Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0oZX4igFjBPE90EA5k9ZUzwf9pU.roa
File: 0oZX4igFjBPE90EA5k9ZUzwf9pU.roa (raw, json)
Hash identifier: ehBXehv1SICKBKlUcXWK/EAwDjG5tKp+spr8IHL7QtM=
Subject key identifier: D2:86:57:E2:28:05:8C:13:C4:F7:41:00:E6:4F:59:53:3C:1F:F6:95
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E5AB48ADD7360EB14306687DD09D419EF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0oZX4igFjBPE90EA5k9ZUzwf9pU.roa
Signing time: Wed 20 Mar 2024 07:12:45 +0000
ROA not before: Wed 20 Mar 2024 07:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5a:b4:8a:dd:73:60:eb:14:30:66:87:dd:09:d4:19:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 20 07:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d28657e228058c13c4f74100e64f59533c1ff695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d8:3c:72:f5:18:c3:07:b4:2d:fe:31:54:75:
86:c7:ec:48:72:72:38:a2:eb:0a:1a:80:b7:5c:35:
05:89:40:14:2e:6a:77:c9:f9:ba:a7:20:a3:ff:6a:
da:2d:ad:a5:1a:ef:76:70:d3:46:50:32:7c:04:c6:
e4:3d:71:d7:99:d3:91:5e:11:8d:af:20:15:b2:3d:
b5:79:a5:eb:7c:8f:e4:ec:f6:a7:51:a6:63:7c:9a:
0a:ab:f4:6f:3b:a0:39:61:ab:54:0c:ed:92:5a:06:
8a:93:61:ac:5e:9b:df:17:10:5d:df:92:4a:f7:87:
59:6a:bf:11:48:87:9c:78:32:5f:e7:22:c8:9b:92:
c4:c7:58:7a:75:5c:b0:5b:92:96:66:a3:b8:0e:0f:
7d:07:ac:db:64:2e:d6:cb:b3:43:9d:70:77:4b:90:
88:ef:b9:46:c8:7e:6d:1f:39:51:cf:3e:f8:b9:c4:
c2:58:82:2b:f2:48:b4:64:33:53:0d:a4:f1:ce:56:
a5:ac:9e:95:b9:2c:46:d0:6a:69:ba:b4:ca:02:e9:
b2:b0:5e:9e:d4:5a:86:e8:7d:bd:17:5e:d8:69:b5:
51:37:87:e9:da:09:39:a1:0a:ea:3e:64:07:dc:31:
c9:76:17:2a:39:be:59:54:e7:f0:7c:e9:04:a9:0a:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:86:57:E2:28:05:8C:13:C4:F7:41:00:E6:4F:59:53:3C:1F:F6:95
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0oZX4igFjBPE90EA5k9ZUzwf9pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:b7:cd:a0:ad:a6:3e:4d:d4:4f:1f:93:10:2a:9b:0a:fd:cf:
15:2c:97:c8:e5:bf:8c:cf:b8:d9:d2:27:39:ff:5c:b8:6c:23:
ec:f4:fa:10:00:fb:df:71:17:a0:22:38:92:41:67:75:86:3a:
f2:f8:cc:f8:b4:2e:32:45:a0:69:83:a8:c1:6a:cc:57:ae:2a:
6f:fa:14:a7:87:10:07:b5:0f:85:0b:96:05:08:fa:63:38:00:
58:d2:7a:0f:d4:bd:ae:1c:e5:24:96:3c:ef:4f:f2:75:57:94:
18:7d:1c:33:24:61:10:cf:c1:56:28:7a:05:3a:94:37:44:17:
cc:a8:03:6e:79:21:85:22:bb:b7:53:49:0d:b4:b4:fd:d4:bf:
39:c6:64:4c:c2:7e:5c:de:f7:e5:42:4a:01:c7:51:7d:b3:19:
a2:40:71:bf:95:c9:a7:52:04:d7:7d:43:af:4c:4b:fa:46:86:
e1:18:62:c9:1f:4f:15:40:62:8d:3c:e9:54:ac:74:f9:50:e5:
bd:10:10:27:a5:6e:ef:85:c5:82:0e:8a:d2:7a:0c:2e:55:f3:
46:f6:6f:e1:0f:14:b0:e0:bf:99:d9:95:0c:ba:84:a1:82:90:
5e:f8:40:15:6a:d7:59:34:a1:97:8a:b2:52:fa:6d:97:4f:9f:
f7:c3:68:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org