Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PubDwSwYZWQ3O29k_zo51mCxcUg.roa
File: PubDwSwYZWQ3O29k_zo51mCxcUg.roa (raw, json)
Hash identifier: 7uFKNpu+fzP+CClJJJ7U9ngb5lHs6FM2B9xnAmqgG58=
Subject key identifier: 3E:E6:C3:C1:2C:18:65:64:37:3B:6F:64:FF:3A:39:D6:60:B1:71:48
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E453E75DD1A60E42CADB7D15728F97E64
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PubDwSwYZWQ3O29k_zo51mCxcUg.roa
Signing time: Sat 16 Mar 2024 03:11:44 +0000
ROA not before: Sat 16 Mar 2024 03:11:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:45:3e:75:dd:1a:60:e4:2c:ad:b7:d1:57:28:f9:7e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 16 03:11:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ee6c3c12c186564373b6f64ff3a39d660b17148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b0:7c:69:47:43:ab:3f:a0:66:0f:14:70:6a:
31:cd:87:46:e0:3d:4b:be:42:fc:66:43:6e:0f:96:
11:17:b0:1d:a2:24:ce:57:33:2c:3f:50:39:b5:63:
0c:9d:51:9b:b9:b3:e9:17:39:66:93:57:ef:43:23:
94:68:d6:df:f7:ea:49:f1:fd:7b:99:c3:6c:01:15:
68:ee:46:75:77:10:00:dd:2b:5f:de:9e:fd:a8:c8:
f5:f0:53:e8:76:29:cc:6d:89:17:13:b2:2d:e7:34:
16:7f:56:93:dd:34:22:9e:42:7b:29:b0:85:08:43:
b9:36:b5:b8:10:c5:d6:50:94:aa:1b:f2:0a:98:b7:
f4:b6:56:0d:f1:f9:23:f0:04:1a:97:a4:ae:37:87:
ba:a0:72:79:80:cc:a2:ab:59:e7:6a:10:c3:27:4e:
10:bf:59:a7:60:f5:0f:31:ca:cc:95:b7:54:b2:3b:
f3:3e:6e:26:69:d8:94:2a:9c:64:5d:93:b7:51:47:
95:55:f3:03:43:a1:99:bb:f8:34:3e:54:ec:1b:ab:
9c:2f:78:b4:6d:34:72:df:ab:b4:58:33:b5:1e:f2:
3e:0a:da:1b:35:4c:5d:b1:7f:96:d3:41:5b:ca:ee:
86:4f:25:a2:4b:6d:09:3d:e9:95:d8:f6:40:ae:86:
dc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E6:C3:C1:2C:18:65:64:37:3B:6F:64:FF:3A:39:D6:60:B1:71:48
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/PubDwSwYZWQ3O29k_zo51mCxcUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:e4:18:fa:95:5c:9f:5c:87:07:36:a5:d9:3f:28:94:f3:2d:
da:76:02:e7:e0:44:3f:52:2e:5b:94:4a:87:21:7f:1f:13:99:
46:36:ca:6f:4f:f5:53:78:d0:0f:89:8a:8c:9e:dd:c6:14:44:
3c:e6:d7:4b:9c:e0:f4:0c:47:7f:79:b2:3a:5a:f9:67:fc:d5:
b5:40:12:a0:90:5e:54:30:7f:82:47:4e:b7:ea:ab:5c:66:db:
8c:74:ce:61:aa:68:72:e3:8c:23:aa:dc:f0:2d:f1:a5:63:8d:
8b:52:8f:bb:93:3d:b5:ee:0f:1b:19:6b:5d:9e:47:a6:4a:19:
db:45:06:45:33:fe:79:b0:27:9f:35:99:0d:09:04:e8:af:4b:
50:c2:3b:4c:3a:5f:ae:2e:19:9d:0e:12:21:88:8e:01:54:8b:
f7:f6:95:b5:81:ba:c8:b0:ec:f4:c4:23:5b:d6:1e:a5:ff:a6:
3c:ca:d4:cd:15:9a:88:5f:02:fa:99:e4:ff:39:66:9c:58:43:
b8:ba:4c:17:09:aa:00:93:78:eb:0d:90:84:8a:7f:f2:a3:5b:
c2:ae:95:52:76:70:33:e8:f4:d3:6c:03:4d:c8:00:19:70:7c:
d7:83:8e:c8:6a:da:63:cc:ae:7f:9c:ee:3a:c0:29:68:67:bd:
a4:be:6c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:04 2025 by rpki-client