Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Wsh1mF74NMROgMOuhXEpQ7IfO78.roa
File: Wsh1mF74NMROgMOuhXEpQ7IfO78.roa (raw, json)
Hash identifier: pC+7XKY93ClRVsmMFen9yAPaj4eCmBF7DGmjK+6y2tQ=
Subject key identifier: 5A:C8:75:98:5E:F8:34:C4:4E:80:C3:AE:85:71:29:43:B2:1F:3B:BF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E74058F3772D6DF03EB7310484CFE8A0D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Wsh1mF74NMROgMOuhXEpQ7IfO78.roa
Signing time: Mon 25 Mar 2024 05:11:45 +0000
ROA not before: Mon 25 Mar 2024 05:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:05:8f:37:72:d6:df:03:eb:73:10:48:4c:fe:8a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 25 05:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ac875985ef834c44e80c3ae85712943b21f3bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:14:56:d7:78:01:ac:95:65:21:a8:18:70:
9e:c5:30:14:1a:90:b0:89:51:59:d9:d5:10:db:7c:
d0:d5:b7:1b:22:a0:c8:69:76:9d:d1:08:97:79:53:
dd:3f:8e:53:0c:bc:30:48:e3:61:90:6f:2e:79:ee:
00:a3:1e:c9:a9:55:ed:69:79:92:f3:1f:96:29:6f:
d5:fe:51:93:e3:23:1c:72:3a:09:99:af:92:2b:a0:
43:7b:97:c3:3b:72:21:9f:78:a0:ae:46:93:1f:b5:
4d:64:36:f2:81:85:c3:be:24:f4:eb:b1:6e:1c:d7:
90:75:4e:9e:a9:de:72:80:1b:76:63:c2:25:d7:b5:
20:42:18:5a:0b:e1:52:8d:aa:b8:7a:14:ad:bd:cc:
64:76:4c:63:89:5d:0f:bb:b1:96:2e:94:1c:08:0b:
36:98:82:91:23:ad:aa:06:af:1c:f8:19:f0:37:cf:
68:65:9d:9d:c6:08:4c:e2:67:51:ad:4f:81:dd:4c:
d6:10:87:6e:0d:bc:f4:73:5c:ce:63:1f:57:b4:a2:
a9:fd:55:4a:f8:52:35:db:96:31:14:97:d0:35:9b:
bd:61:87:89:58:59:b1:3e:92:aa:a6:79:16:69:aa:
3c:37:18:86:ad:35:c5:c8:b5:b9:dc:e4:bb:56:b0:
23:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C8:75:98:5E:F8:34:C4:4E:80:C3:AE:85:71:29:43:B2:1F:3B:BF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Wsh1mF74NMROgMOuhXEpQ7IfO78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:96:02:4f:f7:be:09:32:18:6f:37:46:a9:49:c7:1c:9d:c2:
ec:49:dc:ff:32:9a:4b:df:3b:a6:a6:ae:36:63:a8:90:b1:15:
c1:c6:12:d4:ae:71:06:3c:23:11:d5:24:dc:e7:ea:f6:57:30:
14:7c:3a:eb:73:4a:95:22:23:45:f7:36:2d:7b:58:fc:90:1d:
cd:0d:ed:4c:44:2f:34:13:e0:2b:da:5d:92:35:ca:50:6a:78:
a9:a4:f7:12:18:84:a8:0b:a0:45:23:fd:d2:ab:79:75:59:16:
92:bb:1b:00:9e:3e:5d:76:6e:a0:c8:9d:e8:b6:3e:f7:58:97:
f2:e9:e4:aa:d4:0c:b9:16:72:a7:ae:85:b6:78:d3:c6:f6:88:
44:aa:c3:4e:c0:b4:04:9d:ed:59:27:c9:31:a2:7c:07:75:bf:
9f:67:ea:6a:6e:a5:ce:3e:dd:03:0e:d1:3e:50:41:24:55:54:
c7:a4:3a:2a:52:ff:f3:b2:be:bd:7b:d5:27:74:e0:48:5c:5f:
c6:89:bf:03:c6:0b:9a:df:0d:45:f0:95:5f:22:d4:0b:b8:10:
5a:ca:ef:81:5a:4e:4c:09:15:7d:91:18:2e:be:f6:a2:7f:4a:
fe:02:11:07:9a:cf:a9:6a:77:44:96:15:ec:84:9e:19:1c:27:
b8:2d:13:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:49 2025 by rpki-client