Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/stwWqSbePoavQ5DFIphY85bI5Jc.roa
File: stwWqSbePoavQ5DFIphY85bI5Jc.roa (raw, json)
Hash identifier: z4kc7ts8hDIz7IWvBn7NUALDWJlPJ5iPmUNYVLaSSq0=
Subject key identifier: B2:DC:16:A9:26:DE:3E:86:AF:43:90:C5:22:98:58:F3:96:C8:E4:97
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E96C791FB67A472D1B68CB896FD26A36C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/stwWqSbePoavQ5DFIphY85bI5Jc.roa
Signing time: Sun 31 Mar 2024 23:10:45 +0000
ROA not before: Sun 31 Mar 2024 23:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:96:c7:91:fb:67:a4:72:d1:b6:8c:b8:96:fd:26:a3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 31 23:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2dc16a926de3e86af4390c5229858f396c8e497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:dd:6b:4b:d0:53:18:7e:57:56:b5:73:4e:
23:22:eb:4f:08:21:76:05:4c:06:a5:57:63:6f:1f:
93:03:a1:33:6c:f8:b1:61:33:4b:d3:55:25:bc:96:
04:98:fe:d7:f5:54:ea:1d:c1:02:53:d3:b5:c2:18:
1d:d8:fa:76:a9:e5:d9:5d:18:37:3e:6f:25:ef:fd:
c9:19:ac:1d:9e:aa:20:c4:40:2e:f1:97:42:16:ce:
f5:22:1d:e2:ee:a5:1d:94:47:53:b2:01:fe:02:97:
42:9d:89:45:00:d4:c8:57:22:4e:26:80:97:dd:f2:
d6:4d:b8:5c:b1:ec:d4:83:4f:02:3a:ed:c0:27:77:
0d:01:f7:03:eb:b8:7c:70:e0:6e:55:39:d5:8f:f7:
9f:19:00:0e:9a:30:db:aa:92:b0:1c:34:d1:8d:b0:
21:75:77:22:37:d3:39:98:ed:d2:da:2a:45:5a:dd:
0e:ac:57:99:86:54:0b:d3:34:85:dd:4f:8b:ff:69:
45:61:46:f4:51:15:de:9f:b7:69:de:2c:9e:d1:97:
4f:de:3d:25:77:15:44:93:33:f7:56:50:44:5f:a4:
54:b1:28:6a:0f:9d:ba:8f:4c:44:62:57:36:57:6c:
05:4b:15:44:c2:c0:97:6d:44:53:f2:73:76:fe:f1:
ef:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DC:16:A9:26:DE:3E:86:AF:43:90:C5:22:98:58:F3:96:C8:E4:97
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/stwWqSbePoavQ5DFIphY85bI5Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:3f:e9:78:d9:7c:af:e4:a8:7e:4f:26:e8:3b:f0:7e:0e:ad:
02:60:fe:23:04:24:71:c5:13:ac:0a:5a:8b:3b:f3:7e:a5:27:
37:d1:b2:0e:d5:cd:75:ed:19:f9:ca:64:d4:f2:56:6b:5a:e8:
ea:9b:f8:6f:83:ce:c5:a4:99:ff:46:46:7d:30:02:de:bb:b8:
5f:c9:b5:09:4d:43:8b:e9:d6:87:dd:64:36:f0:26:22:56:e0:
f3:f4:c6:09:e6:5f:b2:aa:81:d4:1f:43:48:ea:27:ad:71:8f:
94:1a:7f:a5:03:16:fd:80:eb:d9:ac:0e:d3:97:ec:4f:ad:9b:
6b:ee:0a:30:3c:15:06:ac:49:f6:69:d7:b6:6b:71:36:fc:32:
15:d9:d6:e3:28:73:84:80:c6:14:ab:a8:66:ea:7f:e1:06:c4:
d8:28:8b:28:65:85:b4:ab:de:62:b3:f7:ff:53:31:e5:15:4b:
d9:a9:25:0c:ba:21:26:e9:f3:ad:97:56:67:07:70:f2:92:18:
f3:f3:ed:4e:92:ac:45:dd:91:5c:1d:f1:58:90:26:e9:22:7c:
4a:b3:69:54:eb:91:49:10:fc:f2:21:cb:56:44:33:aa:1d:bb:
b1:be:be:e4:f9:1e:42:27:5a:ef:d1:09:7e:07:69:b3:8b:66:
c3:01:86:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:56 2025 by rpki-client