Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wez1FG62YrbaP4x-i1WVn5cEGD4.roa
File: wez1FG62YrbaP4x-i1WVn5cEGD4.roa (raw, json)
Hash identifier: ln8Mk9qI/e++xcrlNehFN0QxMROfxLyIFvN+D5MzSpI=
Subject key identifier: C1:EC:F5:14:6E:B6:62:B6:DA:3F:8C:7E:8B:55:95:9F:97:04:18:3E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E90245973612E998F749D4AE7508F6B45
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wez1FG62YrbaP4x-i1WVn5cEGD4.roa
Signing time: Sat 30 Mar 2024 16:14:45 +0000
ROA not before: Sat 30 Mar 2024 16:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:90:24:59:73:61:2e:99:8f:74:9d:4a:e7:50:8f:6b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 30 16:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1ecf5146eb662b6da3f8c7e8b55959f9704183e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:da:1f:e8:45:60:7a:15:00:c5:be:ce:74:c0:
a0:19:40:24:4b:c7:05:3e:a9:f2:4b:f3:1f:67:d5:
e6:b4:a7:4a:2c:f4:f2:fa:ad:1e:da:ac:7d:b4:80:
8e:98:52:44:a6:b6:5d:75:ba:c0:8a:f4:34:01:2a:
9d:a6:ff:28:bc:e2:9d:7c:ee:1e:84:59:b5:a3:82:
8a:9f:c9:32:ad:61:21:91:46:80:75:24:a0:ed:1e:
76:7f:2d:7b:9e:69:61:2a:03:07:72:37:c5:2b:f3:
f9:2e:c6:52:77:b7:7a:4b:8e:95:21:1c:65:18:44:
29:bd:9a:d8:e6:e5:48:a2:1a:a3:ff:de:9a:63:2c:
4f:4e:36:37:e7:d2:b0:a0:57:b1:22:a0:1e:69:c9:
29:05:84:98:c0:09:d4:5f:a3:8e:e6:ac:a1:1b:bd:
d5:d9:5d:67:11:42:53:12:98:b0:00:4a:93:ca:2f:
af:2a:fe:77:5c:0f:20:34:84:ce:bf:28:02:3b:60:
a3:82:25:c0:e1:ab:ea:21:1d:51:d7:98:d2:ce:dd:
4c:4e:08:36:59:52:68:73:ff:79:1d:79:9d:5d:75:
67:62:68:b8:66:63:be:44:05:2f:f6:93:6b:a3:17:
63:1b:1d:60:f9:d8:53:fe:ff:f2:f1:ce:dc:34:0f:
65:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EC:F5:14:6E:B6:62:B6:DA:3F:8C:7E:8B:55:95:9F:97:04:18:3E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wez1FG62YrbaP4x-i1WVn5cEGD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:af:7e:1b:88:73:ca:9a:74:2e:c6:18:ff:92:e1:65:00:76:
38:ab:ef:03:61:b8:03:d0:aa:7d:28:23:b6:bc:2f:e1:cb:2b:
5a:2f:c1:74:84:1c:31:03:5e:19:29:6e:0b:01:8e:e7:b1:16:
cd:2b:89:17:a6:ef:04:85:5a:b3:23:2e:9c:7f:99:66:87:eb:
da:76:f4:5b:49:f6:bf:30:14:c0:15:3e:e2:f9:9d:75:de:4e:
ce:a9:fe:af:f9:03:c5:1c:5e:af:1b:a3:0f:8d:3b:1c:e9:6c:
fc:71:9c:94:67:ae:80:b8:fd:83:64:2f:4f:92:04:49:2e:ce:
74:9b:ce:93:c5:bc:ed:3f:37:a0:1f:7b:cb:b2:2a:84:83:04:
81:42:63:d5:a9:f2:86:f9:12:af:03:58:7b:b2:8c:07:13:44:
d5:37:e1:7d:bc:3d:3d:1a:91:ba:91:8f:c9:91:58:56:9d:68:
64:82:e7:03:ed:19:f8:98:3f:37:cd:0c:de:7c:f0:43:78:e4:
e6:08:c6:42:0e:39:f3:97:6f:81:aa:d7:1f:0f:70:d1:38:99:
4e:31:b2:3c:09:fe:30:9b:18:b3:68:a9:6f:da:b9:59:0b:d6:
3a:cf:7c:ea:7b:03:4e:56:21:77:d8:3f:ee:4a:dc:9e:7c:54:
d2:75:b5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:37 2025 by rpki-client