Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/32YvG_DMTXQcg-0_wWYC1VFVBDM.roa
File: 32YvG_DMTXQcg-0_wWYC1VFVBDM.roa (raw, json)
Hash identifier: 4BhCkRXP0TYy8xTTYLJdVICzVk0411X5cEYLTMr9vXM=
Subject key identifier: DF:66:2F:1B:F0:CC:4D:74:1C:83:ED:3F:C1:66:02:D5:51:55:04:33
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E2811F81CCE9669A1A82EF43286046976
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/32YvG_DMTXQcg-0_wWYC1VFVBDM.roa
Signing time: Sun 10 Mar 2024 11:14:10 +0000
ROA not before: Sun 10 Mar 2024 11:14:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:28:11:f8:1c:ce:96:69:a1:a8:2e:f4:32:86:04:69:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 10 11:14:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df662f1bf0cc4d741c83ed3fc16602d551550433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:02:16:8d:69:10:31:94:ed:3b:97:a0:d6:
ab:ba:6e:56:eb:f1:a5:81:2b:8a:e0:48:b0:64:45:
49:14:35:a0:d1:28:70:35:69:cd:88:f1:fa:6d:df:
44:3f:0b:47:f6:71:66:48:10:cc:7f:98:b9:e8:f6:
b9:35:1b:f3:56:1d:c2:73:7f:20:e6:95:8e:89:f1:
78:89:17:93:0a:0c:b6:3c:b1:74:a6:19:52:1e:10:
d3:a0:7b:d2:2d:fd:92:5a:f9:1a:a5:68:65:8d:3f:
a9:53:58:6a:b5:77:fd:92:c3:84:ea:df:d6:bb:24:
95:21:b6:cb:e7:0b:2c:dd:2f:7d:7c:90:1d:15:7f:
c2:87:8f:c2:84:8b:fc:95:de:27:f7:d9:69:6a:6f:
7a:a4:8d:e2:7f:5e:6f:8a:26:8f:c6:82:8d:24:8c:
ae:91:de:81:84:d2:75:3c:49:5e:40:6b:a9:96:13:
f2:7f:76:75:8a:9c:08:f8:54:44:72:1a:47:f5:24:
aa:25:e4:40:02:7a:5d:03:4f:be:d5:d2:ed:9c:50:
91:ee:20:99:c8:dc:64:64:08:0c:11:9e:b6:26:7b:
ae:62:e1:80:0c:c9:a9:20:56:db:8d:f4:ad:ce:e7:
12:9e:af:29:36:ea:1e:dc:97:ca:3a:e5:be:d5:76:
a0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:66:2F:1B:F0:CC:4D:74:1C:83:ED:3F:C1:66:02:D5:51:55:04:33
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/32YvG_DMTXQcg-0_wWYC1VFVBDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:0e:12:51:10:e3:ce:7c:90:6b:da:e8:73:9e:b3:3c:9c:7c:
f4:38:3b:14:eb:bd:27:69:f1:0b:29:c6:12:7e:0f:13:4a:92:
fa:60:2f:b1:7e:75:4c:8e:3a:30:65:fd:24:cb:64:91:6b:a4:
28:2b:75:d0:6b:a3:23:2f:06:07:f2:b7:38:e8:77:ec:3e:b7:
c7:b3:b6:cf:de:05:22:df:24:41:b0:ea:b9:33:c4:3d:5f:5b:
af:57:70:70:3f:4c:62:ce:f3:18:2d:42:3b:cf:b0:65:2f:49:
4f:1e:f7:b1:85:16:2f:8a:ea:48:23:90:c1:9c:53:a1:a1:00:
20:2c:2b:e5:c7:d4:e5:4a:d9:fd:9b:1d:61:d4:58:98:1d:33:
fe:61:87:a8:4a:d9:8e:8a:16:b2:d7:a9:c1:94:8e:dd:d0:a5:
60:5a:5b:39:27:30:07:8e:f1:5c:f7:60:d5:56:62:42:9f:78:
89:15:2f:0a:46:3f:46:fc:84:d9:39:a0:c9:f8:1e:15:3f:6d:
f0:2a:54:63:38:81:14:a9:06:23:64:0d:17:68:b1:67:41:08:
a3:57:6e:19:ba:98:3a:44:ac:31:ac:92:6a:42:5b:e5:99:32:
2e:d6:2c:5a:64:ff:d6:6b:25:65:9d:c5:e2:96:06:0a:99:2e:
7c:a1:92:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:17:40 2025 by rpki-client