Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/W7UP6Jn1a3OCVzeonZNihBDML2g.roa
File: W7UP6Jn1a3OCVzeonZNihBDML2g.roa (raw, json)
Hash identifier: 6SWqppsc9VmQTff5Y7RFT9jcItrtSVg8+RBNAfXGhMM=
Subject key identifier: 5B:B5:0F:E8:99:F5:6B:73:82:57:37:A8:9D:93:62:84:10:CC:2F:68
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C89B8CADAAE787A49F5300232A56BCBE2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/W7UP6Jn1a3OCVzeonZNihBDML2g.roa
Signing time: Thu 21 Dec 2023 00:13:58 +0000
ROA not before: Thu 21 Dec 2023 00:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:89:b8:ca:da:ae:78:7a:49:f5:30:02:32:a5:6b:cb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 00:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bb50fe899f56b73825737a89d93628410cc2f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d3:1e:66:42:fc:36:6f:a4:f7:19:1b:1f:58:
af:59:50:a8:c1:48:78:1e:39:e6:ad:39:49:b4:83:
82:e9:f9:8c:af:e6:7c:47:c6:84:99:a7:24:e2:fb:
47:da:51:a7:50:23:a8:75:ae:75:a8:ee:d3:b1:47:
99:d0:36:c5:90:a0:b3:a0:b9:d2:d4:e4:5e:a4:a5:
20:9b:7d:71:34:58:cb:ba:47:f0:e3:54:eb:37:e4:
bf:49:bd:b9:df:c8:1a:7d:67:6a:6b:fd:d1:23:0e:
91:38:ff:8d:80:da:12:e9:ad:5c:11:46:33:76:e7:
75:50:79:79:90:13:ab:00:90:ad:96:e0:ad:a7:10:
4b:74:f2:c7:45:45:47:a4:95:51:1d:7f:f5:dd:b3:
e3:79:ec:d7:ca:c2:d3:ae:c4:86:86:21:1b:60:5b:
02:39:1b:d4:b5:df:9e:08:f4:1d:20:dd:6c:7d:b0:
f4:a7:15:ba:a4:fb:c6:3c:79:17:ff:df:91:6d:a2:
0a:7f:23:ee:fa:87:c6:e2:91:be:25:98:29:3d:8f:
80:88:78:7a:38:b1:49:bb:2d:0e:d7:70:d8:94:88:
ab:5b:18:20:25:7c:7b:10:72:59:31:7e:1d:73:9c:
b8:90:3f:75:f3:6d:81:2f:19:43:87:a9:fd:10:db:
82:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B5:0F:E8:99:F5:6B:73:82:57:37:A8:9D:93:62:84:10:CC:2F:68
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/W7UP6Jn1a3OCVzeonZNihBDML2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:01:97:66:95:1c:14:35:d9:f6:6b:88:5c:0d:d0:62:f3:a3:
b5:f8:e1:3d:2a:6a:8c:33:82:e1:2b:68:2f:46:85:e8:0b:50:
d6:89:fa:e8:ac:b8:3a:ac:2e:77:1f:6a:5d:26:f5:89:5c:7f:
a5:bd:8f:28:05:b6:a4:b0:b7:0b:45:b3:fc:2a:fc:bf:4b:3e:
ec:fc:1f:bd:d4:fc:aa:d1:59:61:bc:7b:8f:15:0a:1a:0f:1c:
0b:37:0c:b4:95:d8:eb:10:77:85:78:1c:dd:c8:79:ec:64:bd:
5b:d8:dc:b6:af:09:c0:81:42:d0:b8:85:18:a5:dd:b4:79:45:
0f:24:3b:8c:fd:50:8c:2b:dc:d0:e2:1c:10:7b:64:60:d2:c3:
2c:3f:c7:ed:3c:45:bb:70:6a:b9:6b:e4:d6:e6:06:f1:78:c6:
19:37:b0:d6:10:1a:84:85:0a:e1:24:09:75:db:87:56:9c:e4:
57:8f:e6:c4:6a:b7:27:21:44:6e:df:60:ab:8e:9e:c4:ef:93:
91:52:44:ef:64:4a:30:d5:de:19:b8:67:83:49:f9:a8:5e:41:
e1:60:66:1a:36:a5:c4:7a:5a:88:7a:d0:72:61:be:d8:52:cf:
21:b5:4e:b1:e9:4a:2c:19:c8:a4:1f:18:ce:02:30:9b:ae:26:
61:aa:de:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:38 2025 by rpki-client