Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w6-S2ht1g_3xwkgl_HjqJLvQCY8.roa
File: w6-S2ht1g_3xwkgl_HjqJLvQCY8.roa (raw, json)
Hash identifier: 0LoCg1KcXmL4yfQqiTRm89F82YPq0alkMcuTJoyMTK4=
Subject key identifier: C3:AF:92:DA:1B:75:83:FD:F1:C2:48:25:FC:78:EA:24:BB:D0:09:8F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D73659F38C48DF621E01E953EDC8E75ED
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w6-S2ht1g_3xwkgl_HjqJLvQCY8.roa
Signing time: Sun 04 Feb 2024 09:14:16 +0000
ROA not before: Sun 04 Feb 2024 09:14:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:73:65:9f:38:c4:8d:f6:21:e0:1e:95:3e:dc:8e:75:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 4 09:14:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3af92da1b7583fdf1c24825fc78ea24bbd0098f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:40:4b:f4:b9:32:4a:88:f8:43:02:29:df:9a:
24:bc:4e:05:39:4d:fd:a6:be:b2:8f:ea:66:6f:9f:
2f:8d:8e:9d:a3:ee:91:13:b0:e4:a4:b7:89:41:f4:
4a:4b:a6:2c:b8:21:26:16:ef:a7:47:6a:66:b3:30:
3a:63:36:1b:0a:2c:d2:50:81:98:be:63:65:a9:79:
b6:3d:6d:b0:3e:68:d6:71:e3:22:a8:a0:82:bc:ed:
f9:6b:a7:21:d2:bb:94:c6:50:03:39:76:0d:08:87:
fc:8d:f3:55:8f:05:d9:8d:21:24:3a:65:9a:fa:06:
63:06:1c:80:29:fb:48:8f:79:05:b6:31:d5:a4:bd:
81:20:0f:7e:c3:df:90:c6:b1:30:b9:19:b7:95:68:
27:0e:46:37:8b:51:f3:36:a0:ba:e5:14:90:bc:dd:
c7:04:ad:35:30:7a:16:ac:c4:6d:da:b0:e8:c8:07:
4d:3f:83:7a:fa:3a:4f:ca:93:32:aa:e7:3e:92:80:
0f:66:aa:34:2a:fe:af:5d:8f:dc:c7:58:d8:19:ba:
11:a0:63:65:e1:99:8e:53:52:09:ea:97:41:39:d3:
c3:83:14:65:c8:bd:94:37:ae:b3:a3:7c:90:60:93:
16:26:17:55:44:14:9d:e1:f3:5d:d9:f1:ce:47:1d:
81:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AF:92:DA:1B:75:83:FD:F1:C2:48:25:FC:78:EA:24:BB:D0:09:8F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w6-S2ht1g_3xwkgl_HjqJLvQCY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:94:3e:f8:06:36:a4:46:d3:9e:12:08:0a:ad:5b:41:bd:1b:
7d:90:28:ee:69:49:e1:f4:4b:f7:80:ed:f5:96:ba:6d:34:de:
c4:e1:1c:c0:0f:d0:d9:45:af:67:72:9b:85:ce:b5:9c:47:6e:
7b:ce:ba:57:fb:e0:52:9d:1c:2d:fc:b9:8c:c2:c1:93:8f:fd:
c9:2f:70:e1:0a:0c:b8:73:e1:94:05:a7:f4:e1:94:1b:03:c2:
45:74:fc:1f:14:01:d0:f2:dd:77:60:18:ba:44:97:50:f3:59:
70:b5:4d:e8:ae:a7:1f:ac:a2:28:14:a1:d5:8e:26:e8:fb:b5:
de:17:8b:9e:cb:c9:6f:3e:78:30:4d:e9:17:f3:bd:2e:60:b2:
33:f4:8f:fb:57:47:7a:dc:85:82:20:e9:3f:f5:b9:16:ee:96:
2f:e5:87:f1:95:79:73:7b:31:e3:7c:34:45:78:47:44:8c:96:
b5:84:bb:b8:f2:59:bd:18:2d:42:2d:13:08:af:e9:82:e3:42:
6e:2f:2b:38:95:1b:75:ac:10:c2:36:28:2c:28:be:1a:3a:3e:
52:71:43:14:31:17:33:df:ad:fd:8f:d1:21:eb:6a:11:cc:b6:
b0:b8:e6:cb:d8:72:95:ac:fe:5c:5c:0f:24:3a:22:f3:2d:11:
a3:7e:8b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:26 2025 by rpki-client