Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1QIfgb35p0KzA8S2ywIMcgkotMs.roa
File: 1QIfgb35p0KzA8S2ywIMcgkotMs.roa (raw, json)
Hash identifier: 0OsxcF3InQwPZdnsogJ1exRdB6nXMg4OBXUPyznSPac=
Subject key identifier: D5:02:1F:81:BD:F9:A7:42:B3:03:C4:B6:CB:02:0C:72:09:28:B4:CB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D981518449407728DECB555AB33348F18
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1QIfgb35p0KzA8S2ywIMcgkotMs.roa
Signing time: Sun 11 Feb 2024 12:12:15 +0000
ROA not before: Sun 11 Feb 2024 12:12:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:98:15:18:44:94:07:72:8d:ec:b5:55:ab:33:34:8f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 11 12:12:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5021f81bdf9a742b303c4b6cb020c720928b4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:53:4b:ae:ff:8e:bb:6f:61:3a:72:44:33:
99:fa:76:20:c1:94:28:a2:7f:27:d6:1c:7f:3b:14:
08:91:52:8d:8c:d3:62:ea:89:0f:99:1d:2d:21:d1:
73:45:a4:ac:75:73:ae:95:41:ce:29:f9:43:f6:b9:
91:4a:b3:6b:e8:ad:d5:6e:04:4d:1c:dc:61:ba:70:
e9:50:29:e5:a2:5c:99:10:02:db:7f:3e:82:dd:56:
0b:0d:58:f7:ed:ac:cb:19:ea:8b:32:b1:35:3a:46:
b4:82:1d:05:2b:5c:00:02:7b:c8:ba:3b:10:fb:6a:
e2:c9:e1:b4:f0:3d:58:b2:c7:67:fb:f7:a3:72:19:
c0:93:bd:87:90:3d:35:ab:6e:b0:72:e5:4c:52:ec:
45:b1:c1:51:31:da:99:0b:f4:e6:8f:bd:1b:ca:09:
c3:e4:4b:61:51:58:39:28:06:1f:a1:2e:82:d9:9f:
5f:27:bd:e8:4a:84:b3:4f:f6:7c:e3:4e:ed:0f:21:
2f:d4:04:fc:1e:54:6e:ae:f2:db:b7:ee:89:12:64:
14:af:64:c6:0c:86:fa:37:bb:ce:89:be:d9:24:fd:
17:9e:21:e0:05:22:df:95:50:b5:14:4a:5d:93:81:
fd:b1:94:4e:d9:42:48:73:c3:e3:87:5d:90:2f:d1:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:02:1F:81:BD:F9:A7:42:B3:03:C4:B6:CB:02:0C:72:09:28:B4:CB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1QIfgb35p0KzA8S2ywIMcgkotMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:5f:83:4a:3e:ee:b7:a5:f6:65:de:1e:49:b9:82:f9:b5:f3:
e0:d0:9c:88:75:51:40:4f:32:1e:c0:c3:44:58:c5:fb:e8:5e:
fd:b0:a2:7b:07:2c:62:de:ad:3f:3a:0c:ec:73:0f:a1:46:33:
a9:f4:a5:a5:a5:48:3c:f9:90:75:ec:97:af:fa:6c:2a:33:f7:
1d:b5:b7:9c:0d:fc:8f:04:9b:57:77:1a:4d:b8:09:50:ee:6e:
0f:a8:b3:5a:9f:7a:84:f1:8d:f9:14:24:1c:f4:2b:03:9b:fe:
3f:8c:40:1c:ee:b1:41:66:2c:78:5e:81:c9:46:fa:8f:dc:19:
df:a8:bc:2f:ea:76:2a:d3:8d:9e:85:82:d4:9e:1e:05:47:6d:
e4:45:5d:cf:db:ee:68:ac:33:f9:48:0c:ab:ad:76:56:06:5d:
96:2f:46:32:8b:3f:9f:ba:15:bb:16:22:61:9b:fe:b2:1c:ba:
86:15:7b:ca:d8:97:54:74:63:e7:c3:fc:93:9d:25:c6:83:cc:
30:d5:0a:aa:da:4f:bd:03:c5:4c:97:7c:be:0e:48:3b:90:63:
85:91:66:b5:99:e3:73:45:47:82:7d:84:64:15:a2:41:70:9c:
dc:38:f1:9d:be:4c:d5:58:1d:86:b5:bb:29:11:99:2c:b8:93:
62:b0:f9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org