Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w062rO_7lcDRZW-QP5Gwf35TVg0.roa
File: w062rO_7lcDRZW-QP5Gwf35TVg0.roa (raw, json)
Hash identifier: YAWK5h/Jz1ooQYV2tKaiBJVPgVkRg8aIKd0GIf8CqWk=
Subject key identifier: C3:4E:B6:AC:EF:FB:95:C0:D1:65:6F:90:3F:91:B0:7F:7E:53:56:0D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E44D26DCFF8ACE1BB907AD58A745E02C9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w062rO_7lcDRZW-QP5Gwf35TVg0.roa
Signing time: Sat 16 Mar 2024 01:13:45 +0000
ROA not before: Sat 16 Mar 2024 01:13:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:44:d2:6d:cf:f8:ac:e1:bb:90:7a:d5:8a:74:5e:02:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 16 01:13:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c34eb6aceffb95c0d1656f903f91b07f7e53560d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:23:47:1a:2d:76:3c:63:52:4b:d1:75:d0:28:
06:14:f2:75:e8:bf:78:d4:ce:d0:60:38:c5:a9:f8:
70:bc:6b:9b:bc:85:0c:7f:09:36:2f:1b:bc:4f:3b:
ae:ff:e5:f0:cb:21:b8:a5:67:a3:46:f6:61:bd:af:
19:df:1f:ec:dc:7e:ef:41:bb:4a:8c:e0:62:fd:2c:
eb:e9:32:e4:79:a4:44:d9:45:74:52:20:3f:b3:14:
a3:15:ad:d3:e3:ff:f0:87:4a:4b:2d:f1:47:6f:98:
98:f3:bf:5f:d7:2c:3d:59:d0:cd:98:28:c4:5d:92:
9e:45:ec:f7:61:c0:a9:aa:62:ed:83:54:59:57:b2:
21:7e:d6:61:be:10:ab:12:ac:00:22:47:13:45:d6:
0b:38:97:39:a8:13:20:12:89:4e:83:57:1e:e2:8b:
1f:48:40:5b:34:43:ab:12:86:60:76:a0:2c:98:8c:
27:21:be:b7:85:78:25:c3:18:ae:02:d6:4b:93:a4:
f1:17:ab:6f:ac:5b:a3:1e:a4:13:ed:ed:ac:65:a8:
25:e5:61:5a:5c:45:89:aa:d6:26:cc:d5:62:60:c8:
ed:bd:3a:37:b7:26:d3:e8:7e:b7:11:8a:27:80:d2:
40:7b:db:92:70:44:21:5a:7d:c7:ff:85:d8:cf:0c:
4a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4E:B6:AC:EF:FB:95:C0:D1:65:6F:90:3F:91:B0:7F:7E:53:56:0D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w062rO_7lcDRZW-QP5Gwf35TVg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:37:5a:8f:3a:c0:c1:0d:fa:eb:7f:aa:8b:91:20:a0:97:f7:
d2:b4:1d:b5:b2:b0:dd:27:84:f5:0a:7a:f0:69:3e:29:7f:cd:
a8:81:4f:53:70:63:34:e6:6a:45:27:90:be:61:93:cd:4c:19:
2e:94:d1:c4:af:ff:eb:03:c4:77:fa:c3:c6:2e:09:c8:b9:e9:
b8:83:8b:45:4f:6c:c6:de:8c:9c:99:3d:83:a2:36:8f:5b:68:
b4:fd:a5:a3:c4:e7:a6:77:bb:6a:dd:19:25:b6:29:28:05:3e:
b0:63:67:6f:da:e4:6e:92:8d:58:37:ec:8e:34:b4:ee:00:7d:
2a:2e:1a:5d:5b:d4:5d:99:25:65:f7:89:38:b4:8a:f6:78:ad:
92:5a:bd:78:31:f6:7a:91:2a:1f:d9:d6:68:cd:bd:34:29:94:
bb:8b:94:0b:84:37:37:ea:48:f8:b9:ae:a2:c7:9b:df:38:be:
c2:cc:6b:b0:bb:f2:e2:1a:7d:f6:5d:dc:a6:9d:9e:b0:eb:d6:
5d:bf:a9:32:31:21:fa:1f:be:ff:22:58:b0:1a:52:3e:d3:e6:
2c:47:bb:f3:2e:cb:46:27:12:08:ae:33:5b:28:9a:0b:d1:67:
6a:7b:e3:d3:26:cf:91:81:1a:83:5f:cf:69:fe:d0:29:30:ae:
15:5c:1f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:51:30 2025 by rpki-client