Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZWoKKu9em1fURHCJ_GIk1RZE2OI.roa
File: ZWoKKu9em1fURHCJ_GIk1RZE2OI.roa (raw, json)
Hash identifier: 49FvwLFFEkc5P9cX8mgaPypELJrrrY33FEF1dk0V8bk=
Subject key identifier: 65:6A:0A:2A:EF:5E:9B:57:D4:44:70:89:FC:62:24:D5:16:44:D8:E2
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E984816ED4D289A240C6FE591AA5D5494
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZWoKKu9em1fURHCJ_GIk1RZE2OI.roa
Signing time: Mon 01 Apr 2024 06:10:45 +0000
ROA not before: Mon 01 Apr 2024 06:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:98:48:16:ed:4d:28:9a:24:0c:6f:e5:91:aa:5d:54:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 1 06:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=656a0a2aef5e9b57d4447089fc6224d51644d8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a7:c1:58:c3:a6:46:10:92:67:6a:c0:f0:86:
4c:04:60:b6:54:3f:59:37:c6:a2:8b:67:23:05:e3:
ae:78:80:12:86:7e:0a:7d:c0:a6:d9:f4:09:31:ba:
47:f8:c1:97:2d:9f:23:e9:0e:b9:99:83:18:7d:40:
1a:1e:d6:ed:97:fb:5f:f8:af:ce:f1:53:7e:08:31:
e6:84:d3:63:61:7c:35:95:87:84:ed:d7:ea:b6:18:
5e:a7:01:4f:d9:f8:98:85:62:9c:53:fa:fd:c2:8b:
a7:b1:e4:a8:82:45:3d:85:3f:9f:d6:08:05:e1:4b:
8e:24:62:fd:23:d9:18:6b:2a:b2:70:86:ab:a6:d1:
8a:96:11:de:a4:99:7d:6c:72:66:73:27:a1:1e:ec:
a6:c0:f5:1f:b4:7e:cf:e8:44:7c:4b:60:e6:f4:a3:
af:72:9e:9b:fa:39:69:6b:49:3b:b3:5e:a8:f4:e6:
0a:e0:64:4a:ca:8b:4f:81:c0:20:67:95:cc:01:c9:
85:af:e9:93:7c:22:2a:e2:4f:f1:c6:dd:38:29:d8:
a9:a4:e2:30:df:b7:c3:66:b1:fb:d0:ea:b4:a1:59:
c8:25:14:08:52:45:b5:25:66:99:94:cf:ee:96:5d:
06:c9:11:4a:c6:a9:1d:a9:54:13:f9:20:74:7b:61:
c5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6A:0A:2A:EF:5E:9B:57:D4:44:70:89:FC:62:24:D5:16:44:D8:E2
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZWoKKu9em1fURHCJ_GIk1RZE2OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:7f:86:e1:2a:8f:10:5c:cc:02:11:f0:62:dd:1b:a5:c6:24:
24:4f:56:7c:38:f2:c2:0a:22:d4:86:3b:18:03:1c:1e:cc:e2:
b3:56:02:04:2c:e0:a9:a8:16:d1:68:11:74:d9:5a:06:e3:d1:
d0:6b:b9:33:51:82:76:4d:de:ff:ab:4d:54:a9:27:19:c9:94:
4c:ed:d7:bf:67:b4:8f:0a:61:1b:11:0b:b3:a9:c6:30:4f:1a:
53:2f:a6:88:06:3f:aa:2e:f1:e3:09:e1:a0:f3:06:5a:6a:aa:
2c:6f:ab:4a:aa:04:68:97:fb:4e:82:28:bb:25:3c:80:49:4b:
47:7b:ff:ba:e4:a8:fd:93:8a:48:35:62:5b:4e:13:4f:2a:c1:
97:97:81:c5:33:97:1d:c5:32:4c:8f:b2:35:1c:b8:c2:8f:12:
9b:df:f3:15:dc:b8:d4:46:61:ce:93:71:83:0b:88:46:dd:bd:
e7:94:2d:45:5b:b4:ad:87:24:e5:1f:34:7f:3d:6e:7e:17:31:
38:1a:69:86:a0:32:7c:42:89:f9:97:e1:b4:b1:f0:82:85:b5:
9f:e2:fc:1e:4d:85:ce:e3:42:95:0a:88:c0:93:e6:02:40:9d:
e1:4b:64:50:ab:12:a2:ea:3b:6a:74:56:32:71:c3:85:cb:c2:
27:c3:cb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:51 2024 by rpki-client on console-ams.rpki-client.org