Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fDWon1QY7SXqfkpEEcFyWm6DYOs.roa
File: fDWon1QY7SXqfkpEEcFyWm6DYOs.roa (raw, json)
Hash identifier: XZDZO4Ah9hwCaxKyke8FhE6rC4Hn9qruinpGAZt3mpM=
Subject key identifier: 7C:35:A8:9F:54:18:ED:25:EA:7E:4A:44:11:C1:72:5A:6E:83:60:EB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E30DBF41584A64C1867C3588BD41FAA0F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fDWon1QY7SXqfkpEEcFyWm6DYOs.roa
Signing time: Tue 12 Mar 2024 04:11:44 +0000
ROA not before: Tue 12 Mar 2024 04:11:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:30:db:f4:15:84:a6:4c:18:67:c3:58:8b:d4:1f:aa:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 12 04:11:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c35a89f5418ed25ea7e4a4411c1725a6e8360eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:cb:99:10:e4:3a:85:18:37:c1:3e:56:66:
f1:eb:13:8d:17:a1:7c:64:4c:02:aa:79:45:27:4b:
1c:ef:af:38:26:85:a6:04:e7:fc:74:6e:c4:72:05:
65:7a:af:49:a3:f4:34:3e:d9:54:2e:43:68:87:2d:
39:18:ba:38:cf:2d:69:34:d4:82:01:b7:44:74:8c:
e3:bc:c6:c4:90:73:d4:98:5b:a9:0f:be:6e:15:74:
0f:74:ce:a6:23:b4:d7:fb:2e:e8:b8:d8:41:fd:00:
5c:8c:89:ce:5f:af:be:cc:da:25:94:cd:64:35:d1:
86:6b:59:6f:dd:6d:b5:af:9e:8c:5b:40:b5:e0:ae:
8b:c4:0c:55:be:bf:3e:3c:9e:da:76:61:05:87:02:
dd:0f:62:bf:6b:a9:30:07:ca:c2:f9:b7:cb:c2:e4:
81:8a:bd:05:bd:ad:e6:e5:fd:32:4c:bc:d0:86:35:
f6:8d:de:59:e7:e9:1d:0f:7b:8c:b7:29:40:ee:e1:
c5:de:05:56:e3:0f:65:f5:16:75:16:02:4f:9e:b1:
fc:1b:3e:49:6d:0b:81:13:dc:2f:38:cd:23:4b:67:
cb:8f:77:2f:dd:09:b1:f8:ff:3f:c1:a9:ba:74:a2:
e4:5b:54:6a:3d:22:1e:a5:c1:85:d7:91:82:4f:a8:
da:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:35:A8:9F:54:18:ED:25:EA:7E:4A:44:11:C1:72:5A:6E:83:60:EB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fDWon1QY7SXqfkpEEcFyWm6DYOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:d0:af:2f:2d:af:c8:d4:a1:cf:de:10:a6:19:92:e5:b6:42:
1a:24:d9:14:4a:23:39:f4:51:c8:d0:9b:b4:a6:01:da:f1:60:
cd:a4:61:57:0c:b4:04:8e:32:13:49:b1:93:76:24:c5:4a:e7:
bd:e0:26:d2:40:67:5b:33:26:f9:7b:18:f6:a8:e2:d9:e1:56:
13:8d:06:32:11:0a:9c:2f:02:8d:04:e9:f5:d0:1c:70:fc:e8:
b3:15:6d:21:d6:f4:f0:de:87:a5:b8:b5:ce:62:1c:a3:2c:f4:
b8:86:58:bb:12:5e:f4:9a:f0:a1:aa:70:2f:79:67:f4:4f:8c:
77:7f:bb:bf:4d:a0:7c:ae:0b:25:4b:06:c4:a7:9c:29:ba:76:
07:e6:22:e7:6b:cc:b5:e0:b8:c1:b6:56:9c:cb:6a:2f:3d:5c:
81:d4:07:a4:ef:67:6c:75:74:94:33:75:e9:b1:7f:78:f0:1b:
b4:9e:4b:5f:1e:27:03:1b:ed:2c:a0:54:12:11:f1:14:a3:b5:
2f:c4:5c:43:66:24:85:8d:5b:a9:07:56:c5:c4:5c:78:87:f9:
e8:b6:d7:01:99:ea:33:1d:4b:72:28:e8:09:10:b1:85:9a:c9:
e2:17:bd:d0:be:c7:2b:75:1b:a1:37:0a:c3:bd:d0:ef:1d:be:
cd:08:56:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:21 2025 by rpki-client