Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1z5hnqen7mTusMDq3BuRMh9aouQ.roa
File: 1z5hnqen7mTusMDq3BuRMh9aouQ.roa (raw, json)
Hash identifier: y/YM+kDEl/Zmt3tObSSR96bvKefttNTmRMnkRx9SDiQ=
Subject key identifier: D7:3E:61:9E:A7:A7:EE:64:EE:B0:C0:EA:DC:1B:91:32:1F:5A:A2:E4
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA4896A06222855C200F3D2513E4F1A8D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1z5hnqen7mTusMDq3BuRMh9aouQ.roa
Signing time: Tue 26 Dec 2023 05:11:58 +0000
ROA not before: Tue 26 Dec 2023 05:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a4:89:6a:06:22:28:55:c2:00:f3:d2:51:3e:4f:1a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 26 05:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d73e619ea7a7ee64eeb0c0eadc1b91321f5aa2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:69:01:46:ec:33:ff:85:c5:e5:91:2a:d2:
f1:71:e1:b3:78:5b:ef:fe:d6:8c:47:32:6f:5b:c3:
fc:ae:d7:61:fb:25:48:82:d2:5b:f7:13:b6:25:35:
5c:2a:46:28:f3:3c:2a:2e:9c:96:91:05:04:57:a7:
6d:91:9c:78:03:19:e3:d1:0b:ac:60:a3:b2:c1:a4:
e6:26:f9:d7:e0:ec:a3:da:07:6f:29:86:35:e6:d9:
5e:c3:62:9b:f3:c5:09:7c:2f:ae:8f:1f:bc:c6:d7:
bb:99:94:34:d3:f2:71:14:38:3a:70:28:78:7e:f4:
e1:d9:41:e2:29:c5:7c:c3:f6:aa:77:c6:08:12:0b:
c1:a3:5c:0f:7a:2b:07:38:10:7a:c9:16:3d:3a:7f:
39:aa:54:a7:38:a1:42:21:07:d5:3a:79:3f:a3:bf:
a6:81:22:e6:02:ff:f4:a9:14:71:b2:1a:19:95:97:
53:76:0a:95:bd:4e:59:be:c3:a0:0d:10:f4:25:0d:
ba:b6:c5:e0:57:0a:07:0c:cc:70:bd:2a:49:a4:a9:
ec:5b:8b:ff:50:48:48:6f:2c:3f:a1:44:96:eb:71:
fb:45:9d:d2:dc:77:93:5f:c1:55:20:57:1e:59:f2:
21:6c:eb:d8:4c:4a:d1:5a:e6:02:a0:76:ed:28:34:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3E:61:9E:A7:A7:EE:64:EE:B0:C0:EA:DC:1B:91:32:1F:5A:A2:E4
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1z5hnqen7mTusMDq3BuRMh9aouQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:20:89:81:ee:ab:0e:84:8f:b1:b7:bc:19:25:58:b1:f9:07:
81:06:04:2e:3d:bb:05:2b:89:f2:d0:29:4a:ad:72:2e:81:16:
d1:e0:14:4b:d8:63:0c:9a:c4:16:3f:51:70:00:8a:fe:87:54:
fc:39:a3:60:07:c7:c4:d9:c5:aa:18:85:0e:27:da:23:8e:83:
80:1a:d6:35:61:08:0e:b4:6e:da:0e:be:9e:86:c8:80:3a:4e:
ac:f9:8c:a1:bb:1a:69:93:63:e6:23:b9:b1:42:d5:a2:80:2b:
07:55:f0:42:65:d7:92:dc:92:b6:b6:fc:58:4e:5c:94:e6:1a:
7e:f2:7c:1f:c5:b4:d3:19:71:2d:8a:44:1f:6d:2d:a6:9b:4d:
bb:98:2a:ef:e3:8b:02:68:14:18:1b:b2:19:97:2e:d7:53:f8:
f3:99:ad:6d:d5:40:cf:89:c0:b5:e4:24:bd:1b:b1:3f:9b:8a:
03:bc:85:f4:79:72:8d:99:9c:e4:23:ef:4e:d0:71:38:8b:c6:
00:78:b7:a4:96:2a:4d:81:5a:ef:f1:f2:cd:05:f6:b6:6e:cb:
38:82:d1:a5:01:ab:7e:66:8c:b6:08:70:3c:a7:5a:dd:01:d8:
6a:32:5a:bb:4b:55:98:4a:8c:91:71:ac:a1:13:ed:e2:24:59:
15:5e:f8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org