Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w_4skcT14ljDHVWfDyD816jIf1c.roa
File: w_4skcT14ljDHVWfDyD816jIf1c.roa (raw, json)
Hash identifier: vKj8VAYsE4qYArKGYRn7nNr5mGnwoWlir/ltzqHx0xI=
Subject key identifier: C3:FE:2C:91:C4:F5:E2:58:C3:1D:55:9F:0F:20:FC:D7:A8:C8:7F:57
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E957FCFF78548F557B2B60ADC5D4C1865
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w_4skcT14ljDHVWfDyD816jIf1c.roa
Signing time: Sun 31 Mar 2024 17:12:45 +0000
ROA not before: Sun 31 Mar 2024 17:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:95:7f:cf:f7:85:48:f5:57:b2:b6:0a:dc:5d:4c:18:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 31 17:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3fe2c91c4f5e258c31d559f0f20fcd7a8c87f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f6:2a:6a:49:ca:f1:b1:e1:e2:e7:a5:83:67:
da:b2:e9:e7:cd:d7:d3:59:5c:b7:c6:28:13:b0:8e:
50:31:63:db:aa:e1:fe:35:cf:00:61:b7:be:a4:8d:
e4:4d:d5:d1:de:27:f3:83:de:5d:21:1c:7b:15:9d:
5d:fe:e8:8d:47:bc:d1:6e:c8:5b:e9:68:89:6f:a9:
2c:d4:9b:b5:38:3f:f0:ae:6a:d4:f5:33:4f:69:53:
e2:31:d7:9f:39:0a:f0:f5:16:97:c6:74:07:8e:48:
5d:b5:87:70:e7:d6:3f:2a:4e:fd:61:d5:ec:f2:3f:
95:a3:af:85:ca:d4:9c:bb:15:43:bc:57:6e:5c:d9:
de:2c:6f:90:e3:1a:5b:7e:fe:5a:96:a6:db:06:32:
7b:18:da:3e:27:82:d6:43:08:a2:03:20:17:6e:88:
c3:34:8b:45:eb:b0:56:24:eb:6a:e8:cd:d6:9f:98:
5b:d3:b3:eb:d6:6f:c9:bd:17:44:5a:9b:ff:02:5b:
0c:ae:46:ce:5b:56:8e:38:c6:10:27:f6:2a:54:13:
a2:16:02:ae:3a:d6:b0:dd:53:14:22:ea:6d:cd:93:
40:47:cf:ec:24:1c:40:3b:e7:3b:71:00:90:eb:89:
9f:bd:91:78:23:50:b8:1d:c9:4e:5d:1e:43:45:45:
29:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FE:2C:91:C4:F5:E2:58:C3:1D:55:9F:0F:20:FC:D7:A8:C8:7F:57
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w_4skcT14ljDHVWfDyD816jIf1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:92:c6:04:04:d3:be:8c:98:81:61:a0:82:d0:57:61:08:df:
1e:65:2b:f1:ed:66:bc:95:c1:7a:cd:c9:3e:d1:9e:f5:bf:ef:
5d:df:3b:b7:fb:05:4b:72:ef:85:63:b2:e0:b6:46:c6:f0:02:
6e:19:19:a4:7e:cc:bb:d3:47:a4:3b:50:03:5f:86:ec:9c:2e:
ea:b4:be:0a:86:25:bc:dc:5f:a9:67:71:8c:7e:cd:20:44:24:
1d:2c:7a:15:62:f0:5f:89:41:0e:6a:39:74:56:45:e5:3b:92:
ab:c9:f0:78:59:55:7f:68:9d:24:68:ed:a8:10:59:95:08:70:
93:c2:e2:b7:5f:40:50:c7:98:aa:14:b4:6a:45:aa:78:cd:30:
e7:50:28:3b:91:0a:52:d7:e8:11:ad:53:3a:37:7c:e2:23:0a:
c8:38:c3:28:f4:c8:0c:cc:df:34:3d:87:a4:48:df:11:7b:c7:
0a:f0:24:94:04:c7:d6:e0:59:94:9b:0f:1e:3c:0d:0f:3f:32:
82:a6:2d:f3:76:22:56:69:58:1c:66:8f:a8:14:b6:3f:b1:7f:
9f:2d:5a:8a:cf:74:dd:c0:4e:7a:80:01:e1:ef:8a:54:93:dd:
f6:21:55:96:85:84:79:c1:3f:c3:a3:43:d4:35:56:6e:55:9b:
35:9c:e3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:52 2024 by rpki-client on console-ams.rpki-client.org