Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/12XcKXXvUnCLjCKt294uXiiJjDo.roa
File: 12XcKXXvUnCLjCKt294uXiiJjDo.roa (raw, json)
Hash identifier: oaF8XhA9Oae8Z6riwF1vlQSWBFW3PO/A2d4wbTudNU0=
Subject key identifier: D7:65:DC:29:75:EF:52:70:8B:8C:22:AD:DB:DE:2E:5E:28:89:8C:3A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EA7191E4261EDD628EEC91617FEFD7EB1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/12XcKXXvUnCLjCKt294uXiiJjDo.roa
Signing time: Thu 04 Apr 2024 03:13:44 +0000
ROA not before: Thu 04 Apr 2024 03:13:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a7:19:1e:42:61:ed:d6:28:ee:c9:16:17:fe:fd:7e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 4 03:13:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d765dc2975ef52708b8c22addbde2e5e28898c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c5:97:ef:0c:5d:ab:60:70:29:00:68:00:89:
1d:93:00:e7:08:fb:4c:f8:2a:8c:15:76:54:ad:8b:
5b:ab:0c:df:60:c7:9e:7b:21:0a:36:02:8b:ca:10:
75:ca:59:45:bc:b9:f4:ba:aa:dc:62:a5:cc:f7:c2:
cd:54:cb:84:60:b3:e7:60:e9:00:12:08:c9:09:4d:
72:58:d6:fa:9f:3b:c5:ce:91:be:1b:14:4b:25:a2:
20:cd:20:cf:a3:64:e9:9f:ac:a4:3a:e4:e6:3b:68:
5d:4f:df:96:0c:e9:8c:0f:ae:22:56:0f:61:ee:6c:
60:01:3e:3a:87:ec:70:c2:0f:1c:b9:74:e2:1c:47:
4f:71:54:37:0b:2e:f3:df:9d:04:9d:ee:af:12:c0:
ce:99:5c:4a:59:58:fe:d1:46:b3:e1:95:31:20:49:
bc:f0:e1:66:0e:57:77:a9:96:e5:48:97:09:5a:66:
d6:cd:0a:41:2b:0a:14:3d:99:d5:33:d9:49:d5:2f:
55:b6:a3:42:14:d9:22:23:55:4b:01:30:a6:99:75:
ab:9f:f0:f1:58:61:b9:50:81:a0:4a:03:31:57:80:
bf:91:57:13:86:b3:2b:fa:8a:64:48:95:d4:a9:c5:
a4:35:90:19:b7:16:b4:fe:91:b3:ff:4c:45:ad:be:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:65:DC:29:75:EF:52:70:8B:8C:22:AD:DB:DE:2E:5E:28:89:8C:3A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/12XcKXXvUnCLjCKt294uXiiJjDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:98:7f:67:7f:a0:d3:9c:7e:c8:61:7c:39:d1:f3:24:f7:c5:
b3:90:d1:ca:4c:2e:7f:01:23:20:b4:d9:a5:d5:31:40:c2:17:
7e:d7:86:88:54:0c:cf:7a:61:1d:3e:12:72:6b:5a:f0:15:36:
a9:79:fd:7d:88:cd:0f:b3:66:30:1f:5a:6f:49:f7:36:32:1f:
25:e1:a3:89:18:1b:6f:36:79:af:19:b8:71:aa:4d:9e:59:02:
5d:97:bd:88:56:9b:c4:b2:67:d1:07:1c:d6:c5:8c:75:52:58:
b3:cb:53:58:2d:fc:03:d6:21:a2:14:76:f2:d5:0d:0d:0b:16:
46:8c:6a:95:02:07:ae:4a:cf:c4:33:44:a3:bd:f7:a8:fb:1d:
23:c4:75:8a:df:50:91:3b:9e:bf:49:e8:31:59:56:e0:9f:d8:
ff:33:bf:90:e8:98:fe:e2:ff:3a:ac:23:c0:ac:d5:c2:f6:0d:
3c:c1:4a:d6:82:0e:aa:f4:d6:9b:6a:3d:28:1a:f8:75:bd:27:
3e:ef:90:f4:a5:43:dc:1d:ab:0b:a8:b6:16:f5:4f:3e:48:e5:
93:f3:b0:c1:a2:88:d9:19:6f:69:d4:1a:eb:a8:14:dd:8c:e5:
43:c6:d5:44:2f:ba:1e:89:9f:40:56:2b:2c:23:0c:92:df:4c:
c1:3b:76:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org