Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3VNUMqHBrlABp582NnM1ZeD6v-8.roa
File: 3VNUMqHBrlABp582NnM1ZeD6v-8.roa (raw, json)
Hash identifier: Zvdf2lU7nVz9HuA2bR0dzR/En336LveXkqZkHZf49fw=
Subject key identifier: DD:53:54:32:A1:C1:AE:50:01:A7:9F:36:36:73:35:65:E0:FA:BF:EF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DF0B37153205714F6BAB5BA1CE2D98725
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3VNUMqHBrlABp582NnM1ZeD6v-8.roa
Signing time: Wed 28 Feb 2024 17:11:48 +0000
ROA not before: Wed 28 Feb 2024 17:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f0:b3:71:53:20:57:14:f6:ba:b5:ba:1c:e2:d9:87:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 28 17:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd535432a1c1ae5001a79f3636733565e0fabfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c8:e1:8c:30:71:51:a4:94:e5:31:30:d9:2c:
0f:56:f4:ec:a8:57:16:58:1b:f3:ff:83:87:55:50:
67:7a:0d:86:92:1b:27:77:08:84:1a:af:e1:11:95:
1c:d0:e7:23:7e:ac:3e:fb:ec:50:0c:29:91:0c:3a:
37:d2:b6:00:ef:70:9b:00:1e:6e:3a:e5:c7:6a:f8:
26:a7:ab:84:a4:0a:28:87:7e:e8:35:95:04:9f:a2:
fd:6a:63:a5:20:e6:51:74:b5:8c:41:cc:56:dc:5c:
6a:1b:5c:20:93:6d:6e:a9:17:02:e8:a6:42:3f:47:
c0:44:95:56:c3:ca:29:0a:7b:53:97:76:8b:7c:c0:
98:89:92:05:63:64:b0:c9:1f:61:0c:c4:a5:20:8e:
66:ca:2f:4f:e3:f6:02:b3:0e:96:34:e6:f3:0e:4b:
f2:fa:af:68:22:86:8b:f7:c3:80:9b:99:a9:94:94:
2c:42:77:2f:8d:33:99:7b:af:e9:e6:bf:f6:54:61:
c5:52:65:f4:cd:23:09:b0:02:76:c4:e4:1b:63:22:
e5:87:e5:d6:70:77:e9:2f:0b:81:70:97:72:1d:2e:
50:18:21:7e:81:8c:82:d0:60:c7:93:d7:66:b8:d2:
43:4f:6c:b4:1f:a0:66:0c:e6:f9:63:4b:66:69:b2:
3d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:53:54:32:A1:C1:AE:50:01:A7:9F:36:36:73:35:65:E0:FA:BF:EF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3VNUMqHBrlABp582NnM1ZeD6v-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:99:05:9f:f5:90:e0:b4:0d:ec:8f:5d:78:84:fe:70:86:3e:
fc:ee:41:33:fa:96:0e:94:8e:9d:f9:46:8c:83:95:41:97:f3:
88:07:e7:05:a8:e5:60:2d:27:e7:0e:79:b4:0f:97:04:2f:64:
e5:0a:46:60:a2:ec:b5:d3:dc:4c:9e:57:c4:f8:3e:a2:4f:f3:
3b:ff:ed:4c:f5:22:59:09:88:35:6c:61:26:af:af:8f:dd:ad:
33:18:64:45:82:21:22:5a:44:d3:db:3f:1a:09:24:63:9c:44:
24:fa:ea:e9:57:08:b9:16:ca:27:3d:1a:a4:da:6c:f6:3c:0e:
55:e3:bc:fe:07:d6:43:2d:d8:21:07:9f:b1:ee:f9:b2:5b:42:
dc:1a:a7:17:99:40:94:e5:7d:f3:c8:5a:06:d5:a7:83:bd:42:
10:4c:71:37:c5:1b:0f:e2:b5:4f:d3:23:1e:13:50:5a:1c:52:
cc:0b:8a:d8:ca:52:15:fd:ba:3e:4f:55:dd:ea:81:65:08:00:
5a:cf:14:48:a6:09:8d:84:87:cb:2b:e8:7e:eb:2a:c2:89:fd:
25:16:be:4f:4b:ff:df:54:c0:1c:28:f6:18:32:a6:ed:38:29:
60:d9:47:31:27:52:08:67:75:bf:36:c1:df:64:e5:64:e4:e2:
4e:c1:4d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org