Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/3nkM3EURBqIEIUmCT49PTKBZF0g.roa
File: 3nkM3EURBqIEIUmCT49PTKBZF0g.roa (raw, json)
Hash identifier: pB/qJJMlNUK2Hk2gs78CywT/V8peO2ac8D9F67bz72A=
Subject key identifier: DE:79:0C:DC:45:11:06:A2:04:21:49:82:4F:8F:4F:4C:A0:59:17:48
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F618E251389B2188382F94E399DB04BFC
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/3nkM3EURBqIEIUmCT49PTKBZF0g.roa
Signing time: Fri 10 May 2024 08:10:56 +0000
ROA not before: Fri 10 May 2024 08:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:61:8e:25:13:89:b2:18:83:82:f9:4e:39:9d:b0:4b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 10 08:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de790cdc451106a2042149824f8f4f4ca0591748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d8:f1:e6:39:2e:e0:39:e1:b9:4a:78:90:23:
ae:33:33:c1:9b:b0:d0:bb:68:36:fb:82:02:aa:3b:
e3:ac:d2:ca:3b:de:76:e9:60:58:40:c7:28:5e:2c:
05:bf:63:e6:c9:e7:0e:34:e5:20:4b:50:d9:71:e8:
85:c2:58:3d:d3:60:d0:a2:68:f5:b3:ed:91:c5:de:
cc:ca:b5:45:1b:3f:59:cd:c6:ae:41:0c:b0:3b:00:
3a:ea:91:d8:c4:fd:75:2f:df:6c:31:af:33:5e:cf:
70:e2:62:80:cd:0e:b6:da:b3:21:aa:a0:db:37:ab:
d3:d3:4e:2d:9d:52:ea:c9:94:f6:5b:df:5b:89:99:
e2:79:8e:f1:b6:c0:94:9b:97:3c:65:c8:91:cb:9a:
92:e6:e3:df:12:14:0d:4c:2b:d9:70:dd:c7:2f:42:
3d:62:64:22:16:4d:26:6a:70:98:80:6f:61:56:2f:
4b:b2:b6:be:7e:db:a2:3b:c6:63:24:b1:fd:23:57:
de:a9:e0:2b:85:32:b1:c9:d5:3e:35:9d:9a:9a:07:
7c:44:f9:5c:a3:f9:02:04:7d:9a:99:c2:34:47:e9:
ac:c8:4c:f1:b2:08:07:46:d5:d5:5a:47:43:b6:70:
f9:32:8c:20:d1:bc:6f:8a:c9:2a:a9:e2:93:c7:64:
b3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:79:0C:DC:45:11:06:A2:04:21:49:82:4F:8F:4F:4C:A0:59:17:48
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/3nkM3EURBqIEIUmCT49PTKBZF0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c5:0a:d6:99:ae:0b:d4:66:1f:83:c9:a3:f3:6b:34:0d:16:36:
66:77:6e:a0:cc:07:f0:28:ab:87:2f:88:cc:24:e0:73:f1:1b:
69:dd:b4:39:5f:18:5e:f4:47:1e:e3:5b:5d:c5:ed:aa:3a:27:
45:73:36:c3:07:0c:27:b9:e4:ff:b7:46:18:1c:c9:a6:ea:91:
2f:6e:e3:a0:1a:96:27:39:a3:fe:50:3a:68:8c:03:59:c4:54:
f5:f6:e2:ec:0b:1b:4b:3e:7e:7f:b0:0e:7a:41:8c:4c:b0:cb:
23:07:1b:68:15:df:e1:0a:8b:2d:d7:6e:c1:10:9b:cc:91:41:
98:0a:26:b8:cb:35:3e:9d:c3:33:22:78:05:7b:40:b4:c5:66:
37:a9:c2:3d:9f:57:67:65:98:56:db:1e:d9:0e:66:53:4c:42:
25:68:ab:dc:7b:ea:af:db:e0:18:66:57:80:1b:c9:bf:e2:4d:
58:eb:04:a9:bd:36:d5:18:8f:62:0a:63:a0:86:aa:99:59:44:
47:4c:b9:9f:e5:4d:44:a9:d6:73:a0:bb:c2:60:22:84:55:77:
ca:ab:32:e9:d2:72:ed:e3:d0:94:80:5b:60:01:0e:97:c6:6a:
2a:4a:e8:a2:ae:d5:39:29:83:05:4a:b5:48:86:f7:75:94:cd:
b8:22:90:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:04 2024 by rpki-client on console-fra.rpki-client.org