Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-Y-sJyrv_LTbTXfI1Ggp37wG52k.roa
File: 1-Y-sJyrv_LTbTXfI1Ggp37wG52k.roa (raw, json)
Hash identifier: iNsHwz0CyHTwFnGbJop+1x/2qtAOmT3Nby3vSvBDo5Q=
Subject key identifier: F9:8F:AC:27:2A:EF:FC:B4:DB:4D:77:C8:D4:68:29:DF:BC:06:E7:69
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB98C7700EC29FFC70AFCD012A9DCFF44
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-Y-sJyrv_LTbTXfI1Ggp37wG52k.roa
Signing time: Sun 07 Apr 2024 17:12:54 +0000
ROA not before: Sun 07 Apr 2024 17:12:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b9:8c:77:00:ec:29:ff:c7:0a:fc:d0:12:a9:dc:ff:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 7 17:12:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f98fac272aeffcb4db4d77c8d46829dfbc06e769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:24:be:25:95:fb:16:56:99:71:8b:b2:8d:ad:
ee:78:05:b9:84:5c:94:75:ca:1d:de:43:91:b3:ca:
84:99:b8:08:b3:bf:a7:c6:3c:08:65:f7:58:4d:3f:
05:d6:89:46:f6:ed:29:1f:c2:3f:af:4a:da:8b:e0:
b3:88:d2:c2:49:fa:49:92:13:b0:65:2b:f6:55:64:
19:53:4a:d7:c0:d0:ec:be:1b:d1:d3:1e:a3:b3:a4:
af:cd:3f:73:29:0a:50:64:7f:ec:fe:eb:00:8e:07:
d5:10:98:64:4a:3d:ca:b5:15:07:70:2c:6a:9a:bb:
e6:a0:25:39:a9:8c:d6:33:12:cd:34:37:f6:75:6d:
87:33:f3:16:b3:34:b2:29:f8:d3:ee:08:24:3e:73:
73:30:70:57:bb:34:c3:af:7e:6d:b6:3a:9a:17:46:
89:41:41:53:11:b4:f9:ef:b2:0d:af:fd:cf:12:c2:
d2:0a:f3:78:48:fe:c3:b3:2b:63:ee:fc:7c:ad:c8:
83:f5:b7:ad:da:0a:8c:b0:dd:c5:42:da:b4:d1:c6:
51:35:16:a6:05:66:23:f6:f1:a3:b4:b8:6d:c1:08:
d7:10:4c:7b:b0:2e:75:68:4b:41:db:58:dc:b4:91:
0f:b3:df:86:bf:60:2e:21:7a:49:8e:08:fe:f7:d3:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8F:AC:27:2A:EF:FC:B4:DB:4D:77:C8:D4:68:29:DF:BC:06:E7:69
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-Y-sJyrv_LTbTXfI1Ggp37wG52k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:dc:f9:68:ec:e1:d8:86:47:07:6d:53:4c:be:af:2c:df:3d:
69:53:15:24:f9:2e:47:93:83:5b:cd:75:fb:22:ca:32:40:9c:
20:48:c3:be:e3:9f:8a:0d:b1:e2:c4:79:69:3a:b1:e9:29:9e:
d4:3d:62:35:92:7b:34:53:f2:d2:1e:65:49:f5:25:14:75:75:
27:52:ef:0c:91:77:ed:ef:e6:4a:31:1b:23:55:7b:18:84:ed:
4d:da:3d:11:88:09:54:af:16:ab:3d:ba:6c:79:0b:18:dc:35:
6e:a0:e1:53:6f:4f:81:82:1b:5a:1a:18:fa:98:83:ab:3f:ec:
9e:33:2d:10:be:a5:fe:af:33:ef:23:4f:45:d8:f9:e9:e8:30:
c3:30:06:ac:48:52:a4:25:37:aa:ac:77:4a:5e:ba:eb:34:15:
41:20:58:87:ed:74:ae:25:fa:47:ce:ec:69:45:1d:af:5f:99:
96:7b:8e:51:f2:01:63:39:a9:08:a4:c1:65:d2:d8:86:50:5d:
5a:fb:23:46:43:2c:9f:df:4d:cb:cc:49:ca:66:11:e7:8b:61:
a8:37:82:a0:f7:e4:b3:14:4d:c0:50:aa:50:78:ec:24:52:cf:
83:fc:0e:36:8a:6d:b1:fe:4f:7f:76:95:72:b1:84:69:94:08:
3c:43:c6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org