Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wy9Mub-bsRYfFeBpQk288L6eZ_g.roa
File: wy9Mub-bsRYfFeBpQk288L6eZ_g.roa (raw, json)
Hash identifier: 2q3yJh927jtnrNyOlDw903pweXKix8qbzLMFNW656Tw=
Subject key identifier: C3:2F:4C:B9:BF:9B:B1:16:1F:15:E0:69:42:4D:BC:F0:BE:9E:67:F8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E539878F945826F0DE839D887904AA58D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wy9Mub-bsRYfFeBpQk288L6eZ_g.roa
Signing time: Mon 18 Mar 2024 22:04:45 +0000
ROA not before: Mon 18 Mar 2024 22:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:5398:22ad/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:53:98:78:f9:45:82:6f:0d:e8:39:d8:87:90:4a:a5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 18 22:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c32f4cb9bf9bb1161f15e069424dbcf0be9e67f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c3:aa:c5:d5:3c:14:bf:37:df:cb:47:db:35:
f1:5c:d9:c9:a9:2c:0a:12:05:af:aa:93:5b:05:07:
d9:f3:9d:bc:56:53:4f:46:1c:16:ca:67:56:91:64:
a4:77:1e:77:9a:1e:e8:a5:22:01:dc:d0:0c:10:4b:
50:8a:5a:12:02:90:ab:b0:50:d0:d6:ea:6a:6a:f9:
eb:47:96:d3:2a:48:49:ce:04:7d:92:1b:a9:47:0a:
74:3c:8d:e5:96:87:3a:e5:14:24:d5:30:7e:4a:dd:
9a:06:15:d1:c3:1a:52:5b:79:30:c0:4e:5c:f8:a7:
55:03:c7:72:47:de:1e:47:47:00:2c:1a:c7:62:df:
7d:2d:6d:76:e2:ea:82:20:1a:99:f9:7d:e8:7c:11:
ff:03:cc:6f:c4:d9:6d:f1:87:87:f5:ff:b0:28:7f:
36:70:f9:a7:5b:24:2e:16:25:43:c8:9c:00:d3:d2:
fd:13:8d:53:af:1c:9d:cf:77:25:f2:f8:08:38:6c:
cd:44:f5:0f:16:93:e1:5e:7c:eb:df:50:f2:62:5b:
26:05:d0:f1:1a:9b:29:b8:f1:0d:bb:41:06:d5:51:
1b:3e:5f:b4:27:b8:14:89:43:37:81:a4:89:14:e3:
f3:e2:64:25:13:d1:0a:a3:06:c4:67:02:8e:da:ac:
c0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2F:4C:B9:BF:9B:B1:16:1F:15:E0:69:42:4D:BC:F0:BE:9E:67:F8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wy9Mub-bsRYfFeBpQk288L6eZ_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:c9:eb:b5:c2:35:06:81:05:19:0f:6d:c5:13:2c:b3:48:0a:
2b:f1:1c:8f:f5:69:d1:6e:7a:c6:24:ea:d0:6c:63:2a:fc:50:
55:9f:4b:7b:e9:0b:ef:70:9b:ff:0f:4f:7d:db:eb:1a:a2:98:
c2:fd:6a:76:cf:08:fe:76:2e:e7:bc:d5:ce:ab:ef:be:ae:88:
9a:e2:57:be:0b:30:6f:b2:c4:d3:9b:0c:6e:d0:fb:88:d7:b0:
3b:78:66:81:6e:ff:fb:e7:77:f0:00:34:ce:d1:e2:58:0e:db:
4f:6e:e9:ea:ec:18:5d:ae:1d:b7:e9:34:0d:e9:7d:99:83:99:
9c:a8:8d:b6:39:d3:71:26:41:e3:90:e9:ef:ec:46:cc:2a:95:
73:81:13:cb:a6:8f:a8:b3:b2:37:c0:71:0c:7b:77:05:d3:63:
88:ac:44:52:b3:3c:1c:22:fe:df:40:5f:3d:19:ec:bd:95:b7:
1a:f7:00:99:6d:f0:6a:c9:6e:30:35:9e:e5:3e:f9:30:3e:7f:
ee:cb:81:e2:98:b8:9a:cc:27:09:40:27:9b:58:22:1f:c3:4c:
21:e4:70:55:66:53:33:78:87:10:43:dd:12:45:ef:0e:bb:75:
a7:31:93:e6:cd:c8:a7:4c:22:06:61:64:3c:9c:68:c3:c3:23:
ab:20:db:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:01:02 2025 by rpki-client