Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/23eHWcDDZHSsBhvJjOn_fzXbUUI.roa
File: 23eHWcDDZHSsBhvJjOn_fzXbUUI.roa (raw, json)
Hash identifier: i8F2x7TSoPfLP/wvIAbTmurpeWYh5r9eMTjtyzwAWmc=
Subject key identifier: DB:77:87:59:C0:C3:64:74:AC:06:1B:C9:8C:E9:FF:7F:35:DB:51:42
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D7626943EE56FEF946FFF3788B820A649
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/23eHWcDDZHSsBhvJjOn_fzXbUUI.roa
Signing time: Sun 04 Feb 2024 22:04:16 +0000
ROA not before: Sun 04 Feb 2024 22:04:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:7626:8515/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:76:26:94:3e:e5:6f:ef:94:6f:ff:37:88:b8:20:a6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 4 22:04:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db778759c0c36474ac061bc98ce9ff7f35db5142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:46:cd:e8:b9:cb:b0:69:13:5f:db:9f:39:
4f:11:fe:98:f8:11:82:43:f5:2a:ab:0a:c7:c0:c1:
03:1a:cc:33:53:03:e7:64:ad:fa:b2:32:48:86:e8:
5a:8f:3a:b9:b8:50:69:cd:21:2a:00:f5:ab:20:b8:
79:06:bb:ef:9a:58:cc:e3:3d:79:a1:47:81:f3:2c:
30:5e:99:e3:7b:c5:db:7a:e7:34:88:6c:4a:b2:b6:
c3:62:68:bd:f7:49:95:f4:ab:2a:c4:b5:2a:f7:39:
b4:60:9c:43:2e:2c:03:f8:9c:24:a2:6a:fa:f0:96:
7c:df:eb:ff:b5:90:3f:73:ab:09:4d:76:ba:2b:27:
3c:4d:fa:58:7e:b8:85:4e:94:df:4a:75:aa:e0:4a:
62:25:04:12:70:73:d6:b5:97:a1:da:be:06:00:c0:
ce:ab:44:b8:22:31:9a:84:b2:7a:54:d3:a3:ae:be:
04:f5:82:5e:2f:3d:77:86:0d:9a:33:d3:5b:02:5f:
66:3d:51:0d:27:ee:d4:f4:7b:eb:9a:f3:a2:58:c7:
20:be:05:4f:77:3e:76:d9:d3:88:4e:ff:55:a0:d5:
9c:40:17:98:6d:20:33:b1:8b:25:62:28:ce:af:02:
a0:3f:0e:26:dd:94:38:f2:e1:f8:c9:b9:9c:a1:4a:
fc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:77:87:59:C0:C3:64:74:AC:06:1B:C9:8C:E9:FF:7F:35:DB:51:42
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/23eHWcDDZHSsBhvJjOn_fzXbUUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:37:42:0c:2d:1f:0e:50:79:46:20:09:64:a9:f1:40:3b:5f:
87:92:5c:f8:60:66:ca:d1:32:4e:98:b4:bf:6c:86:72:ea:f2:
ad:ac:f4:80:90:31:52:f3:d4:a4:8a:85:47:57:22:a7:f9:7e:
5a:cd:0e:46:c9:4a:7a:e4:9e:cf:7d:95:84:21:87:70:a2:aa:
2e:ea:11:06:6f:58:ae:db:7d:5a:c0:44:a7:8b:cd:7d:c7:08:
e1:34:b9:88:01:ff:43:23:02:81:6b:f6:2d:e2:98:51:4e:cb:
b6:e7:e4:b2:4a:76:97:ec:6e:dd:83:d2:4a:27:53:e4:43:f1:
c4:69:ae:48:1f:eb:c3:09:a6:76:90:61:8a:cb:f3:c3:15:3a:
3d:2c:a2:3f:20:4c:3b:8d:87:9c:4c:a3:65:3b:22:23:50:2c:
86:39:41:f0:14:6b:21:25:90:61:e6:47:52:81:41:22:bd:aa:
68:b5:a4:ca:42:c7:dd:4f:da:1e:07:7c:37:0f:47:f0:79:c7:
94:15:37:d2:3c:64:30:39:93:6d:44:3a:5a:e4:e7:e5:6c:15:
fd:df:20:6d:f6:64:88:3d:d2:29:c5:5c:5f:7b:63:2e:10:34:
10:47:58:f4:7f:eb:f0:66:02:0e:86:af:ae:3d:ad:43:2d:69:
4c:ac:d4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org