Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6WAhkackRwiECfUEwtVsTkq4k10.roa
File: 6WAhkackRwiECfUEwtVsTkq4k10.roa (raw, json)
Hash identifier: cK6Ta3sMiL5sr1t1uRBYGK4dTn1XOOYrSal6qgSRm7k=
Subject key identifier: E9:60:21:91:A7:24:47:08:84:09:F5:04:C2:D5:6C:4E:4A:B8:93:5D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E8343891B43DDA6A9E830994D18DF66AE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6WAhkackRwiECfUEwtVsTkq4k10.roa
Signing time: Thu 28 Mar 2024 04:13:45 +0000
ROA not before: Thu 28 Mar 2024 04:13:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:83:43:89:1b:43:dd:a6:a9:e8:30:99:4d:18:df:66:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 28 04:13:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9602191a72447088409f504c2d56c4e4ab8935d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2a:68:63:92:8c:cd:42:a1:9c:47:fd:cf:2e:
f0:90:ea:fd:85:02:ae:36:65:3d:a2:c4:81:62:a6:
40:eb:04:38:94:a3:1a:97:b4:24:18:93:c6:97:fd:
0b:4c:73:e2:7b:91:70:cc:c0:5c:25:2d:b7:13:31:
3d:d6:bc:cd:89:72:60:21:65:51:8e:4c:83:db:91:
7f:3d:66:3f:02:6c:9b:6e:54:c1:5b:21:19:fa:af:
9d:39:38:8a:03:c1:33:8a:a3:2c:53:23:12:55:aa:
eb:9d:8d:e1:ec:d9:bc:58:17:33:0b:30:ee:89:57:
81:c2:ca:3f:89:56:5a:a6:5f:90:14:39:b4:79:13:
a0:1f:fe:85:3c:a9:a3:93:a5:78:a0:d0:87:fa:02:
5e:8c:32:5d:92:d2:96:48:23:c9:c4:c2:80:8a:0e:
ac:81:e1:b8:34:fd:03:62:d8:ce:8a:3d:46:74:e9:
8f:bb:3c:7a:1a:eb:3d:7e:b0:3b:94:6a:35:d3:7a:
42:0e:e9:80:51:0d:bf:3d:5e:60:55:07:67:76:e2:
f7:a8:db:2e:01:e5:8e:dc:02:9f:a6:bb:61:8c:aa:
96:ce:ca:29:c4:a2:f8:7f:94:9a:14:0c:3f:16:45:
c4:01:25:25:8b:45:5b:60:8d:5b:67:b7:58:ef:4e:
35:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:60:21:91:A7:24:47:08:84:09:F5:04:C2:D5:6C:4E:4A:B8:93:5D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6WAhkackRwiECfUEwtVsTkq4k10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:a7:49:d3:ef:41:21:91:a4:15:6e:d3:2b:6e:76:a8:dc:ca:
ab:d5:a9:1b:64:96:a1:e6:02:25:a3:be:a9:3e:df:83:94:c1:
b7:25:f3:24:b1:22:2b:2e:67:7d:a5:1c:46:56:c7:2c:3f:bf:
bd:85:df:69:58:d2:9f:ea:a9:ce:b7:5b:ae:e3:75:76:c6:28:
91:fd:79:5c:df:3d:34:95:ab:c8:37:d2:ee:e5:4a:d4:97:99:
8f:00:80:7b:dd:bd:20:84:b7:7e:97:79:2c:53:78:c0:5d:a3:
17:0d:02:0a:24:aa:13:1e:4f:e5:34:f5:fb:66:8a:c0:cd:92:
28:72:1b:9b:ac:cd:de:60:86:f4:95:29:47:5c:cd:93:d1:be:
74:2e:4b:91:87:e4:0f:34:76:9a:57:d4:95:ad:bc:97:8e:da:
55:64:ca:c2:ea:09:19:c9:5e:2a:a2:9f:a0:81:bd:ad:32:15:
60:9c:59:68:95:fc:4d:a0:ca:3f:b0:a2:df:25:55:c3:99:c2:
66:92:8e:21:cc:68:60:d7:83:7e:fa:4a:41:89:37:a3:cd:eb:
b5:6d:5b:a6:15:c1:f1:e8:88:1b:80:d8:be:80:9b:43:c1:5e:
37:dd:f8:9a:82:d3:24:80:83:79:30:12:ac:3a:77:0d:14:f2:
8d:57:1d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:25 2025 by rpki-client