Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-N_GR8yLEBy_gzO414CufClHR8Y.roa
File: 1-N_GR8yLEBy_gzO414CufClHR8Y.roa (raw, json)
Hash identifier: sCMFXlFuk90K6CqM+FqxebOXzeYxZ6jN/JpyDZdt/fQ=
Subject key identifier: F8:DF:C6:47:CC:8B:10:1C:BF:83:33:B8:D7:80:AE:7C:29:47:47:C6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E8E6A265AF55D104E2AC29A7D33294004
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-N_GR8yLEBy_gzO414CufClHR8Y.roa
Signing time: Sat 30 Mar 2024 08:11:45 +0000
ROA not before: Sat 30 Mar 2024 08:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8e:6a:26:5a:f5:5d:10:4e:2a:c2:9a:7d:33:29:40:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 30 08:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8dfc647cc8b101cbf8333b8d780ae7c294747c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:f7:2b:63:25:5d:f6:49:d9:12:07:bf:a9:
b7:ea:11:9a:09:31:ae:02:68:48:03:c3:1c:b9:9f:
89:2e:6c:6f:16:bc:69:de:e1:fd:0b:42:f8:f5:66:
82:bd:03:b6:a5:c5:58:c3:d0:ce:b4:a6:65:4b:cb:
e0:1a:33:8d:ff:de:ae:3c:f7:a5:9c:55:86:3a:2a:
ab:e3:24:27:6a:bc:7c:bc:bf:85:c2:60:a8:6f:10:
17:91:f6:7d:13:dd:d7:56:a1:6f:42:30:be:ab:d6:
1d:e6:3f:49:d8:b2:d6:b4:1c:85:ab:1e:49:76:0b:
09:d2:d6:88:80:ff:bb:14:b8:35:76:d6:6a:d7:d5:
ea:69:43:9d:b0:85:c1:25:a1:6a:61:c1:2e:cf:41:
3b:83:66:f3:22:99:56:3c:a2:ef:b8:2d:cf:c2:81:
cb:97:27:42:a3:fd:c7:0c:95:a0:0b:22:46:44:06:
b1:76:78:7f:5c:bb:6b:2b:de:d3:44:f8:3b:33:10:
ef:3c:0f:81:f2:34:9f:15:9a:f0:eb:4f:ab:62:30:
72:14:fc:61:c4:a7:ed:49:23:3d:85:85:c8:4f:bd:
54:b2:e9:cf:15:c4:71:39:2d:72:27:ec:e7:76:c4:
c7:64:92:77:a2:a5:74:05:18:f0:fd:bb:e0:4c:39:
06:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DF:C6:47:CC:8B:10:1C:BF:83:33:B8:D7:80:AE:7C:29:47:47:C6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-N_GR8yLEBy_gzO414CufClHR8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:e8:13:c3:7e:ae:97:19:28:a9:1c:49:43:36:ae:9f:02:78:
5f:58:e9:9e:11:6f:13:47:18:f7:b3:99:98:69:fe:6e:87:91:
0c:bf:b4:45:4d:15:a7:00:c8:fc:f9:65:0e:52:fb:eb:39:87:
5a:18:6b:ba:32:2c:23:63:72:e7:c1:a2:de:8b:44:62:73:b4:
1d:29:f2:ec:96:c1:73:c3:3b:e6:1a:77:4f:54:f3:73:bc:0c:
b3:35:e5:6d:4e:3c:2a:49:30:56:0b:a9:ea:6c:44:7d:68:74:
8e:74:87:ff:20:76:77:09:ec:4e:5e:ae:34:23:2e:8a:71:ab:
d1:94:8f:10:d6:66:ff:0d:5b:94:fa:e0:51:c6:c5:bc:a1:78:
93:0a:ab:f2:0c:cf:c1:9b:09:21:7b:10:68:38:85:38:15:96:
03:90:0d:5a:29:8b:51:3d:9d:ec:43:00:a3:d3:1c:5b:e9:84:
a7:7c:9d:5e:f6:e4:ea:2e:d2:ce:eb:e9:84:db:05:94:23:be:
a8:38:d9:e3:24:03:76:44:4d:07:c7:45:48:3b:0c:08:41:24:
e8:48:58:48:4a:31:eb:9a:d9:94:41:c0:b3:dd:7e:2c:85:fb:
0d:41:38:d4:0c:79:ba:f6:f8:4f:1e:90:5a:4a:0c:e1:7d:55:
5a:fd:2c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org