Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1rlkH5J4I8yiQSR0kN7XwnDoQxk.roa
File: 1rlkH5J4I8yiQSR0kN7XwnDoQxk.roa (raw, json)
Hash identifier: 0ebOntnoQTEJ8z+h000+buodi1ggRIY/lxZT3uCwi5o=
Subject key identifier: D6:B9:64:1F:92:78:23:CC:A2:41:24:74:90:DE:D7:C2:70:E8:43:19
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018ED83CCBBFB91CD0CAEB5596C81E293E22
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1rlkH5J4I8yiQSR0kN7XwnDoQxk.roa
Signing time: Sat 13 Apr 2024 16:14:06 +0000
ROA not before: Sat 13 Apr 2024 16:14:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d8:3c:cb:bf:b9:1c:d0:ca:eb:55:96:c8:1e:29:3e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 13 16:14:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6b9641f927823cca241247490ded7c270e84319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:aa:42:c7:07:58:ca:8a:bb:dd:22:e2:65:
41:d4:ac:75:20:5c:08:dc:22:e4:21:1e:9d:7f:4c:
ca:49:d8:12:a2:28:76:72:b0:81:2d:df:e9:3c:c3:
49:ec:91:15:71:b2:38:67:09:33:b3:16:f8:24:86:
bb:bd:ce:b5:7c:58:31:02:86:61:20:46:89:ed:c6:
15:44:b5:54:cd:37:e8:4e:23:5a:83:cd:0a:e5:11:
7f:e7:ec:9e:a9:f7:0c:62:a6:a1:6e:2b:62:f4:4c:
58:76:e3:4e:8b:2e:04:14:68:43:46:a3:ec:fd:ea:
c7:27:77:43:1d:eb:7d:3d:9f:42:a2:09:b1:3d:63:
41:83:69:31:4a:7d:a0:af:52:26:85:db:5f:09:58:
32:1b:0c:7c:52:64:83:22:03:86:b8:d6:b0:53:67:
83:cb:f8:76:9e:1b:f9:38:b0:02:a3:f7:03:c8:a0:
7d:1b:a9:9a:33:e7:cf:a6:a8:d5:db:55:d5:46:65:
e7:e2:09:0e:df:14:ec:52:9c:d7:31:20:27:df:04:
d5:26:b8:9a:fd:0d:56:b8:f8:36:5b:9d:20:c8:ef:
4c:5b:af:cc:ba:a1:b9:e8:a9:24:b0:16:8a:cb:c2:
5b:e0:ab:fb:c3:af:e4:47:84:4e:c1:d7:6e:31:b0:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B9:64:1F:92:78:23:CC:A2:41:24:74:90:DE:D7:C2:70:E8:43:19
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1rlkH5J4I8yiQSR0kN7XwnDoQxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:63:70:44:64:b3:22:9f:3c:51:15:cd:ff:56:05:d3:68:92:
14:e8:cd:c8:dd:e1:e0:8b:bc:7f:79:02:31:4f:46:4b:b5:44:
f5:59:40:81:7a:2c:7f:f3:42:72:a6:86:3a:7a:4c:29:20:f1:
56:52:35:75:b8:59:8f:f1:9f:d0:53:55:6d:c3:eb:19:0b:d6:
bc:42:0e:55:78:70:6b:e4:c2:9e:9b:18:8e:22:34:01:71:e4:
a6:b5:6a:e7:0a:ff:c1:ab:84:97:af:fd:d2:ca:92:7f:a7:ce:
97:24:53:e6:15:80:e3:83:e6:9e:a1:de:3a:98:83:45:5c:1a:
a2:3a:75:58:c0:41:15:2b:6e:ba:6e:b8:35:5a:cb:02:26:8a:
b0:ad:c5:66:b1:7c:ee:51:b8:d6:8f:0f:2e:07:6b:f8:ea:58:
66:41:bd:72:19:f1:7d:e3:d0:cc:94:a0:49:5d:92:3b:3a:75:
a7:71:d0:f7:ed:05:0c:8d:f4:c5:ed:4c:67:d5:60:cf:c6:b5:
48:44:81:06:b9:62:4b:1c:c0:61:0a:82:0c:7f:93:f2:49:1a:
2c:44:59:60:85:dd:67:5e:68:3f:ff:9f:f9:76:93:73:3d:4d:
c6:fa:8a:af:a0:22:e8:71:7f:89:6a:31:53:9b:61:a9:cb:bf:
e6:0b:1b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org