Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WcAmu3gdaHLOa-ScwMeYbCYrIe4.roa
File: WcAmu3gdaHLOa-ScwMeYbCYrIe4.roa (raw, json)
Hash identifier: Lf/OVlWyc+AD4QroOheN8nembPeN9qDZH1eHSpqH55o=
Subject key identifier: 59:C0:26:BB:78:1D:68:72:CE:6B:E4:9C:C0:C7:98:6C:26:2B:21:EE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EBA6745FC2E18CE0EF93A18D8EDF233BB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WcAmu3gdaHLOa-ScwMeYbCYrIe4.roa
Signing time: Sun 07 Apr 2024 21:11:54 +0000
ROA not before: Sun 07 Apr 2024 21:11:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ba:67:45:fc:2e:18:ce:0e:f9:3a:18:d8:ed:f2:33:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 7 21:11:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59c026bb781d6872ce6be49cc0c7986c262b21ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:47:94:68:01:da:b4:36:b1:b1:b1:0a:7b:1a:
69:3d:6c:24:3c:a2:b4:ad:c0:92:85:e4:31:42:05:
a5:c6:4b:44:33:36:58:e3:20:79:d6:a9:48:f9:8f:
cb:d7:c4:56:69:57:9f:a7:09:35:ca:3d:45:cb:95:
2d:cc:31:02:ef:d1:9a:63:79:b3:9d:54:8e:89:f5:
99:8a:ac:3d:e9:c1:36:de:e6:10:96:6f:30:b2:31:
a4:31:66:cc:89:82:75:bb:2a:e2:4f:48:3b:6f:c3:
72:20:29:7e:40:58:35:e8:b8:98:21:b1:f0:3f:b7:
7d:06:81:23:d9:15:2b:74:04:45:74:c7:d8:36:fa:
02:53:9d:7a:9c:79:88:f1:10:a7:7b:87:ec:ce:82:
0c:ec:6c:50:7c:ad:04:f9:d5:e7:16:6e:82:ad:65:
fa:a0:ad:68:0a:0b:13:50:bb:77:d7:92:e7:11:9b:
ea:23:a3:f9:57:02:c9:ba:30:5c:c8:6c:07:21:07:
e4:d3:09:a2:f4:2c:3f:e6:f3:5a:1d:ef:67:e6:e2:
cc:b1:a9:e9:fb:1b:98:c3:a4:76:33:e1:84:52:5e:
0b:53:f6:ca:dc:54:97:6c:a7:9d:65:6b:b0:f6:49:
f0:11:63:b0:0a:b2:49:db:87:d1:ca:74:fe:89:5b:
b4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C0:26:BB:78:1D:68:72:CE:6B:E4:9C:C0:C7:98:6C:26:2B:21:EE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WcAmu3gdaHLOa-ScwMeYbCYrIe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:d9:50:f0:7a:6b:73:1e:22:86:3c:d1:1d:66:6b:43:8c:b4:
02:59:83:aa:51:b2:e5:33:52:8f:15:24:b0:fc:8a:a4:38:29:
e5:42:dc:d8:e3:41:8e:69:70:8b:89:d4:10:72:6c:9a:9f:85:
d1:8d:e2:54:16:a9:88:23:e6:7c:8b:4e:29:bb:f9:12:f6:ab:
7d:2b:9b:a6:0e:65:13:bd:42:43:bf:da:f5:b6:e2:46:fa:0b:
73:76:fd:de:f2:6e:06:88:1c:ac:7c:d0:08:a1:d2:7c:b4:e4:
5b:c5:c8:bf:2f:27:50:f6:66:5b:79:f5:db:7f:06:cb:dc:af:
ab:44:d6:fd:51:f4:3a:49:47:3a:12:a6:cd:0d:86:93:dc:7b:
43:3a:cb:a7:92:c4:66:d0:90:24:9c:94:b5:d9:e7:13:bb:28:
55:27:de:9b:ff:67:b3:27:c4:b7:a0:f9:c4:03:fb:79:d9:fb:
af:96:2e:c0:e6:cc:14:b4:a4:6e:47:b9:d6:df:c5:f4:3e:d6:
aa:a4:bf:25:0c:80:8f:33:00:ff:ef:22:92:1b:e0:d8:7b:c8:
23:aa:27:15:62:0e:01:f8:c1:b6:49:0c:68:6f:a0:5d:4b:12:
3c:39:bd:55:a3:ad:56:ad:95:ac:eb:bc:3f:18:df:c6:ae:c9:
b8:45:de:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org