Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1WH5vczeVGtNrnSR4qDOktuf-hc.roa
File: 1WH5vczeVGtNrnSR4qDOktuf-hc.roa (raw, json)
Hash identifier: zVUqbJ7wad8wgy9GbYr4Qj9iRU2Nvw1U6RkyNjzgt4Q=
Subject key identifier: D5:61:F9:BD:CC:DE:54:6B:4D:AE:74:91:E2:A0:CE:92:DB:9F:FA:17
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E4CC1114DB7AA57E0C74567B927805733
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1WH5vczeVGtNrnSR4qDOktuf-hc.roa
Signing time: Sun 17 Mar 2024 14:11:44 +0000
ROA not before: Sun 17 Mar 2024 14:11:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4c:c1:11:4d:b7:aa:57:e0:c7:45:67:b9:27:80:57:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 17 14:11:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d561f9bdccde546b4dae7491e2a0ce92db9ffa17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:52:b0:dd:05:43:87:95:94:3f:51:41:1c:fc:
25:86:9b:73:d3:a6:70:72:ee:2c:9d:d5:7b:e8:7e:
8e:be:1f:cb:8b:1b:b7:1e:de:61:2e:ea:56:5a:d4:
e3:d3:08:8d:42:a7:11:7c:41:f1:27:42:b7:64:16:
35:84:dd:b1:47:43:fe:f4:7d:5b:c0:45:1c:fc:98:
d1:d7:87:53:6a:22:42:eb:3a:71:2f:f2:aa:eb:11:
c1:dc:ba:6d:26:f1:82:46:83:54:f9:83:c2:37:c0:
cf:dd:43:6b:e0:1b:4d:27:5e:92:5e:20:a3:f6:05:
44:bc:ae:fd:2d:e3:da:1f:01:c3:b5:b1:60:ee:9c:
3c:3c:fd:f4:de:63:8f:19:56:1d:cf:08:3a:8a:c1:
a2:78:3f:81:9d:d8:e0:ce:6e:a8:1e:c2:13:be:24:
33:82:ae:1a:3b:c0:30:01:be:4d:9d:ad:b2:16:a1:
05:92:82:c6:71:39:58:c2:84:56:99:cb:55:be:d4:
47:50:55:ed:fd:1a:da:af:80:8c:d7:9f:d3:4a:43:
86:f9:d3:f2:44:05:6d:6f:ca:36:b4:b2:ab:98:c5:
f3:12:94:d8:fb:03:9f:b9:c9:0e:24:44:ab:04:eb:
1f:72:41:2c:22:8e:a5:e9:f5:00:8f:17:60:80:65:
d5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:61:F9:BD:CC:DE:54:6B:4D:AE:74:91:E2:A0:CE:92:DB:9F:FA:17
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1WH5vczeVGtNrnSR4qDOktuf-hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:aa:0f:1e:f3:7e:90:93:9c:5d:ee:c8:66:fd:35:50:e8:90:
5d:11:4a:d0:61:68:13:18:8c:ea:2f:b1:74:c8:89:95:d8:2e:
e1:4c:b0:05:88:8e:c9:f7:26:68:56:43:1a:ba:05:6f:1a:6f:
de:f9:3a:97:12:f8:e5:6a:d6:19:49:6b:d4:c0:dc:ad:b6:d9:
a5:11:5c:2b:17:6b:92:20:14:4c:65:45:0d:15:7b:62:da:5c:
b2:4f:11:44:40:27:98:34:27:18:ce:51:04:2c:8c:90:6c:04:
89:f9:bf:58:e4:12:20:53:bd:e8:bc:6f:76:bf:65:ce:38:5d:
b0:f5:e6:16:22:94:2b:f9:4d:a7:41:3d:bc:55:7b:c9:19:ef:
0c:15:30:23:2e:88:0d:f1:5a:39:bb:0c:ff:1a:4d:e8:14:bb:
af:2a:35:f5:5f:12:f2:d8:98:57:53:87:78:19:cf:9a:8d:46:
8c:7e:58:81:5c:45:7f:00:db:93:2c:05:1d:30:44:9a:a6:18:
71:12:3f:db:cb:61:c3:0a:4b:a5:84:00:50:40:83:84:d4:e5:
ba:ba:d8:a1:92:c7:91:5d:6a:04:67:aa:b9:b6:fd:ac:f4:69:
ec:b9:71:07:d0:d1:f7:05:9e:6e:e0:04:97:18:c2:7d:0c:62:
d8:ef:85:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org