Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WDsTSEuAgvfCe-woDSDxKWgEZTQ.roa
File: WDsTSEuAgvfCe-woDSDxKWgEZTQ.roa (raw, json)
Hash identifier: HOZM2wMGcAEsQAK8VEuHnU4Y/72700Z0razjPQ9dqAk=
Subject key identifier: 58:3B:13:48:4B:80:82:F7:C2:7B:EC:28:0D:20:F1:29:68:04:65:34
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE8FC579BFD14CBAD67FD4BFE5B5D12CB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WDsTSEuAgvfCe-woDSDxKWgEZTQ.roa
Signing time: Mon 08 Jan 2024 12:11:40 +0000
ROA not before: Mon 08 Jan 2024 12:11:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:fc:57:9b:fd:14:cb:ad:67:fd:4b:fe:5b:5d:12:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 8 12:11:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=583b13484b8082f7c27bec280d20f12968046534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:65:54:28:28:6b:e5:3a:9e:fb:92:2e:0f:
4c:52:9b:1a:61:13:69:2a:13:34:93:51:3d:cf:1c:
41:6e:f0:6a:9a:f4:0e:b5:82:2b:85:15:4d:61:2d:
7a:bd:ce:5e:50:e2:a5:e5:71:03:2a:d5:63:f5:0b:
bb:1c:1e:5b:0c:e4:51:f0:ba:59:a9:eb:25:50:3c:
28:40:e7:5d:d6:3c:1a:90:a8:e3:03:dd:7f:e1:1f:
28:5f:5b:70:e1:67:a2:87:47:9f:9f:b6:7e:99:18:
87:59:d2:2e:7d:08:52:89:e7:1b:ed:6d:da:6d:af:
7f:5e:6e:6b:46:25:4f:0e:38:5f:df:a5:2e:cd:66:
9c:2b:f9:c3:0a:04:c4:71:cf:b0:d1:c8:e4:d8:79:
d5:0a:3d:f5:2c:54:4a:2a:a0:0a:7b:28:6b:1a:e2:
70:de:5b:e0:7c:cd:bd:1b:67:c4:9c:9d:78:bc:bd:
2e:ea:07:da:51:d3:24:de:aa:d9:77:11:fa:a0:51:
8a:13:ef:af:df:b7:59:3c:f8:16:49:46:df:21:61:
ba:f2:37:b6:4e:6e:d5:17:1e:6b:61:84:9b:bc:24:
ac:72:0a:fa:9f:2f:f4:52:db:07:7d:dc:07:a8:6e:
f9:a7:3e:29:4c:ec:21:fb:cc:8a:2e:77:13:89:91:
ae:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3B:13:48:4B:80:82:F7:C2:7B:EC:28:0D:20:F1:29:68:04:65:34
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WDsTSEuAgvfCe-woDSDxKWgEZTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:fa:cc:b4:36:5b:fd:87:cb:cb:3f:16:32:9a:d1:f1:00:80:
1d:63:66:d1:72:8f:77:c5:48:1e:8c:9f:ba:45:5e:2c:e4:90:
ff:b4:72:19:0c:00:d5:43:2b:41:54:63:4f:e8:e9:8b:54:3f:
25:67:fa:ad:42:ad:9a:ef:6f:82:fa:a5:90:7d:45:e0:3b:b4:
e4:8b:d0:0a:36:0c:b0:83:1c:2e:2d:f1:80:79:30:79:7e:96:
0e:a8:db:e4:0b:8c:6d:33:e8:a1:4a:5a:ab:ca:7b:dd:28:fb:
55:db:85:f0:e0:15:88:90:4d:7b:f2:8e:3d:8d:87:71:dc:e7:
7d:0d:ca:be:9f:79:39:b0:93:f3:68:84:7e:8d:ed:29:b4:9b:
ff:3c:0e:4a:00:fa:84:9d:2f:e6:dd:82:3f:e3:cf:ac:fc:ce:
34:9a:f7:5f:aa:72:32:77:a6:e7:26:eb:77:09:50:bc:39:18:
76:46:66:fc:b3:f5:65:51:fd:39:9f:db:be:84:a2:2f:8d:0e:
7b:e5:ed:18:7d:ec:04:8f:e6:e4:11:92:58:1e:49:b9:e2:1b:
a5:4b:d9:09:e4:de:46:d3:2f:04:a8:95:15:7b:f2:0a:27:47:
52:8f:5d:cd:5d:b4:a3:40:f7:85:bf:6b:80:18:15:94:4e:00:
01:62:2c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:51 2025 by rpki-client