Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Wnq2A1aP6PhoH8AptdHTfqOrHb4.roa
File: Wnq2A1aP6PhoH8AptdHTfqOrHb4.roa (raw, json)
Hash identifier: co8APMDCtm5AWwPN5xk0rA93AEWgLSOBZorno/T5E6g=
Subject key identifier: 5A:7A:B6:03:56:8F:E8:F8:68:1F:C0:29:B5:D1:D3:7E:A3:AB:1D:BE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D751DFE554B8CBA58C182751B3924ECD0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Wnq2A1aP6PhoH8AptdHTfqOrHb4.roa
Signing time: Sun 04 Feb 2024 17:15:16 +0000
ROA not before: Sun 04 Feb 2024 17:15:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:75:1d:fe:55:4b:8c:ba:58:c1:82:75:1b:39:24:ec:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 4 17:15:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a7ab603568fe8f8681fc029b5d1d37ea3ab1dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:45:cd:86:96:78:9b:86:5c:99:b0:2e:67:c4:
04:7c:bb:8f:1f:59:64:ee:be:51:06:3e:44:bb:02:
03:0c:ae:ff:8b:cd:05:bd:e7:8f:de:3f:3d:02:8d:
be:8a:84:3f:e0:0e:57:fb:c0:18:ae:36:19:69:10:
3d:be:ed:5b:c4:82:cf:a7:65:f6:a6:e3:c9:ef:3d:
34:03:23:b5:e8:fa:48:ca:17:dd:9f:24:4f:13:fa:
0b:d3:15:7f:fa:bf:73:08:f8:a8:d8:96:c4:23:83:
fe:f9:a9:70:2a:c3:cc:b7:e1:af:e1:95:8a:f9:27:
f6:a6:7c:bc:62:ee:85:a7:0d:13:78:b8:57:2c:27:
2b:51:26:34:aa:cf:73:e1:88:a5:3c:12:da:4d:cb:
bc:f5:3a:75:34:6e:af:4b:12:e3:ea:84:ec:02:91:
ba:e2:95:8a:3a:45:80:ad:fb:47:e7:3a:40:d8:e1:
11:67:7b:13:07:0f:b3:6f:54:28:83:f3:a1:71:05:
6f:d4:b8:8a:80:a6:14:0b:db:1c:96:f4:58:68:03:
9e:71:8a:c0:5e:72:2d:ab:03:d3:92:1b:cc:9f:fa:
06:39:22:2e:cd:98:24:25:31:a1:c0:8f:61:e3:ca:
08:00:5f:38:fa:45:f0:ee:35:7a:c0:23:68:1b:5a:
7a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7A:B6:03:56:8F:E8:F8:68:1F:C0:29:B5:D1:D3:7E:A3:AB:1D:BE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Wnq2A1aP6PhoH8AptdHTfqOrHb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:e8:db:5f:b9:70:0f:c9:3a:ef:fa:e1:c3:1d:e2:0d:ec:a0:
ff:6e:8d:22:92:08:00:fe:38:ed:f7:58:6c:30:8d:5b:dd:f0:
db:2d:63:5f:20:1b:4f:9b:ba:a6:d2:16:79:5a:bb:06:53:56:
ff:19:07:6d:ca:42:66:b6:e0:5e:3c:c0:29:a3:d4:15:fe:5b:
f1:f1:a3:7a:a6:74:ae:22:32:b9:cd:82:ee:5e:e0:f6:47:68:
ac:d3:80:60:ce:90:02:35:40:ef:2a:74:bc:2f:88:cf:bb:59:
c9:2d:8c:97:22:82:74:c9:07:9c:0c:72:35:ea:42:79:d1:ee:
6b:d6:bb:8b:0a:82:bc:ed:ed:ba:41:57:fb:e0:42:9b:fd:71:
e7:f2:53:a1:85:9f:dc:69:1c:4e:7f:cd:22:51:fb:cd:40:b2:
e1:f7:83:09:38:70:63:73:d2:9e:f3:f5:cf:6a:ad:d3:e1:a0:
59:c7:4e:14:42:ea:10:36:f4:61:44:d0:bd:cb:d1:86:66:89:
ff:e9:c9:02:f3:21:b8:ff:9e:ce:67:58:dc:be:ac:cf:8b:84:
b6:04:50:e9:05:24:a5:6e:6e:fa:45:54:d0:47:ac:be:04:8e:
15:ce:a7:6a:37:25:52:a2:aa:69:ca:0b:00:85:35:a6:81:73:
af:84:f7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:04:27 2025 by rpki-client