Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DwsqJPzmtHXSmqQL5K0WOZ2arRw.roa
File: DwsqJPzmtHXSmqQL5K0WOZ2arRw.roa (raw, json)
Hash identifier: I++gvWt9PHFGcqNHBT0NcjUk+AhW/IDXBLBraT1X3ew=
Subject key identifier: 0F:0B:2A:24:FC:E6:B4:75:D2:9A:A4:0B:E4:AD:16:39:9D:9A:AD:1C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EA63AA6F21E05CF25988A09CF3151C189
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DwsqJPzmtHXSmqQL5K0WOZ2arRw.roa
Signing time: Wed 03 Apr 2024 23:10:45 +0000
ROA not before: Wed 03 Apr 2024 23:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a6:3a:a6:f2:1e:05:cf:25:98:8a:09:cf:31:51:c1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 3 23:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f0b2a24fce6b475d29aa40be4ad16399d9aad1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:0a:a3:c8:2f:ec:ed:9e:93:6d:81:4e:67:
9b:95:8f:17:63:00:73:56:b8:60:de:04:0f:1c:01:
51:7b:15:4c:a6:d6:0b:e5:c7:53:66:74:d7:dc:77:
52:43:cd:ae:c2:f4:38:d9:08:f8:b5:ee:ff:2a:34:
f7:df:6e:31:d3:33:a7:04:3b:09:b6:75:63:5f:0d:
5a:ad:31:23:c9:71:af:21:ba:2a:13:c4:03:93:fa:
f5:2f:23:f7:6c:1d:ac:95:67:92:52:89:ed:f0:c3:
13:62:b5:0a:39:18:5f:9b:c6:85:37:78:d4:8b:ac:
7f:18:02:04:c4:d9:46:f7:2a:95:5e:1d:27:42:be:
c2:fa:a9:36:e5:32:64:2d:af:8e:05:a7:46:40:7f:
e3:d9:0e:fa:3e:cd:92:a5:0c:13:57:b3:60:31:7f:
18:e0:e2:c4:99:c4:29:25:5f:ed:08:07:d3:b2:be:
18:cc:0b:b4:1e:d3:9c:ab:91:97:0c:73:40:4b:7c:
e5:66:18:ac:d0:7a:9a:d7:6e:4f:09:d0:02:99:f3:
1e:9b:a2:10:af:88:82:a3:46:30:ec:2a:9f:b7:36:
e5:c0:01:11:8e:b1:e1:08:7d:e9:7f:b7:cc:39:3f:
9c:fa:fd:61:e4:79:85:dc:d4:b1:92:fa:3a:2d:69:
72:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0B:2A:24:FC:E6:B4:75:D2:9A:A4:0B:E4:AD:16:39:9D:9A:AD:1C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DwsqJPzmtHXSmqQL5K0WOZ2arRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:f4:58:c8:e4:36:6d:9f:a4:5d:48:e4:41:20:95:f4:22:d7:
e8:36:1d:62:b3:f2:5d:3a:0c:d5:17:8b:3a:0c:d0:f3:9f:d9:
80:94:50:f2:1a:fd:43:42:89:01:a8:80:da:dc:aa:ae:a2:d7:
3b:b2:ba:8c:3e:16:60:78:07:57:9f:e1:8f:5b:fa:1f:dc:9f:
d0:d0:d0:50:2f:0d:d1:95:e5:c2:8a:e9:a2:41:4e:1c:3c:fb:
65:b0:21:ff:12:72:9f:8e:44:b9:50:c3:8b:3b:0f:d6:97:dd:
a6:19:92:76:e2:fb:ae:af:50:fb:6f:92:79:88:11:d1:aa:d9:
84:22:ba:61:9d:d6:20:e2:55:2e:46:6c:0f:97:87:79:dc:38:
3f:cf:fe:16:d3:e8:ad:0f:a0:86:45:1f:ee:8d:c5:6f:81:b4:
61:57:3b:84:91:b2:0e:f7:54:06:72:79:80:75:ba:27:42:a4:
72:6b:e9:2b:a3:94:30:1d:8b:8e:c8:c6:09:da:35:e0:1e:49:
e2:18:f9:5e:2c:f6:b9:fd:44:4e:50:fa:10:77:4d:c8:e5:2a:
7e:bf:c2:86:f1:dc:0d:cb:e9:df:d1:39:e9:bc:89:25:86:90:
8a:ae:c0:ba:05:ab:44:3f:78:d9:53:1c:41:63:93:05:e2:82:
08:d4:7d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:54 2025 by rpki-client