Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WGMA8Pmk8hM_Y-nzMMANb-MaFvg.roa
File: WGMA8Pmk8hM_Y-nzMMANb-MaFvg.roa (raw, json)
Hash identifier: Hbg3O3JLn7o3LAjLf6LRaDasuZ+JEZI+hdMMuWltLOE=
Subject key identifier: 58:63:00:F0:F9:A4:F2:13:3F:63:E9:F3:30:C0:0D:6F:E3:1A:16:F8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D50D828D1C180EB7CA9217023FDF4C8EC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WGMA8Pmk8hM_Y-nzMMANb-MaFvg.roa
Signing time: Sun 28 Jan 2024 16:12:39 +0000
ROA not before: Sun 28 Jan 2024 16:12:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:50:d8:28:d1:c1:80:eb:7c:a9:21:70:23:fd:f4:c8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 28 16:12:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=586300f0f9a4f2133f63e9f330c00d6fe31a16f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:b5:08:9f:18:8b:3c:07:bb:fb:27:0c:fa:
33:aa:ad:11:85:66:5c:f7:bd:05:3e:83:d8:b1:21:
08:c3:a1:01:09:1f:88:7f:8d:90:dc:fe:59:a2:d1:
0c:9c:df:7b:7f:9b:19:71:9d:c2:9b:4b:04:87:48:
cb:4c:16:4f:32:22:68:35:c3:b1:85:8a:d3:c2:8f:
a8:9f:ec:c5:2c:66:fc:a4:39:75:bb:49:4e:80:22:
0f:12:a8:8f:73:5b:a1:66:76:36:28:93:dc:08:26:
62:75:94:e3:97:b3:42:fe:93:99:67:5d:86:b9:c3:
3e:77:43:5b:7c:89:e9:e6:32:e0:6d:47:71:65:0c:
f9:30:3b:7b:b5:f1:e8:d9:d7:cd:89:9a:3a:88:ab:
55:39:03:d8:75:b0:12:a6:5e:65:df:af:97:89:6b:
69:2e:1c:4e:1b:03:73:66:99:cc:0f:c7:24:4a:99:
fd:e9:bd:58:35:07:64:8a:3f:b6:91:02:f8:52:14:
5e:1f:16:e7:c8:a5:82:24:8c:1a:74:99:da:51:af:
f1:28:f0:64:35:74:91:4e:69:58:63:74:b6:86:80:
8e:a8:ba:d2:e6:80:23:cc:69:6a:c6:0a:24:ec:92:
65:4b:4c:77:2f:84:49:db:f9:1b:9c:2d:89:b4:fa:
e1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:63:00:F0:F9:A4:F2:13:3F:63:E9:F3:30:C0:0D:6F:E3:1A:16:F8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WGMA8Pmk8hM_Y-nzMMANb-MaFvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:c7:88:6c:75:cc:1a:a3:71:ba:30:59:1d:27:ea:c2:f3:ab:
e6:9a:17:cf:4d:26:77:2b:35:0e:6f:f7:61:2b:ee:c5:65:c7:
94:ac:f1:b9:95:e6:ae:82:f9:6d:15:42:9f:cd:e2:b7:80:f9:
99:ce:b1:61:91:0a:65:81:76:93:c7:49:89:10:a5:a5:9f:54:
bb:8b:1e:84:e4:b1:b4:42:e5:74:29:ae:31:29:13:9b:9a:c7:
f4:0b:2a:d0:ef:0a:8c:80:e7:33:38:04:58:72:24:5b:68:f1:
d0:03:00:ae:ab:b9:39:9e:84:2f:df:6e:17:a4:59:c2:ec:15:
f8:79:0f:e0:22:8b:9f:35:9e:c0:e5:fa:56:9b:d1:14:ab:71:
9d:6f:da:ba:2f:2c:12:55:71:30:f5:1e:30:d7:85:80:c8:36:
0c:f3:41:50:f6:d4:33:c8:b1:92:48:38:7b:ef:70:fe:3d:c0:
f6:5a:7e:b4:e3:28:f1:55:39:bb:63:05:f6:4d:b4:48:78:17:
8b:7f:bb:73:55:16:a1:4b:b7:44:a5:f4:27:07:b0:f8:12:ba:
bc:58:77:ef:c3:3b:06:ef:ce:df:fd:05:ce:97:9a:30:40:2c:
a6:bc:1a:1f:a8:62:99:d3:42:29:81:81:03:c0:16:7e:b8:c5:
d3:52:c9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:44 2025 by rpki-client