Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0PBTgyiAQAcBbwZG233ewISyLEs.roa
File: 0PBTgyiAQAcBbwZG233ewISyLEs.roa (raw, json)
Hash identifier: hxY+usGiVzRvM09e54PGUyw2GOlYFDgA49Vyq25xAdE=
Subject key identifier: D0:F0:53:83:28:80:40:07:01:6F:06:46:DB:7D:DE:C0:84:B2:2C:4B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D03CECBBBEA6CD349828CF77CE4F46F0A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0PBTgyiAQAcBbwZG233ewISyLEs.roa
Signing time: Sat 13 Jan 2024 17:11:40 +0000
ROA not before: Sat 13 Jan 2024 17:11:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:03:ce:cb:bb:ea:6c:d3:49:82:8c:f7:7c:e4:f4:6f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 13 17:11:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0f0538328804007016f0646db7ddec084b22c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1b:44:47:5e:17:0d:59:36:cc:4d:45:1f:53:
b3:d2:c3:6e:44:5f:5c:d4:c4:b6:5f:4a:13:04:84:
df:83:64:c6:3f:ba:cb:6a:36:0f:22:21:cb:29:5a:
0f:08:53:0d:cb:92:27:00:06:e1:d4:c8:9f:21:61:
be:b7:80:73:37:9d:c7:fe:8d:ac:bd:74:fa:63:cb:
02:6c:c7:ff:81:0a:64:6e:5e:1a:5a:ea:b1:b5:96:
44:a9:2d:c1:5a:af:5b:10:9f:70:6d:62:19:40:b6:
dd:02:5c:cf:63:3b:3c:0c:65:57:c8:c3:17:64:1b:
97:5d:86:9e:26:1d:b3:4c:c0:5e:74:91:c7:ce:f2:
d4:26:e7:89:7e:a9:d5:f5:bf:1e:c1:67:82:81:3c:
8e:39:53:62:18:08:2c:7c:d5:16:ca:48:9a:4e:8f:
d5:15:32:4b:d9:74:59:72:fa:9b:5d:9c:b8:7e:58:
df:26:fc:77:70:24:5f:90:de:3f:ba:5e:26:30:4a:
86:96:54:55:eb:3d:31:85:e9:c0:a2:aa:58:ea:44:
5d:c6:a9:1c:db:b6:f1:57:51:92:1e:be:cb:8f:88:
3b:0c:bd:a0:7e:04:71:41:ab:a5:bb:26:6f:be:35:
fe:27:23:a0:f1:c0:d5:6d:b6:fb:1b:ab:2b:27:c2:
de:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F0:53:83:28:80:40:07:01:6F:06:46:DB:7D:DE:C0:84:B2:2C:4B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0PBTgyiAQAcBbwZG233ewISyLEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:9c:c2:d2:b3:cd:44:80:27:a4:73:d6:ce:d9:09:f8:23:27:
64:54:98:47:7a:94:bf:b3:f4:08:54:72:20:d0:d0:cf:10:bf:
92:b7:15:54:cc:0a:12:ef:5e:73:5b:08:77:ce:a2:19:70:be:
d2:cb:1c:7d:44:ad:6a:d9:fd:95:94:9a:1d:b6:67:81:10:25:
64:fe:62:c1:87:35:84:4f:a1:8a:1b:17:4c:9f:79:d0:9a:29:
21:f4:d2:f2:68:54:c1:d7:47:ae:60:6a:83:a5:67:64:a5:dd:
41:b5:db:f9:81:11:33:8f:65:c0:e2:96:e7:ee:d2:b7:98:f2:
29:b5:7b:f2:65:d5:aa:d2:1c:e1:c4:3a:a4:a6:e7:0d:a8:24:
11:b6:47:6d:4e:9c:3c:07:b2:0c:9b:26:4a:9d:ad:c2:47:78:
0d:3a:48:0c:16:01:c7:97:06:ad:8a:cb:cf:b8:b5:77:1c:bc:
3a:e5:38:79:8f:d3:a4:28:29:63:91:80:69:19:b3:1d:9c:d2:
eb:fc:95:24:d3:85:64:da:6a:95:d2:d6:c0:ce:1f:6a:a6:68:
f4:00:af:22:61:3f:87:a1:ee:e7:b3:e2:dc:55:0d:b0:1c:1f:
cc:a5:8b:2e:d9:b1:ec:ee:3f:70:44:69:29:86:4c:76:fa:a6:
fc:ff:0f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org