:64:b1:f9:3e:
99:fe:94:d2:b2:48:84:ee:ae:25:d9:c4:91:17:44:
6d:a6:0e:2e:3a:4c:47:d5:9c:12:23:14:17:19:8b:
be:14:a4:76:57:2a:2e:f1:0a:06:e7:98:54:ee:01:
ab:07:f8:e1:c0:9d:97:e6:7e:18:70:5c:15:df:18:
58:c2:3a:8b:0f:68:8a:c0:04:26:40:1b:5d:df:c1:
ad:a6:02:ec:b0:ab:fc:e7:84:7c:da:bc:61:1c:f4:
95:58:9a:bb:ff:20:4d:e5:4c:a5:83:ff:61:b7:13:
a5:25:25:b3:a7:cf:e8:a9:0d:35:e5:79:1d:f1:b1:
3e:b1:d1:e2:af:45:84:6d:4a:a4:e0:76:af:70:33:
62:88:1d:05:3d:b1:84:4e:db:fb:66:4f:ec:6e:05:
1f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:21:3E:37:42:A0:CA:3A:1B:C9:4B:4C:25:60:02:85:8B:18:AF:E8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zyE-N0KgyjobyUtMJWAChYsYr-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:2b:1a:5b:f3:17:a1:14:c0:9b:cd:11:e2:7f:a6:9c:bd:eb:
d5:71:9f:d9:b6:f1:68:56:f9:3a:eb:93:8b:83:a1:93:d3:83:
c7:c0:6f:48:da:5e:4c:64:db:eb:3b:85:e7:c7:e3:3e:f1:50:
93:d9:4a:8f:93:5d:6c:30:9d:71:19:c0:91:b8:b0:cc:ae:24:
24:be:26:6e:48:f3:c1:db:63:26:09:f5:86:b4:10:71:db:ef:
92:7b:d4:9c:10:9b:c2:e7:b9:27:e1:0e:37:5e:9b:d3:4b:9a:
b4:03:37:da:c4:df:28:9b:96:12:ae:5b:bc:6b:7e:f6:42:07:
1c:38:bb:21:e7:79:46:f6:1b:56:f0:6e:6e:be:67:13:c8:2d:
73:8e:e5:bc:d1:0d:b7:2d:92:ae:41:51:92:0b:f8:20:fb:25:
bb:b8:3b:c4:19:8a:2c:bf:99:94:f7:ec:ef:9f:7b:78:4f:25:
39:69:ed:18:ba:37:e4:c8:f7:a1:e6:da:32:d4:a0:58:b9:9e:
73:e4:32:9a:1f:1c:89:57:1e:d5:c5:d2:f8:e9:5d:8d:65:16:
67:db:77:a5:3a:05:bd:02:6a:17:c4:d6:12:56:fb:14:09:2d:
db:65:ea:d9:a4:c1:85:cc:98:54:c5:e2:2e:58:bb:a8:b7:13:
9b:b7:61:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:49:59 2025 by rpki-client