Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3Mt41u2ZVEQv4DIgyw2GmV4YKvY.roa
File: 3Mt41u2ZVEQv4DIgyw2GmV4YKvY.roa (raw, json)
Hash identifier: sx8Lycqi1KoNssqDRwRh//Vw2e93Ulw7AklHFv9oe+s=
Subject key identifier: DC:CB:78:D6:ED:99:54:44:2F:E0:32:20:CB:0D:86:99:5E:18:2A:F6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D26CAF530E8FB41D42AC9B72C5F99DBA5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3Mt41u2ZVEQv4DIgyw2GmV4YKvY.roa
Signing time: Sat 20 Jan 2024 12:14:11 +0000
ROA not before: Sat 20 Jan 2024 12:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:26:ca:f5:30:e8:fb:41:d4:2a:c9:b7:2c:5f:99:db:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 20 12:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dccb78d6ed9954442fe03220cb0d86995e182af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:4e:67:67:9d:f4:59:70:e1:1b:d1:d6:66:
5f:f4:93:6c:5d:af:6b:ba:96:b6:1c:1b:32:e5:0f:
96:a7:50:28:ce:9d:c5:99:ae:13:8e:a5:26:37:dd:
54:ae:d9:06:99:45:88:82:15:7e:66:38:f0:21:22:
4c:75:8f:a1:8e:59:05:21:48:7a:82:a7:5a:36:b9:
b1:14:c1:cd:08:6b:c2:77:e8:ea:c1:95:d4:7d:85:
15:eb:87:57:43:bf:63:dd:2d:57:6c:03:5e:4a:94:
44:6f:13:db:c1:e1:81:34:c1:8b:e4:78:22:13:27:
cd:5d:89:24:0d:96:69:0c:8e:86:ca:b6:8f:7c:c4:
41:98:16:ef:bd:8d:cf:f0:fc:3a:03:be:3f:bb:61:
d1:21:85:b6:b6:11:0a:c3:4f:2b:cc:e1:ff:e1:d3:
9f:0b:96:1f:77:bb:b0:f5:28:87:e8:1f:cd:b4:7b:
a4:cb:a6:70:79:aa:55:75:44:4c:63:38:6c:d1:85:
4b:5f:93:eb:dc:b0:9f:b7:95:9c:49:a1:59:41:1c:
27:77:7d:fd:96:a4:c5:f8:c6:1c:ec:8a:85:4a:db:
e2:b3:a8:ff:0b:25:ac:3a:bd:6f:ae:c7:8f:2c:8e:
50:4c:3d:22:fe:44:e9:e1:39:cd:6a:9d:33:1c:47:
71:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CB:78:D6:ED:99:54:44:2F:E0:32:20:CB:0D:86:99:5E:18:2A:F6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3Mt41u2ZVEQv4DIgyw2GmV4YKvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:28:62:59:4c:78:b7:b1:06:77:2d:9a:71:01:41:91:ed:69:
44:cb:28:44:63:2f:7e:83:e0:45:27:95:c9:3b:ed:1d:4c:3c:
4b:1d:1a:3a:c3:54:a2:73:9b:30:bf:41:6e:7b:4d:44:94:22:
c0:79:9a:03:2e:24:be:f0:7e:d1:a1:da:f7:d0:20:39:5c:62:
7a:d7:d3:6d:fa:0b:5c:70:42:d5:09:a7:c5:82:aa:95:5e:ac:
de:ed:c5:56:2e:29:ac:33:ec:75:9e:8e:07:88:32:4f:55:15:
7c:b9:67:ce:63:01:43:78:4d:a5:98:68:00:2e:16:31:48:85:
43:1d:b3:9e:2d:99:fc:03:82:0d:6d:a0:92:65:d0:6e:a6:2d:
66:49:fe:cb:78:52:07:6e:20:58:75:10:b5:3c:68:82:f2:60:
e2:ed:06:70:f2:81:54:29:ab:ca:97:a8:72:71:f4:05:19:c5:
b4:f2:f1:3a:8a:f8:bc:5b:f5:39:03:b9:13:4e:34:13:90:6e:
54:bf:7f:c9:74:67:59:9e:15:25:4b:ad:34:50:c0:cf:06:13:
12:41:7e:5c:2a:a2:34:05:46:0d:21:a2:fa:1c:ed:42:22:c3:
cd:fb:34:1c:d9:a3:4a:1c:68:86:a3:e1:65:44:f0:50:3c:2f:
1d:8d:42:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org