Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0iqIeYhiNosUbghZSXESfhpHdJQ.roa
File: 0iqIeYhiNosUbghZSXESfhpHdJQ.roa (raw, json)
Hash identifier: JkqdUTqSGAOtxwe7ISUEYXaI2KrtuxdbJUq1udVUWtE=
Subject key identifier: D2:2A:88:79:88:62:36:8B:14:6E:08:59:49:71:12:7E:1A:47:74:94
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D8FBA6B0285B7BAD5BECFD0A4048D985A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0iqIeYhiNosUbghZSXESfhpHdJQ.roa
Signing time: Fri 09 Feb 2024 21:16:15 +0000
ROA not before: Fri 09 Feb 2024 21:16:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8f:ba:6b:02:85:b7:ba:d5:be:cf:d0:a4:04:8d:98:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 9 21:16:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d22a88798862368b146e08594971127e1a477494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:e9:8c:f3:21:d8:df:47:a0:d6:8e:f8:47:
22:6d:71:49:ef:0a:74:d3:a4:f7:8a:8e:f2:85:da:
c9:33:68:f7:08:dd:b6:cf:f4:8d:3b:00:2a:7a:71:
f2:d3:18:62:25:39:41:77:61:b2:e1:fb:7d:75:2a:
e2:8e:9b:43:49:5f:19:bb:7e:ac:79:53:f0:7b:ac:
a2:d6:b0:20:2b:73:23:a8:40:b4:74:a1:fd:a7:f1:
07:10:c8:39:e4:d2:c7:e5:9d:5c:da:02:2d:35:6d:
ff:50:17:5b:d7:c0:fa:63:85:ee:b6:43:4e:a3:53:
30:73:ed:ee:48:a7:43:2d:e9:64:ea:fd:29:aa:67:
eb:bf:4d:b5:1e:b0:96:60:cf:20:27:59:02:41:19:
c1:fa:d3:21:5a:23:59:4b:b8:82:cb:fc:10:91:5a:
55:4b:b1:2e:72:a0:8b:b9:2f:48:32:a0:07:11:08:
6f:f6:5a:77:a5:86:2c:ef:43:f5:98:6a:a7:ed:c2:
ca:25:01:13:60:bb:32:e9:a4:1d:48:de:81:f9:72:
4c:48:3f:c3:33:8f:8b:d5:31:58:0a:70:e6:c3:3d:
4a:b3:b0:a3:02:98:a5:5e:6d:a5:a2:67:5e:d7:17:
1a:38:f2:26:08:56:8b:a2:7d:8d:83:cc:f6:76:c2:
54:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2A:88:79:88:62:36:8B:14:6E:08:59:49:71:12:7E:1A:47:74:94
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0iqIeYhiNosUbghZSXESfhpHdJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:fe:ff:90:d5:f1:90:57:cc:e9:6c:93:1a:b2:cd:14:f3:b0:
6c:f5:44:ef:ed:e0:6d:cf:8a:3e:c5:63:0c:9a:22:64:9b:eb:
45:21:9f:4f:03:54:94:75:b4:43:01:fd:eb:3d:34:55:f5:2c:
9c:f5:25:56:72:6d:2a:3d:e4:f3:41:0c:fe:64:3c:c9:22:32:
52:b7:a0:8c:d6:ac:67:02:a3:33:79:c1:46:cd:33:b1:5d:cc:
c9:b2:63:04:8e:10:45:c1:61:d5:d7:f9:d2:b0:61:8d:e0:8b:
fb:47:5d:59:58:cc:2c:3b:66:45:73:4a:dd:4f:20:5b:81:aa:
03:1b:11:3d:4c:1d:c7:fe:ed:20:7e:be:16:e3:ba:90:f2:17:
dd:4c:37:26:68:3b:42:00:7e:bb:14:ed:6f:c9:e9:8b:c9:44:
97:f5:c8:b3:07:c5:69:07:e2:6e:0e:8c:95:db:a8:cb:fa:7d:
6f:a7:99:eb:a3:3a:92:af:0d:08:6b:99:9e:f7:97:dd:86:54:
9d:98:dc:fe:57:a3:e4:15:55:38:ac:2e:21:ed:c8:75:05:82:
fe:87:12:5c:0f:17:a8:a8:a3:76:9e:91:5a:5d:aa:c3:48:94:
7f:9c:76:f5:74:f5:ac:62:35:99:3f:45:db:57:15:82:96:04:
be:a6:22:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org