Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wmCIRokPvfyl1krGOxtUzsZKgKo.roa
File: wmCIRokPvfyl1krGOxtUzsZKgKo.roa (raw, json)
Hash identifier: 3Iv8dTUR9IbDZVqu+0qnNUA0DgxE/2jHD+NVah66xOQ=
Subject key identifier: C2:60:88:46:89:0F:BD:FC:A5:D6:4A:C6:3B:1B:54:CE:C6:4A:80:AA
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EA183117BCD60E09AF205DD8AF7BF83C0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wmCIRokPvfyl1krGOxtUzsZKgKo.roa
Signing time: Wed 03 Apr 2024 01:11:45 +0000
ROA not before: Wed 03 Apr 2024 01:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a1:83:11:7b:cd:60:e0:9a:f2:05:dd:8a:f7:bf:83:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 3 01:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2608846890fbdfca5d64ac63b1b54cec64a80aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:79:81:43:28:03:ff:ad:cb:5b:e1:81:5a:97:
01:1e:3b:10:70:e3:d0:1d:7f:51:f2:c8:f7:48:80:
73:35:07:45:6c:1e:71:46:68:ab:ff:b2:ca:5f:fb:
40:27:d8:2f:af:87:49:00:93:1e:31:fe:0e:f4:ce:
3f:d7:e6:65:77:93:dc:f3:3f:30:3f:f0:54:46:3c:
fa:75:35:cb:11:57:f9:2f:2f:c5:59:9d:3d:fa:e6:
50:b4:b2:1e:fc:63:14:63:bc:81:40:d0:ed:81:f0:
26:19:2c:78:c4:af:76:48:41:17:da:f1:f1:ec:39:
14:89:d9:84:58:f3:94:c0:7b:ae:10:ae:a0:39:1c:
d5:fc:43:ef:fd:9d:03:cb:1b:4f:eb:f4:11:ec:e7:
03:6a:7a:3b:aa:b7:d2:11:80:ce:0e:05:27:e0:33:
f9:6b:f4:85:a7:b0:95:71:13:f8:e6:27:fa:90:7d:
a1:17:08:7f:03:87:f0:dc:16:f3:fc:6e:07:ca:7a:
6a:78:17:7c:c4:90:e5:41:8a:fd:a2:a9:da:08:6f:
16:60:f8:b5:6d:40:38:09:82:b6:b0:d1:af:bf:92:
57:a6:f2:d7:da:88:62:91:7e:c3:f3:d4:23:6e:4f:
de:47:34:c2:0f:ad:ba:58:61:65:7f:53:8c:fa:df:
36:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:60:88:46:89:0F:BD:FC:A5:D6:4A:C6:3B:1B:54:CE:C6:4A:80:AA
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wmCIRokPvfyl1krGOxtUzsZKgKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:3f:0b:02:3c:6d:5e:4c:38:2a:bf:71:e3:bd:d1:46:15:a1:
c1:88:22:42:c9:55:d7:6d:44:17:71:9a:2e:ab:26:0b:b2:28:
10:99:7c:23:98:b3:e8:69:de:a7:6f:2e:bb:0d:b1:43:5d:81:
84:bf:80:a8:ff:bb:57:6a:09:38:f6:c5:c3:6a:a8:e3:e7:cc:
f4:92:4d:c3:21:eb:3f:69:95:4b:95:62:8e:70:90:92:a0:2c:
13:d6:ee:4f:bf:0a:01:f0:f7:5a:2b:40:43:3e:09:43:5d:ee:
72:e8:59:d7:d3:6a:d3:97:66:f4:dc:c9:04:82:8c:49:d6:b8:
f3:e6:4a:4a:66:fd:65:f1:22:eb:da:5e:47:76:e4:87:ad:8a:
dc:00:7c:4d:e0:9b:a2:10:bd:8e:0c:d0:b4:b9:38:66:c2:56:
2c:b7:11:64:c6:60:42:04:e5:3d:8b:ff:57:c3:ef:2a:0e:e2:
70:bc:1b:94:95:87:a1:48:82:4b:dd:c6:e2:95:20:e4:54:58:
0a:91:e0:43:d3:3b:17:49:cf:4e:e3:2a:1b:1b:e0:9e:87:32:
80:4d:83:1f:fa:5d:72:f2:b4:e6:dd:0a:10:34:8b:24:3d:73:
94:3a:64:9a:7b:0b:74:38:a2:77:81:0b:e6:c5:2c:9d:c9:6f:
ac:1d:4c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:12:40 2025 by rpki-client