Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07Bg_jXD97oMiqF27LFAZbONnvw.roa
File: 07Bg_jXD97oMiqF27LFAZbONnvw.roa (raw, json)
Hash identifier: JPeapTURts4FDKDI+It+h8z0dAV9jTpIJSUDbXFLYrI=
Subject key identifier: D3:B0:60:FE:35:C3:F7:BA:0C:8A:A1:76:EC:B1:40:65:B3:8D:9E:FC
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E227EAA6DD20B7AD046119DFA900E54B4
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07Bg_jXD97oMiqF27LFAZbONnvw.roa
Signing time: Sat 09 Mar 2024 09:15:10 +0000
ROA not before: Sat 09 Mar 2024 09:15:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:22:7e:aa:6d:d2:0b:7a:d0:46:11:9d:fa:90:0e:54:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 9 09:15:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3b060fe35c3f7ba0c8aa176ecb14065b38d9efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e9:c0:f5:87:32:41:0c:11:9a:76:24:19:e1:
b5:f1:af:d4:ae:bf:74:cd:51:56:33:57:fb:0a:ee:
dc:6a:a1:3d:ec:94:05:14:6f:15:5d:54:39:3c:cf:
03:2f:4f:d0:9f:cc:b9:90:ac:60:d6:16:91:a8:f3:
f9:42:28:41:11:a7:cc:f4:80:1f:1a:22:13:06:a2:
d9:18:b9:fc:3b:2f:45:48:03:e3:c7:7b:41:e4:0e:
9f:7a:e0:5b:56:45:48:f3:16:e0:cd:a9:cf:22:57:
7b:f2:b3:9a:f7:09:0f:ad:cd:3f:18:30:c3:72:e1:
36:9f:13:bf:5c:e0:b2:8c:f5:64:46:cd:a9:a2:36:
06:9a:1d:1b:97:27:72:02:78:39:b2:e3:27:b6:d3:
32:3d:52:2c:09:5e:96:78:77:dc:b2:6f:c1:a5:d7:
86:59:e4:8e:34:40:c9:e0:6b:49:85:e1:a0:01:bd:
59:4b:3a:d2:63:51:e6:f5:4e:41:4e:a6:7d:4c:f4:
83:ed:2b:9e:ad:bf:72:df:7c:f3:d3:ca:77:bf:c8:
71:f5:36:39:d8:2a:e0:50:09:07:8e:52:0d:15:88:
7e:3c:1f:74:21:e1:a6:5c:c2:3c:e6:89:57:22:73:
7a:44:49:71:79:a5:25:f8:6e:f1:dd:11:55:c9:1e:
4c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B0:60:FE:35:C3:F7:BA:0C:8A:A1:76:EC:B1:40:65:B3:8D:9E:FC
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07Bg_jXD97oMiqF27LFAZbONnvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:46:94:f3:80:1a:09:05:5f:61:83:e0:7b:15:c7:96:19:01:
23:c6:d7:99:3c:5f:30:80:ce:60:28:a3:59:37:68:ea:3f:4c:
2c:1d:5b:e2:33:cd:74:5d:69:83:4b:6b:7d:80:6e:79:47:e5:
ae:f1:8a:87:37:4b:57:d7:f3:e1:54:55:e0:8d:87:14:51:0c:
14:62:91:49:d4:0e:0d:5c:59:a8:c3:15:4f:f0:df:dd:aa:8b:
7b:72:cf:3f:10:6c:47:b9:e5:63:cc:75:be:8d:12:91:5e:b9:
b1:e5:35:08:d5:75:f2:d1:0a:51:d5:77:1a:af:b8:72:68:0d:
3f:fd:73:e8:28:cd:e2:e8:b4:83:e7:0d:f9:78:e9:21:2d:a3:
2e:a0:49:e0:1a:75:4d:17:d7:1c:b0:5f:eb:82:26:04:de:49:
a0:cd:15:6d:67:a1:3d:4c:17:48:3b:67:82:89:0e:5c:a3:e1:
66:52:20:ed:cd:e0:20:1b:e6:9c:84:46:f9:ee:fe:d2:8d:2d:
6e:66:54:09:22:d4:3a:ae:c0:df:58:de:7a:28:d8:93:36:5b:
cb:8b:4f:19:f6:b0:3f:6d:6c:a9:74:1c:3b:60:cb:75:d4:25:
1d:9a:1d:fe:84:1e:93:c6:c8:5c:f8:81:d7:76:b1:a0:3c:bf:
57:d8:c4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org