Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-rI4JNh1oKz4Ut5syk-5XJMVV58.roa
File: 1-rI4JNh1oKz4Ut5syk-5XJMVV58.roa (raw, json)
Hash identifier: 05BKegjxFkTDs9zChV/EmyfVPtkKwRoS3M63vZ1IzfM=
Subject key identifier: FA:B2:38:24:D8:75:A0:AC:F8:52:DE:6C:CA:4F:B9:5C:93:15:57:9F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB323839DA690DCC284A535083C8FF9F1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-rI4JNh1oKz4Ut5syk-5XJMVV58.roa
Signing time: Fri 29 Dec 2023 01:14:58 +0000
ROA not before: Fri 29 Dec 2023 01:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b3:23:83:9d:a6:90:dc:c2:84:a5:35:08:3c:8f:f9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 29 01:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fab23824d875a0acf852de6cca4fb95c9315579f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:e7:e8:32:66:e2:97:70:56:d4:2f:30:1c:
eb:dc:12:c6:26:ec:43:cf:12:34:4c:e8:6a:b0:55:
b7:57:78:27:9b:bb:e1:fe:b4:ef:24:1e:6a:48:04:
17:aa:91:2c:72:66:79:42:a8:60:dd:5b:d9:fc:e1:
6e:18:9c:f1:57:0c:0c:3e:25:d4:d8:6a:be:ec:14:
75:b6:d9:ce:39:53:43:e1:9d:05:4b:9d:3a:47:a9:
0c:64:55:c6:a5:14:13:ee:ac:5c:e2:6d:94:69:e6:
86:31:2c:20:8f:30:70:96:ca:87:f5:e5:d0:76:c8:
7d:e9:0c:6c:c4:e0:e9:a3:f0:23:0f:f7:63:a3:8b:
7a:ce:c8:36:b0:4f:a5:a1:25:96:bf:fe:c8:b6:4e:
66:72:b3:91:64:54:5f:73:42:7d:7e:ac:2c:dd:6c:
e1:bb:bc:bb:0c:d4:96:1b:1b:b3:69:26:45:c2:a7:
f6:ae:04:25:15:aa:7f:80:8e:4d:90:73:e6:61:0f:
8b:0a:31:74:f5:d5:50:a1:e3:2a:2f:15:80:22:fb:
b4:78:71:7f:33:05:ee:cb:18:9a:e4:f0:b3:ea:05:
40:86:16:c1:84:09:95:f1:8d:f5:4d:d8:ff:cd:22:
00:4e:1e:50:bf:55:ec:ba:95:32:83:ac:d9:ea:f0:
cc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B2:38:24:D8:75:A0:AC:F8:52:DE:6C:CA:4F:B9:5C:93:15:57:9F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-rI4JNh1oKz4Ut5syk-5XJMVV58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:44:9e:f7:1c:bc:21:95:39:45:df:8e:cf:45:1c:14:85:dc:
69:7f:d4:76:e1:3e:51:1d:cf:f2:cd:ba:e5:c6:6d:6d:2b:f8:
59:02:2a:e7:1d:9a:93:18:5a:e1:7f:fb:38:f5:d4:17:c2:c0:
d2:eb:a8:23:ab:d1:2c:ba:bf:bf:cb:1b:ec:73:0b:66:f9:30:
f8:ec:b7:e7:36:04:a7:dc:74:d8:c8:a5:5d:88:6b:41:9a:6e:
42:33:de:32:a9:dc:09:7a:84:a9:e4:38:52:6c:df:1b:73:da:
25:e6:fb:c3:9e:b8:39:80:1f:e8:68:bb:73:c4:6b:e2:96:90:
1f:8d:37:d4:1a:b9:f7:6c:30:1c:3c:b7:b9:e4:1e:e0:93:f7:
35:76:62:ab:14:1a:d2:bf:f1:7d:2f:34:aa:2c:70:39:76:21:
9a:09:ea:17:4d:b4:12:2e:4a:c3:5f:c6:ba:86:04:c1:e7:c5:
f3:98:db:4b:c7:e2:3b:8e:21:b4:35:23:b3:df:2b:23:d8:3c:
75:cb:06:51:c3:2c:45:97:58:2a:62:26:fa:57:42:0c:3a:70:
21:22:39:28:49:0c:b0:e2:75:d1:79:cd:48:06:ce:bd:aa:a2:
0c:ba:ba:45:6d:ca:3a:73:a5:4a:68:cd:de:9b:64:6b:a7:fe:
4c:27:f9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org