Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3m_9Wgf5LSwJZwnOnhMYXlZDxr4.roa
File: 3m_9Wgf5LSwJZwnOnhMYXlZDxr4.roa (raw, json)
Hash identifier: mw0tub5gLEKCTnb5eTTrC7K+Tn9N8abbRb3EA/gxgGc=
Subject key identifier: DE:6F:FD:5A:07:F9:2D:2C:09:67:09:CE:9E:13:18:5E:56:43:C6:BE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DA1B6B40AAF706DC85BF2BD589B5C828A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3m_9Wgf5LSwJZwnOnhMYXlZDxr4.roa
Signing time: Tue 13 Feb 2024 09:05:21 +0000
ROA not before: Tue 13 Feb 2024 09:05:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:a1b5:d4b2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a1:b6:b4:0a:af:70:6d:c8:5b:f2:bd:58:9b:5c:82:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 13 09:05:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de6ffd5a07f92d2c096709ce9e13185e5643c6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ac:69:a8:e2:f4:64:88:e1:42:b0:ec:1c:0a:
fc:8f:83:ec:43:1f:9c:a1:ff:55:97:ca:33:09:24:
f6:ce:db:0f:36:a7:c5:db:87:d6:80:e4:52:45:db:
a4:79:1e:cc:31:47:10:42:a5:c6:61:aa:53:e0:ad:
ba:35:95:44:c6:cd:0b:db:e9:8c:c5:b4:81:9d:0d:
84:f1:c9:c8:db:9e:51:7d:23:44:a4:d0:47:c5:9c:
c4:4b:d0:0e:b0:45:08:76:97:7e:bb:cc:2d:89:50:
40:95:3a:08:9d:84:8a:93:0f:b0:37:3b:2e:61:29:
d6:12:aa:59:90:ce:21:70:05:ae:44:32:74:eb:b0:
36:47:2d:5a:18:20:c4:67:37:c2:dc:64:47:53:2f:
6b:7f:7f:e5:1c:96:b0:c5:2d:bd:8a:bd:ad:d8:96:
ce:44:a7:5b:3b:eb:51:0d:f9:91:1f:c7:fd:be:60:
b7:5b:b8:d1:32:a1:b3:1c:43:9f:a9:1a:56:aa:0f:
9d:95:ad:4b:c3:9a:c5:99:33:23:eb:e4:fd:71:9f:
30:4c:79:e2:45:46:d4:fd:5a:7d:0f:6a:ae:83:ed:
d0:6e:0e:51:0f:a7:08:6f:f0:f5:3f:cd:b9:d3:f9:
f7:8d:41:41:72:a4:85:fe:cc:e3:18:37:41:80:3e:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6F:FD:5A:07:F9:2D:2C:09:67:09:CE:9E:13:18:5E:56:43:C6:BE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3m_9Wgf5LSwJZwnOnhMYXlZDxr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:e2:04:41:eb:cb:a3:26:ec:b7:70:af:70:ad:19:df:af:db:
22:ad:0e:4b:df:a6:28:06:99:77:d8:8d:0c:e5:6f:30:83:34:
3a:6b:8f:9e:ed:e3:8d:02:18:fd:88:0d:77:40:b7:f7:21:9c:
d6:b7:2f:2e:4b:ed:0f:97:61:f0:d1:43:9c:ef:91:6f:16:ea:
48:07:b1:28:77:5a:3f:f3:41:84:04:25:fe:a6:55:f8:4e:5f:
fe:87:0c:8d:61:b7:c2:63:32:b2:c7:bc:4c:0c:f8:61:95:97:
80:2f:e4:da:dd:b1:88:ae:e3:b0:a0:5f:f6:a9:64:63:78:45:
a7:69:d1:ca:51:df:f5:2d:7d:4b:f5:7c:fb:4d:b0:a7:92:74:
04:de:e2:d1:9d:7f:b6:b3:67:c7:68:16:43:87:80:5b:72:19:
2d:9e:2e:04:76:38:31:8f:e7:2e:d4:86:20:2a:f5:bc:bc:0e:
21:f4:ff:84:ec:a4:00:41:cb:b8:3d:ee:d6:ed:04:79:f5:10:
da:a5:d1:c5:75:69:c1:17:8c:de:31:02:fc:38:64:34:e5:b3:
90:73:d2:54:79:b3:46:85:6d:67:26:68:89:10:2a:97:58:9a:
7a:ee:74:c5:ee:f5:b3:d6:63:87:56:69:7d:7e:1c:50:45:91:
fc:83:65:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:10 2025 by rpki-client