Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1fFp_5Om6Ebr1XFuwpC7gn4V7nY.roa
File: 1fFp_5Om6Ebr1XFuwpC7gn4V7nY.roa (raw, json)
Hash identifier: 3XisMAMjNQcpIkymO35BXyCN4+hylgW3nBI4ALOBjXQ=
Subject key identifier: D5:F1:69:FF:93:A6:E8:46:EB:D5:71:6E:C2:90:BB:82:7E:15:EE:76
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DE5C1EE5D1CBADBD3BD0F6DA48FE98EBB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1fFp_5Om6Ebr1XFuwpC7gn4V7nY.roa
Signing time: Mon 26 Feb 2024 14:11:48 +0000
ROA not before: Mon 26 Feb 2024 14:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:c1:ee:5d:1c:ba:db:d3:bd:0f:6d:a4:8f:e9:8e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 26 14:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5f169ff93a6e846ebd5716ec290bb827e15ee76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:fe:69:08:02:ae:da:fa:d0:7d:18:b3:88:
a6:3e:b7:80:8d:78:f2:f5:86:ad:94:fa:86:a5:43:
1b:53:e9:ec:4e:b0:ff:e2:cf:88:eb:46:e0:35:51:
17:73:2b:8a:75:68:20:46:5e:37:b2:fc:0c:2a:bf:
92:45:a5:2b:67:47:d5:2d:dc:5f:09:61:b3:33:82:
95:67:f2:71:76:24:5e:c8:ed:b3:40:cd:0b:23:36:
97:09:e5:6e:47:46:df:09:4c:b0:59:be:bf:be:b5:
f3:ae:ae:62:6f:41:ee:91:45:89:66:c7:24:2c:8d:
cd:3d:8e:9b:0e:96:b5:1c:2e:58:ea:14:d4:02:64:
a3:23:78:d6:df:04:21:45:d5:f8:3a:a5:e1:c5:99:
79:f2:0c:0e:4c:54:a9:67:fc:a6:29:8b:41:4b:bf:
fc:66:7e:71:16:f1:0d:83:b1:4e:94:8a:f5:64:83:
a6:fa:07:9e:df:35:9d:04:65:ac:b9:9b:98:03:52:
71:4c:7e:d7:4c:ea:38:b7:05:c1:37:9e:5d:45:c3:
e9:e5:2c:1f:c7:3e:e5:10:aa:e1:23:fb:f9:31:2e:
29:35:e4:0c:8e:c7:d4:27:5b:f3:cf:43:2d:d3:46:
bb:1b:29:3f:b1:ba:f7:cf:b7:55:47:a5:11:7c:11:
4a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F1:69:FF:93:A6:E8:46:EB:D5:71:6E:C2:90:BB:82:7E:15:EE:76
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1fFp_5Om6Ebr1XFuwpC7gn4V7nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:a2:48:e6:b5:ad:8d:3d:c9:46:10:92:24:05:d0:f8:37:8d:
03:30:2b:6c:25:8c:e8:8a:38:c8:b4:dd:fb:c0:1a:f9:be:1d:
b8:f4:2b:e6:cb:12:25:97:34:df:8d:93:f3:42:ae:1d:c7:9b:
12:42:5a:8a:12:d2:46:ce:04:9e:5d:37:b2:43:5e:b3:18:f5:
59:52:d6:6f:89:8c:72:d3:21:9b:65:17:e9:7b:70:a5:73:a2:
c4:31:09:dd:93:61:cc:6f:59:a8:59:89:19:8d:ff:cf:94:47:
15:9c:4b:f5:47:bf:49:93:0a:d9:3a:ba:54:49:ad:3d:c0:c7:
39:f3:52:9e:7e:65:58:43:5f:3f:33:18:4d:a9:cb:b2:9c:b6:
36:50:94:ec:c2:50:47:3f:76:71:31:7c:81:e2:66:99:fe:2b:
42:d5:d2:93:27:d3:24:a1:e5:53:d6:79:dc:61:4c:aa:23:87:
33:e2:fd:18:62:17:44:38:d4:2a:60:be:2f:0b:80:6c:ff:d5:
8b:37:db:e5:89:11:66:a9:98:3d:bb:48:11:66:5d:4c:f9:51:
47:09:32:bd:63:c7:4f:bc:47:f7:71:bb:fa:e8:c8:38:d3:0d:
24:bc:a8:45:7c:3f:32:8d:55:d8:64:1b:90:1c:a6:b9:5a:2f:
6c:75:f1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org