Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WK57bx3Z8nlnasJ-PhwHDUXIP_Y.roa
File: WK57bx3Z8nlnasJ-PhwHDUXIP_Y.roa (raw, json)
Hash identifier: cSJr0ZfHlCCKtQs9pBF1L2UgDgGM1n4X5eumQP44vqk=
Subject key identifier: 58:AE:7B:6F:1D:D9:F2:79:67:6A:C2:7E:3E:1C:07:0D:45:C8:3F:F6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CF0B5E12BDB36DCE45D1FFBCE48D4F649
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WK57bx3Z8nlnasJ-PhwHDUXIP_Y.roa
Signing time: Wed 10 Jan 2024 00:11:40 +0000
ROA not before: Wed 10 Jan 2024 00:11:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f0:b5:e1:2b:db:36:dc:e4:5d:1f:fb:ce:48:d4:f6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 10 00:11:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58ae7b6f1dd9f279676ac27e3e1c070d45c83ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:52:d6:7f:bd:0d:5e:1e:e6:71:24:46:fd:17:
e8:8e:d9:69:75:0f:f3:85:4f:f4:09:c1:ec:d3:c5:
19:fb:24:f3:e7:67:85:01:42:fa:18:29:b6:82:f9:
d4:d0:36:f8:0d:db:7d:e3:a9:32:c3:2d:c0:ac:6d:
90:78:34:b0:4f:84:bb:fb:6f:c3:45:0b:48:f8:85:
70:a0:e9:44:41:a5:5b:f1:27:30:7d:51:a4:12:db:
a7:bf:18:e7:99:bf:e8:9c:64:ec:1a:4c:f0:92:a5:
b0:d6:e7:cb:c0:63:a5:81:3a:00:28:27:0b:79:f6:
11:a8:83:58:02:23:ad:a8:9f:9b:97:e0:00:6d:19:
04:fe:cd:c1:31:b1:28:a3:c1:9d:90:12:67:b2:6e:
4f:51:ac:b3:9e:78:d5:77:52:a4:8f:53:ac:57:49:
43:08:dc:22:92:ca:a8:58:be:1b:16:2e:30:0e:2b:
98:80:16:86:66:ac:1c:f9:2e:f5:95:e9:10:6f:fc:
07:68:67:c3:84:33:94:d1:1b:ac:12:2d:08:cf:8b:
5f:d6:f8:d4:31:a0:46:c7:5f:d1:80:c3:71:94:4e:
fe:8e:61:a7:aa:12:8c:b2:51:a4:94:ac:35:0f:96:
a3:e6:21:59:c5:10:17:95:a5:84:6e:59:6a:22:84:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AE:7B:6F:1D:D9:F2:79:67:6A:C2:7E:3E:1C:07:0D:45:C8:3F:F6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WK57bx3Z8nlnasJ-PhwHDUXIP_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:1a:d5:bd:44:40:21:29:75:14:41:52:9c:7e:17:10:51:ea:
71:ae:33:c1:4b:0e:68:b4:d0:f9:a8:72:86:08:b2:07:d7:30:
66:b7:e7:b5:c0:dc:35:51:3c:cc:0a:04:b2:40:19:b5:87:cb:
13:d6:42:b4:a1:ea:e0:2a:f0:aa:e9:40:76:5d:c9:12:2d:7a:
61:25:fc:4a:d7:47:6b:d9:fa:0e:7e:f9:77:14:40:38:2c:58:
1b:f4:5a:96:f9:b0:a2:90:f4:63:13:6e:82:98:8e:cf:af:96:
e2:c8:73:79:75:00:bd:49:a9:d8:8d:4d:fc:5b:4e:3a:94:15:
fb:30:3d:01:b6:39:2b:b1:97:89:a1:76:53:e3:db:87:20:a1:
2e:4a:bc:9d:dd:e7:08:a2:70:5d:1b:54:c1:b2:ee:11:c2:78:
00:cc:d1:ed:91:8e:7e:36:47:c2:99:54:bf:e1:02:44:1d:a4:
64:32:ed:98:73:b4:8c:3b:2a:89:bf:48:62:a7:5e:8b:18:47:
e3:fa:13:22:1c:6f:92:f6:22:8d:65:5c:c9:ad:59:ce:ed:d9:
0f:5c:b2:e4:31:38:88:75:32:c9:96:2d:0f:97:ec:69:7c:08:
4a:cc:97:58:82:18:c2:08:67:6c:ac:ba:7f:c9:ae:89:a8:8f:
9f:cb:a4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:39 2025 by rpki-client