Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/46c3ArbI_dH3NgS25ujIUz0LyEA.roa
File: 46c3ArbI_dH3NgS25ujIUz0LyEA.roa (raw, json)
Hash identifier: 7x4GtxHf1PsD0KLhq9cZa5Kj4QSvMeHlFInCnVgl6UE=
Subject key identifier: E3:A7:37:02:B6:C8:FD:D1:F7:36:04:B6:E6:E8:C8:53:3D:0B:C8:40
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F133F077B00C08D2F4C2BD67C0546B59B
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/46c3ArbI_dH3NgS25ujIUz0LyEA.roa
Signing time: Thu 25 Apr 2024 03:14:08 +0000
ROA not before: Thu 25 Apr 2024 03:14:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:13:3f:07:7b:00:c0:8d:2f:4c:2b:d6:7c:05:46:b5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 25 03:14:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3a73702b6c8fdd1f73604b6e6e8c8533d0bc840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:df:db:1d:cd:95:67:d5:6f:d7:cd:9c:d4:
38:34:5f:5f:91:80:68:55:6a:b7:b7:3b:24:00:c6:
e6:9e:28:af:81:bc:4e:27:f7:32:52:bc:a1:2a:13:
46:f6:af:c4:c0:cf:2a:43:32:c9:b4:11:c0:53:f2:
f7:ba:83:02:57:73:9f:22:b4:e0:ab:7c:ed:c2:88:
4a:6d:0e:53:87:4a:44:12:0c:ca:a0:e7:ae:13:59:
ae:69:05:7d:86:fe:ca:59:c5:fa:1e:d6:dd:e2:87:
4a:bf:18:66:b7:79:13:30:ee:d9:44:dc:21:ac:d3:
aa:d4:95:26:5e:8f:ab:b8:6e:18:31:fb:d3:b3:2b:
17:4b:64:c4:fc:98:f2:a2:dc:5c:e8:1d:dd:b9:0d:
a9:a8:04:8a:9d:75:46:3d:91:a9:55:45:ec:2d:68:
10:b7:c2:41:8b:91:bf:85:66:db:cf:0d:fd:cf:56:
dd:7f:57:e6:96:1e:fe:06:c8:fe:57:c1:21:79:ee:
8a:3d:4b:f3:d7:15:25:07:0c:fa:48:88:cd:8e:b6:
ae:3b:b5:bf:ea:1c:81:4a:49:52:c0:60:5e:68:01:
2e:c7:a1:aa:89:64:d2:3b:e0:89:86:87:14:fb:8c:
ae:89:2d:db:41:e4:27:6e:c8:4a:91:ec:74:86:b6:
03:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A7:37:02:B6:C8:FD:D1:F7:36:04:B6:E6:E8:C8:53:3D:0B:C8:40
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/46c3ArbI_dH3NgS25ujIUz0LyEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
Signature Algorithm: sha256WithRSAEncryption
34:c7:08:c4:77:fc:f7:88:12:0e:fa:ed:ea:a7:76:e8:19:c5:
25:fe:87:f3:fc:0d:69:dc:7e:95:47:37:b1:f3:9d:00:94:5f:
7c:d4:73:8b:de:3d:1f:93:7a:c0:f1:db:8f:04:52:98:66:bf:
5f:5b:e4:92:31:42:6a:ec:76:b0:1f:5f:51:e1:dc:2b:7a:e8:
19:08:80:c4:87:83:49:f2:94:97:1a:9d:b0:93:ed:7d:6e:8f:
9d:e9:9d:ea:6e:bf:a7:cc:dd:04:79:8d:12:09:21:49:71:03:
e3:62:05:a4:23:c9:6c:da:57:61:b7:d0:80:9f:47:f7:6c:84:
76:50:9f:d1:56:e2:84:fc:eb:a4:53:7c:77:ea:3b:ea:15:d3:
57:29:99:fc:f0:ab:cc:34:67:df:6e:5e:a3:ef:ce:5b:b7:0d:
31:db:41:ec:91:9e:8a:5e:51:b7:30:f7:63:e0:dd:7c:e1:f1:
21:1f:46:c3:83:af:1d:57:1c:b8:4f:c9:4b:f6:f9:a8:d1:92:
98:d9:35:18:6c:03:83:5a:ca:9b:ae:2e:e6:64:c9:98:a2:69:
e1:26:e0:ba:d8:3f:6a:40:ee:5c:33:f5:1c:29:5c:c7:22:57:
b5:1d:77:bb:30:da:89:0b:64:80:73:c3:52:ed:18:5f:2e:6b:
d3:4e:41:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:04 2024 by rpki-client on console-fra.rpki-client.org