Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-lj-DC3dg_C6kW1F30VE2go8-yo.roa
File: 1-lj-DC3dg_C6kW1F30VE2go8-yo.roa (raw, json)
Hash identifier: kNA8KUS8i2EozXBs5tGSLGIvP3dVAXxmufByG1YAhxw=
Subject key identifier: FA:58:FE:0C:2D:DD:83:F0:BA:91:6D:45:DF:45:44:DA:0A:3C:FB:2A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D7100383E41E2F4F3B444D2BEC4B143E5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-lj-DC3dg_C6kW1F30VE2go8-yo.roa
Signing time: Sat 03 Feb 2024 22:04:16 +0000
ROA not before: Sat 03 Feb 2024 22:04:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:7100:2ee8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:71:00:38:3e:41:e2:f4:f3:b4:44:d2:be:c4:b1:43:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 3 22:04:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa58fe0c2ddd83f0ba916d45df4544da0a3cfb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:a5:34:c6:fd:f9:c7:0e:a1:0e:cb:22:be:
54:62:a6:fd:17:c2:07:dd:22:01:e7:ad:66:2d:14:
de:b8:8e:f9:26:1e:9f:54:78:b7:49:06:c7:13:30:
60:a8:53:88:2d:3d:ad:bc:bc:66:05:35:a9:f6:46:
35:03:b5:a1:b5:d5:6e:f4:9f:e0:43:9c:4e:0f:4d:
c1:b4:1a:15:cc:c5:0d:83:6b:55:e3:22:2a:2f:ea:
ac:b0:ad:f1:84:13:10:99:0c:e0:22:2c:41:8e:af:
ce:11:0e:c0:d2:1a:e9:ea:3a:a4:b9:0c:11:5a:35:
42:0d:a9:ae:c3:7d:40:4a:0d:b7:3b:79:d2:62:07:
6f:89:de:a3:db:41:4f:6d:12:4b:a0:b4:ea:4f:28:
e5:b8:df:6f:dc:b1:15:b7:67:ca:4e:3e:06:69:62:
d5:af:0e:48:ce:aa:a0:07:dc:2e:8f:f5:f5:a2:99:
81:18:00:20:9d:c9:a3:07:d7:7f:80:e1:4f:8c:da:
7f:b5:39:bf:b0:74:eb:b8:37:85:29:bc:6a:38:82:
84:7d:76:3b:14:9e:a7:a5:72:69:8f:74:54:e0:ae:
2c:01:7a:7d:ae:2a:b2:8f:44:2c:a3:72:d5:7a:59:
03:38:14:3c:6f:f6:52:24:6b:c5:7b:16:c4:9e:83:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:58:FE:0C:2D:DD:83:F0:BA:91:6D:45:DF:45:44:DA:0A:3C:FB:2A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-lj-DC3dg_C6kW1F30VE2go8-yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:84:89:88:cc:6d:eb:92:46:5f:5e:f6:79:2f:df:60:77:ba:
27:b3:59:33:27:43:34:47:6a:9d:b6:3e:61:fe:49:10:52:76:
9f:5e:c2:0a:44:ee:9e:56:b4:38:01:15:6a:67:73:09:77:9a:
18:c0:6a:c0:37:74:df:55:82:25:56:ec:2d:84:13:59:13:09:
be:ec:ac:c6:b4:7b:78:70:62:a1:9a:9b:2d:7b:ab:1b:69:ae:
88:88:1d:f1:2f:73:f6:b6:3a:8c:5d:be:5e:9c:9e:ec:bd:58:
36:a7:ae:84:d9:4e:d2:ca:48:33:fe:1f:9e:a2:37:f4:ae:58:
1b:7c:b1:52:f5:16:00:48:8e:c4:f4:e1:93:38:69:5f:dc:47:
5c:37:7d:00:e3:bb:a6:b0:bf:35:5d:45:4f:28:69:9e:1b:b5:
85:3f:65:e1:0e:2e:e2:94:6c:69:5b:30:0e:ca:f9:e6:6e:de:
3a:90:62:da:42:bf:4d:eb:fd:a9:95:9c:90:ca:9d:b7:59:c8:
67:34:62:93:6e:4a:26:ab:c4:9b:6d:88:88:4f:8f:7d:5d:58:
5e:f2:d7:a8:3e:b8:16:25:4e:9d:72:38:15:3b:7a:8a:3a:72:
18:ea:ee:6a:e8:87:33:87:90:df:49:fe:8a:54:ec:a6:03:48:
32:e6:3a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org