Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1T6GrjFnQKpbUiFykrYXcWr3D20.roa
File: 1T6GrjFnQKpbUiFykrYXcWr3D20.roa (raw, json)
Hash identifier: ghO7/Irhz10hP7sW68pzBsL1kRCf1CzH9zDJ8O7SEuo=
Subject key identifier: D5:3E:86:AE:31:67:40:AA:5B:52:21:72:92:B6:17:71:6A:F7:0F:6D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E024DAB1342C5D628C8B2DC70428B5F0A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1T6GrjFnQKpbUiFykrYXcWr3D20.roa
Signing time: Sun 03 Mar 2024 03:13:48 +0000
ROA not before: Sun 03 Mar 2024 03:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:02:4d:ab:13:42:c5:d6:28:c8:b2:dc:70:42:8b:5f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 3 03:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d53e86ae316740aa5b52217292b617716af70f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:9e:8c:fd:bc:50:d2:8e:28:dd:5e:6d:b8:
6e:12:d2:2b:d5:26:61:c9:6b:a9:40:9c:79:0c:22:
a3:1d:79:fd:15:dd:91:d2:01:00:5b:fe:1d:82:9a:
fe:8c:36:02:2e:72:38:e1:4e:d5:64:22:4a:71:08:
07:d3:83:94:e6:f0:55:33:9a:6e:d8:50:63:65:11:
ea:c5:e6:57:73:67:c3:07:7a:b6:93:6c:13:e0:a2:
1a:88:06:d4:60:3c:9e:60:e5:69:fa:05:18:06:e5:
07:ba:c8:65:39:b2:82:f0:19:39:11:8b:29:c3:c7:
4f:bd:d0:58:b8:cd:bc:d0:62:72:9a:96:d9:fe:03:
e4:69:6d:09:16:c5:d3:3d:93:78:9a:e1:03:ae:65:
82:eb:43:01:f7:15:40:83:be:ee:f6:c2:66:7b:f6:
a4:d8:99:be:17:9e:75:aa:74:be:32:55:d9:3e:c5:
bf:6b:67:2a:8f:ee:24:e7:4a:19:c3:a2:6e:47:76:
f4:2e:6c:5b:6c:7e:36:49:f2:c4:25:1a:ea:51:4a:
7c:37:4f:aa:b0:d7:55:9f:58:a8:40:56:b3:07:ba:
f8:44:8e:0e:84:d2:62:77:80:47:36:fb:3d:3d:ce:
fb:eb:38:ca:c5:05:fb:a5:81:d1:65:6f:c0:ca:69:
3e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3E:86:AE:31:67:40:AA:5B:52:21:72:92:B6:17:71:6A:F7:0F:6D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1T6GrjFnQKpbUiFykrYXcWr3D20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:41:e7:3b:e4:cc:a1:18:f6:0d:28:3e:71:22:d2:bf:ed:43:
ba:3c:c7:b3:4e:54:1d:9d:e5:d6:2f:9f:c3:65:8e:42:30:f0:
1f:35:1e:9f:8b:23:94:d4:b7:03:1f:b9:31:da:60:5a:0a:4d:
ea:e3:ba:68:4e:0b:60:16:71:64:e8:6c:4f:a4:a2:49:d3:49:
32:f8:e2:d9:33:df:6c:6e:d2:e7:26:88:89:67:a8:af:4f:61:
c0:dd:03:9f:94:26:2a:63:98:91:ea:b8:a2:12:b3:d9:93:ec:
32:a9:d1:8e:70:f4:2f:29:bb:c1:db:94:e5:3b:de:44:68:9f:
24:c6:9f:6c:02:e0:67:62:ff:b8:0d:19:e0:ff:46:f9:07:77:
e9:ed:5b:89:71:f2:f3:4c:da:7f:f7:43:61:b2:9c:63:66:c6:
43:3c:e9:0f:d2:e9:95:14:41:03:5a:60:53:e3:55:d7:7b:db:
41:b1:8e:c0:85:6c:62:f1:57:ea:e4:16:8e:f6:b2:51:15:f9:
1e:c9:7e:bb:dc:46:f0:9a:31:7f:18:0b:26:91:42:46:f9:bf:
7b:db:53:be:3f:22:6a:5b:e8:00:21:0e:81:52:50:09:ab:5b:
99:0d:31:0b:1b:98:14:67:6e:89:9e:6e:5f:33:8e:ae:fd:de:
12:85:29:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org