Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4C7BS4yO7Zfab01fPny6KMi_VBM.roa
File: 4C7BS4yO7Zfab01fPny6KMi_VBM.roa (raw, json)
Hash identifier: IF+QByNwJKAOyd5hKkbvRNPh7Sv3pjnsdoXB+zxNvQg=
Subject key identifier: E0:2E:C1:4B:8C:8E:ED:97:DA:6F:4D:5F:3E:7C:BA:28:C8:BF:54:13
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E152EEFB290DBF64E1593D1B9C7EFE9DA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4C7BS4yO7Zfab01fPny6KMi_VBM.roa
Signing time: Wed 06 Mar 2024 19:13:01 +0000
ROA not before: Wed 06 Mar 2024 19:13:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:15:2e:ef:b2:90:db:f6:4e:15:93:d1:b9:c7:ef:e9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 6 19:13:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e02ec14b8c8eed97da6f4d5f3e7cba28c8bf5413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:c5:32:83:b3:29:85:9d:20:f9:c2:a1:16:
23:9f:59:07:be:99:25:6c:67:fd:4f:84:1b:98:40:
fe:f1:96:57:3c:a0:69:b7:ea:46:aa:db:b7:db:fa:
a8:24:c0:37:c2:26:e4:5c:73:23:23:92:21:22:55:
eb:8a:18:dc:53:43:8c:fd:5e:5a:de:71:71:72:aa:
dc:d9:d6:36:2f:e8:62:84:8c:ec:ea:d6:44:9a:da:
a1:0f:5c:67:1e:47:3b:dc:5c:a6:6b:e1:3e:ee:f7:
1c:e9:e8:99:9d:bf:36:72:5c:6b:9f:94:f5:e3:d6:
63:68:2c:1b:97:4c:8c:1f:95:da:dd:15:60:51:21:
df:5d:00:0a:33:45:59:b6:24:cd:92:46:6b:6c:fa:
12:b7:2a:ff:75:14:73:4f:fc:c4:c8:16:5e:b1:10:
21:96:2c:f5:db:fc:68:20:60:6f:6f:b6:88:0e:5a:
4a:36:12:85:10:b1:b2:f2:eb:be:96:8c:2d:64:58:
7a:0c:e5:65:44:1c:11:0c:f5:e1:1b:6d:f8:2b:19:
bd:12:5a:b5:b6:38:ee:ca:e8:f7:a8:ec:d8:4f:9d:
f7:e2:8b:35:51:fa:95:4c:27:a7:61:27:72:c6:6e:
55:c1:99:2f:50:6d:2d:9b:47:67:2c:e1:95:ed:56:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2E:C1:4B:8C:8E:ED:97:DA:6F:4D:5F:3E:7C:BA:28:C8:BF:54:13
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4C7BS4yO7Zfab01fPny6KMi_VBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:b2:4a:2d:0d:88:1c:e8:78:b7:65:a6:2b:d2:bf:56:e8:23:
12:92:d2:16:e6:cd:9d:cb:00:d7:b7:bf:05:ee:36:b6:9e:96:
af:b6:10:b9:91:68:2a:01:f8:97:8b:b9:3a:1b:16:c3:3c:24:
63:85:38:a8:df:43:c6:54:0d:61:93:ee:0d:82:b9:66:67:16:
1c:6c:99:5b:1b:8a:84:d2:d6:b8:d0:07:ec:f2:88:3c:45:33:
92:54:fc:ca:c3:c7:12:53:7c:b9:ef:25:41:3c:52:78:5a:34:
ef:2a:bd:00:f6:90:22:fc:4a:a1:91:b4:14:1b:d0:09:fe:09:
ef:ef:22:4c:2e:8c:05:21:34:ee:6d:4e:92:0f:80:19:23:79:
7f:53:32:f9:3e:e9:dd:83:1e:bc:d9:4c:71:07:49:85:7e:62:
3c:3f:86:b1:15:8c:76:13:8f:7c:16:6d:82:0f:d2:c6:25:76:
d3:e1:6c:66:ed:96:1f:fa:f9:4f:40:b3:79:32:2c:20:fc:28:
f9:da:d3:c2:78:6e:fe:f6:64:85:f3:aa:cd:9b:5a:50:e3:d8:
28:eb:a0:f7:06:9d:ec:13:83:82:86:bb:00:19:4f:54:9e:d5:
8b:a9:88:82:c6:d6:c2:8b:3d:22:45:f1:c2:c3:e3:a5:22:51:
ab:59:e2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org