Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WWVJQzeA_gqna-2jeUwbqYowzvk.roa
File: WWVJQzeA_gqna-2jeUwbqYowzvk.roa (raw, json)
Hash identifier: gpOiOvjyhbGYZSoFbnq0cQoptKKHSbhUDXh88+cxRfA=
Subject key identifier: 59:65:49:43:37:80:FE:0A:A7:6B:ED:A3:79:4C:1B:A9:8A:30:CE:F9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D06C96FBC79CAC184572737ABE12BA58A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WWVJQzeA_gqna-2jeUwbqYowzvk.roa
Signing time: Sun 14 Jan 2024 07:04:41 +0000
ROA not before: Sun 14 Jan 2024 07:04:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:6c9:322f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:06:c9:6f:bc:79:ca:c1:84:57:27:37:ab:e1:2b:a5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 14 07:04:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=596549433780fe0aa76beda3794c1ba98a30cef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:fd:39:58:35:b7:94:0d:52:1a:3e:53:72:
c5:be:bd:9f:d2:28:e6:35:29:28:95:92:f8:1e:ef:
e7:32:14:1e:85:b1:ff:d4:a3:76:01:60:5c:3a:1a:
9f:c8:fe:b5:9d:c7:2e:8d:03:14:72:c6:4a:04:eb:
ae:ab:d0:7d:c1:c4:9c:14:48:9f:91:c0:19:84:c9:
22:74:70:76:47:20:73:75:ec:90:36:26:55:d4:23:
72:1c:a5:66:2e:5a:43:86:97:54:64:8f:54:82:c1:
85:ab:24:51:eb:db:0d:fb:73:4a:f8:51:79:cc:4c:
5f:18:36:59:34:36:45:96:c2:65:70:68:00:e6:c6:
fb:f7:77:39:08:f5:c8:34:c2:41:10:2a:ea:2e:83:
8d:09:52:25:88:10:dd:2a:ea:d3:d0:59:93:6d:ae:
4a:ea:e5:e0:7f:aa:a7:fd:33:54:4c:10:ff:12:ba:
e4:be:23:72:0f:ae:f1:1a:60:f2:4a:c9:dd:7f:4b:
75:6f:5a:ae:2a:c2:a3:55:ba:1f:70:cb:92:bc:58:
4e:90:bb:83:36:d0:40:0b:89:da:0d:75:a9:ce:2d:
16:85:d4:61:07:fc:aa:a3:27:a9:60:a7:83:7c:fe:
03:e5:27:dd:6a:d1:ff:2a:d1:5c:37:a9:c4:13:09:
83:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:65:49:43:37:80:FE:0A:A7:6B:ED:A3:79:4C:1B:A9:8A:30:CE:F9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WWVJQzeA_gqna-2jeUwbqYowzvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:3e:8b:ea:67:53:47:18:57:56:b3:0a:42:22:fd:4d:fe:10:
2d:c1:1d:50:4e:c2:c9:8a:b9:7f:8d:f7:f7:c7:b0:b1:3d:3f:
69:ae:96:a4:22:21:7b:e0:46:b7:4f:a7:10:71:be:6f:6e:5d:
b1:46:76:54:f5:60:f3:ac:22:36:44:bb:35:5c:a5:95:26:26:
cd:c2:96:2d:bb:3c:d3:63:fc:10:bb:65:9d:78:44:da:81:16:
22:1b:d2:2f:12:29:4f:5c:e3:90:b2:b7:3a:69:9d:c7:0e:b6:
a3:5f:62:89:5d:87:17:8a:00:0e:7f:2d:17:0f:a0:05:92:91:
0d:a3:58:aa:21:03:e4:6f:ac:c0:75:bf:58:90:ba:80:67:4c:
bb:9c:3a:8f:9b:fb:79:30:8c:64:99:a5:4f:de:d3:16:08:2e:
79:a3:07:36:bd:69:10:17:bf:c9:86:b3:cf:af:2f:0d:d7:72:
3c:d7:66:bd:bc:72:f1:b2:d9:07:0f:48:e8:ad:71:13:43:61:
d3:13:2e:25:bd:18:17:2e:57:dd:db:88:23:d1:45:52:2e:c2:
88:49:fc:bc:c4:38:36:eb:e3:23:4a:c5:e0:e9:4a:0f:30:64:
b0:b5:c8:82:a9:73:fc:f7:e3:04:60:28:48:8c:04:0b:be:1c:
89:ac:1c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:15:08 2025 by rpki-client