Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Wfy9Un-sdsyK8cXXWT8olD5XimI.roa
File: Wfy9Un-sdsyK8cXXWT8olD5XimI.roa (raw, json)
Hash identifier: vyOYmBDJ72bdvY1tKfQa0Waf2RiFxNTPBnOY4OsvbH8=
Subject key identifier: 59:FC:BD:52:7F:AC:76:CC:8A:F1:C5:D7:59:3F:28:94:3E:57:8A:62
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E77738C4F0B1CD2ED4B5962E51AD455BD
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Wfy9Un-sdsyK8cXXWT8olD5XimI.roa
Signing time: Mon 25 Mar 2024 21:10:45 +0000
ROA not before: Mon 25 Mar 2024 21:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:77:73:8c:4f:0b:1c:d2:ed:4b:59:62:e5:1a:d4:55:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 25 21:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59fcbd527fac76cc8af1c5d7593f28943e578a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:af:dc:ea:40:eb:21:31:d8:30:ba:cc:df:78:
df:5c:08:cb:57:03:af:4c:d9:31:56:26:7b:b2:12:
78:9e:f0:e8:a4:5f:53:a6:4d:29:69:21:52:2c:6e:
5b:63:e1:06:2e:76:9c:c9:62:b2:69:51:10:d3:b3:
1d:42:d0:9d:7c:a4:b9:fb:94:fa:e6:bd:4c:40:79:
37:85:db:2c:88:72:bc:9e:e4:7e:c1:40:21:04:2f:
29:91:07:e2:d5:a8:fe:d9:90:ea:09:c8:ac:5a:a3:
73:c2:9b:22:eb:ab:dc:11:1c:fb:76:5d:0f:28:01:
0e:52:26:9e:cd:c0:fd:dc:ca:53:50:98:7b:c5:26:
6a:a1:28:88:20:be:27:09:ec:d8:91:fd:0e:1b:a3:
95:9f:a6:74:0b:04:bd:4f:41:be:07:b0:5c:2e:e0:
25:5a:84:eb:cc:86:4c:54:77:7f:82:29:5b:4d:fa:
c7:ac:5b:21:13:8a:f6:a6:aa:ae:ff:e3:9e:20:45:
7c:c6:ae:ce:a6:11:c9:58:26:86:69:6e:71:51:df:
9a:43:52:97:ae:36:2b:ae:ed:c2:dc:7f:b4:0d:ab:
ee:1c:fe:5e:4f:7e:de:f7:95:b7:23:ec:4d:2e:e6:
45:c4:69:7e:68:58:d9:43:ea:41:3c:9c:21:6c:46:
47:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FC:BD:52:7F:AC:76:CC:8A:F1:C5:D7:59:3F:28:94:3E:57:8A:62
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Wfy9Un-sdsyK8cXXWT8olD5XimI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:e9:d4:1f:91:6a:7b:ad:28:77:bf:6f:ae:fc:d1:51:19:5e:
c8:52:08:4b:79:bb:7f:d8:4e:44:b9:a6:45:cd:c1:68:96:64:
73:87:d3:66:a8:6b:b8:89:77:03:23:fe:7b:d8:55:cd:75:a2:
38:64:3d:98:bb:11:21:76:36:a8:22:cf:f2:17:7c:7b:a0:6a:
0b:15:be:73:af:9f:10:c6:03:72:62:a6:4e:1b:10:00:e5:3c:
01:5d:48:0f:75:ff:c6:7a:e4:22:4a:3e:34:2e:ec:e5:b3:58:
65:9f:fd:a8:f0:5a:a6:5a:6c:78:2a:d9:a4:7e:7b:cb:c2:71:
3e:1d:37:7d:0c:ef:bd:57:81:d1:b6:58:aa:1a:ba:29:a9:23:
92:10:be:c4:ff:a6:79:7b:52:bc:a0:36:29:eb:74:af:05:6c:
ff:59:a9:ac:f8:ad:c8:5b:4d:e0:8e:3b:48:54:2b:5c:0a:18:
c3:65:eb:a8:32:25:d4:03:88:d0:9c:13:8f:26:16:08:8e:a4:
ad:8f:cf:ee:bf:ff:92:2b:39:37:64:28:1b:90:57:35:88:7c:
64:75:76:ff:56:67:e5:fc:e9:47:26:ed:80:10:6f:cc:95:1d:
ca:a5:fd:5e:a4:51:89:37:e2:72:99:82:24:fb:6a:5e:d6:78:
26:a7:b6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org