Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3xmWD9rAGkDD04Dpm_UDAwDRowY.roa
File: 3xmWD9rAGkDD04Dpm_UDAwDRowY.roa (raw, json)
Hash identifier: y+R1DspxwvNQNv6yPOIvtkaCHM43d0tBgwiodwfUhuc=
Subject key identifier: DF:19:96:0F:DA:C0:1A:40:C3:D3:80:E9:9B:F5:03:03:00:D1:A3:06
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E6D6081F28B3DBABC44CF6F1E721488C3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3xmWD9rAGkDD04Dpm_UDAwDRowY.roa
Signing time: Sat 23 Mar 2024 22:13:45 +0000
ROA not before: Sat 23 Mar 2024 22:13:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6d:60:81:f2:8b:3d:ba:bc:44:cf:6f:1e:72:14:88:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 23 22:13:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df19960fdac01a40c3d380e99bf5030300d1a306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:80:42:27:6a:e5:00:aa:6a:d4:a5:5b:89:
8b:7c:3f:25:58:ff:11:83:a3:fa:b0:27:1b:6b:d8:
05:e0:71:7a:05:27:5f:a3:82:dd:45:2a:9e:d4:f5:
2e:2c:07:67:76:55:cb:65:7b:28:e3:c8:5d:97:81:
a8:61:2d:73:a5:d7:ad:26:bd:11:9e:4a:43:27:a2:
a9:9a:a1:d1:d1:30:4e:e9:56:7e:0b:c5:38:44:5e:
b9:12:2e:5d:ab:21:fa:71:5f:a7:74:d1:29:0c:68:
c0:ca:1f:2f:fe:68:bf:08:ae:07:98:4b:eb:72:49:
23:f0:e6:78:47:7c:6f:20:b1:b9:8a:2e:4c:db:de:
e0:04:dc:f0:44:b4:8f:5d:e1:07:3d:64:1c:69:58:
05:04:d0:6c:e5:4b:bb:96:10:df:e3:97:d1:2c:5d:
06:c3:72:67:c1:f0:e5:bd:37:51:69:a6:c3:2c:23:
ed:7d:6a:1d:62:38:a0:5a:1a:de:fa:ae:d6:a6:f6:
c4:a2:d4:34:52:f1:94:97:27:1a:88:fe:ca:62:f0:
d6:98:ee:4f:81:f3:e4:1c:db:8d:e8:87:68:0b:4e:
1e:5b:ff:bc:63:d9:93:b6:69:52:04:86:d5:c1:48:
75:4c:63:42:50:65:45:76:d1:0a:c4:4a:33:cb:27:
ce:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:19:96:0F:DA:C0:1A:40:C3:D3:80:E9:9B:F5:03:03:00:D1:A3:06
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3xmWD9rAGkDD04Dpm_UDAwDRowY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:61:7c:0c:7e:fb:2b:1c:b6:2e:10:e4:9f:bf:e6:ef:3b:69:
ac:a9:97:58:3c:5b:97:1d:23:a4:79:1b:59:1a:09:82:1d:18:
b3:3c:b6:f7:ce:96:f5:64:44:54:13:08:13:3b:0c:c7:42:4f:
42:77:cf:16:32:c2:cd:c6:e0:a9:fa:b9:89:a7:86:a4:3d:4d:
12:af:45:f4:7c:0e:8d:ed:99:3e:7b:5a:76:16:f2:94:d3:8e:
ab:ed:52:95:34:19:8f:1d:21:86:0a:f7:18:de:eb:fc:18:e5:
60:2d:03:28:ff:bc:99:a4:ac:42:55:89:9d:28:45:5c:a9:74:
f8:a2:1a:0e:39:b7:0b:33:99:6d:03:59:13:40:27:3f:6d:86:
ab:50:bd:cb:70:4e:f5:45:9c:c8:21:43:cf:58:0c:f4:67:83:
b4:ee:99:2a:e1:d0:ec:e9:29:49:e9:e6:6e:0a:74:62:01:85:
76:b0:9f:40:99:c3:83:52:79:c6:a0:1e:46:57:6d:86:c9:a7:
b7:a1:66:b2:c4:54:50:09:5b:1d:fa:8c:37:95:7b:d8:fb:72:
6c:2f:56:b8:3e:f2:b7:0a:2b:44:a7:28:b5:fa:b6:bc:e2:17:
fa:4c:cb:32:53:18:41:d7:a0:9a:a8:02:b3:26:b6:01:58:04:
0b:e6:f2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org