Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4LVuhW88zht6zL08MGqcBZNKK54.roa
File: 4LVuhW88zht6zL08MGqcBZNKK54.roa (raw, json)
Hash identifier: BGQpJ/T9r7kYbeZ8DWhUJmmfygn+YJ7GtMeJ+ODY9NU=
Subject key identifier: E0:B5:6E:85:6F:3C:CE:1B:7A:CC:BD:3C:30:6A:9C:05:93:4A:2B:9E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D87C941EDEF2DEB1ED8A20B50C5687498
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4LVuhW88zht6zL08MGqcBZNKK54.roa
Signing time: Thu 08 Feb 2024 08:15:30 +0000
ROA not before: Thu 08 Feb 2024 08:15:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:87:c9:41:ed:ef:2d:eb:1e:d8:a2:0b:50:c5:68:74:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 8 08:15:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0b56e856f3cce1b7accbd3c306a9c05934a2b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e8:dd:8f:ef:05:11:38:95:3d:f1:7b:98:8e:
cd:1f:0c:85:c2:ff:e6:28:d3:ce:3a:39:d9:50:4f:
95:54:0d:44:c4:bf:50:66:17:bb:75:84:5f:f0:d4:
74:4f:ff:25:70:8b:08:42:53:8c:d5:8d:0d:a1:3d:
01:c5:ce:67:9b:94:f3:dd:56:f7:4f:c1:39:db:ed:
4e:d2:13:a3:b9:58:1a:e9:10:4f:cf:76:98:50:95:
7d:a7:3c:d5:a0:c6:1e:6d:e8:d3:f7:b8:b2:44:ab:
cf:04:90:6d:01:d0:26:5d:6e:cc:a3:8a:ff:0a:eb:
2f:5f:be:97:aa:d9:f3:1d:dc:9c:b8:dd:45:e7:99:
1f:d9:20:34:7c:0b:90:a1:8f:3d:3d:3f:76:b1:b8:
4d:2e:b6:4b:48:f6:d8:c1:82:0c:f0:3d:48:73:78:
2b:f0:3d:2a:38:b1:5f:2c:7a:72:57:60:67:11:12:
b1:b3:1b:d2:33:0c:8f:e2:66:9b:1e:32:e6:3c:d1:
a9:99:99:1e:f8:9a:cb:90:52:02:5f:da:e3:f4:be:
90:89:d3:b6:36:29:7c:f5:93:f9:ec:c8:d6:d2:9e:
98:35:29:86:88:18:18:f0:a9:a2:c8:28:e5:97:40:
23:11:37:ee:cc:6a:9f:91:81:96:39:04:ec:bb:55:
a7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B5:6E:85:6F:3C:CE:1B:7A:CC:BD:3C:30:6A:9C:05:93:4A:2B:9E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4LVuhW88zht6zL08MGqcBZNKK54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:d3:73:95:12:34:63:91:f8:be:38:90:6a:f4:89:00:c4:17:
3e:65:60:cf:87:c5:85:08:31:27:f4:08:d2:52:67:cd:33:9d:
e2:16:1c:f1:55:c5:36:5e:04:41:11:63:1b:e1:15:fb:bc:2e:
50:90:9c:c5:81:cd:80:74:32:7a:c5:01:24:5b:ee:78:ec:97:
1a:93:4c:9e:8d:18:20:d3:6f:60:f8:70:a1:25:c7:ab:c3:57:
9b:78:88:d5:64:4b:3b:36:47:c5:52:46:e9:d6:99:ad:ae:98:
30:ab:f2:0b:02:e5:76:16:4d:cd:18:37:0f:53:09:3e:a8:2e:
6d:fa:8c:4b:44:9b:3e:47:7e:c6:e6:fb:82:4e:91:d2:fd:2a:
40:29:c0:91:a9:a8:3f:65:7c:e0:5b:b3:92:e0:49:b9:f6:1a:
fd:42:89:2d:af:c6:9c:7a:a8:3e:da:2d:8d:70:28:41:ee:e2:
fc:85:f2:14:cb:d9:3f:1d:71:6f:4b:3c:9e:55:f9:12:c9:df:
5a:d9:dc:cb:6c:0f:77:a6:7b:83:c9:de:79:62:2f:af:d6:95:
d5:56:83:77:9c:bb:98:ad:cc:13:f7:bd:0a:0c:61:c4:25:a6:
83:6b:ce:fd:e3:ca:ec:ff:d9:2a:8f:21:02:d1:77:e7:43:ec:
2e:ad:55:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org