Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IWefL-_wRp7leRGFad7Ubo1QfQw.roa
File: IWefL-_wRp7leRGFad7Ubo1QfQw.roa (raw, json)
Hash identifier: 47juDj8lPkEArFpaBuHVHnw5CKzCaKmM9MZ4S4ZBci4=
Subject key identifier: 21:67:9F:2F:EF:F0:46:9E:E5:79:11:85:69:DE:D4:6E:8D:50:7D:0C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E743C7D99A601E153C369F7B42912D4C3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IWefL-_wRp7leRGFad7Ubo1QfQw.roa
Signing time: Mon 25 Mar 2024 06:11:45 +0000
ROA not before: Mon 25 Mar 2024 06:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:3c:7d:99:a6:01:e1:53:c3:69:f7:b4:29:12:d4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 25 06:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21679f2feff0469ee579118569ded46e8d507d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:24:a7:63:2c:78:54:12:36:fe:d4:7e:f4:
3b:a3:b3:32:0a:6f:90:c3:1b:b6:dc:04:7b:68:74:
e3:36:85:94:6e:ea:40:fd:a0:c8:a6:62:59:d9:ef:
dc:f4:f3:99:f1:00:c6:0e:71:2f:cc:79:0f:7d:7b:
da:c8:0a:67:1c:8b:cf:f2:58:31:da:2f:67:b2:1d:
f9:5d:28:46:76:4b:9c:5e:e9:b1:44:d3:dd:74:1a:
48:ab:90:f6:07:a4:76:de:d3:89:9a:7f:d7:5f:ca:
ff:ba:24:c8:4b:4e:01:a4:a4:be:8f:bc:c6:95:89:
25:55:a0:37:25:a6:65:0d:31:be:51:38:0d:f9:5f:
ac:9c:34:19:af:f5:a4:7a:0e:ad:69:d8:41:e7:25:
14:73:43:32:bc:0c:8f:83:7d:c4:ed:41:03:c7:75:
e9:e4:c7:aa:43:74:ea:5d:8f:14:63:2b:8a:46:55:
93:b8:59:01:a4:dd:a8:21:d1:fc:3c:39:79:54:9d:
ac:b7:35:e8:90:08:68:c5:cc:25:b9:8c:a6:a5:21:
1f:e9:c1:32:43:1c:ec:1c:e0:c0:cf:02:32:6c:60:
dd:ce:f9:5f:94:38:2e:de:47:33:af:5c:20:2b:25:
2b:76:72:9d:6f:fa:fb:e9:dc:2b:08:b6:a5:9b:10:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:67:9F:2F:EF:F0:46:9E:E5:79:11:85:69:DE:D4:6E:8D:50:7D:0C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IWefL-_wRp7leRGFad7Ubo1QfQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:45:53:49:11:5a:50:1c:e5:29:dd:aa:ff:56:49:8e:32:53:
de:e2:c6:fb:39:13:24:a1:dc:46:a7:36:46:05:ad:c1:a8:91:
23:08:e1:18:22:28:56:5f:a0:6f:33:ea:bf:a7:9b:3c:15:26:
71:bf:59:e1:e9:f5:9d:9e:83:06:f8:9c:f5:23:54:60:ff:11:
71:df:08:f4:f3:0c:8b:42:44:d9:2a:85:02:c6:55:a0:3f:4c:
17:d0:21:f6:b4:ed:7d:83:42:63:f9:f5:b7:6c:c1:b9:75:0d:
dc:ab:be:53:7d:10:ef:00:24:bd:d8:b3:2a:da:22:c9:15:b8:
b9:65:af:c1:b3:f3:ea:09:af:7d:05:40:d3:10:82:6e:c4:62:
8c:de:8b:7d:4d:21:4e:ef:e6:51:12:fc:29:fe:0c:55:a5:ea:
86:ce:54:b9:ca:b5:84:fa:cd:33:b6:fe:8d:fd:1d:b6:f1:81:
b1:89:e8:11:1f:5a:ab:44:a0:d2:ae:89:64:64:09:78:76:b2:
98:c5:99:a4:68:89:bc:64:43:42:09:10:21:1e:ac:0c:13:5c:
de:11:d0:d6:52:19:94:2f:77:e6:ae:a9:a7:63:62:5d:d3:8d:
82:f9:4b:e9:9c:55:b2:7a:d7:fb:24:fe:66:b4:cc:1d:8c:8d:
af:f4:5e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:17 2025 by rpki-client