Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4ubG69AFcnVxXJQERpAADzGQjpc.roa
File: 4ubG69AFcnVxXJQERpAADzGQjpc.roa (raw, json)
Hash identifier: vJQs/GxlnYAc88z2FHMX/mPmx9oD5ukLdq5KoY3A0s8=
Subject key identifier: E2:E6:C6:EB:D0:05:72:75:71:5C:94:04:46:90:00:0F:31:90:8E:97
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CBFCC7B7554F147C36B6E4A045D95FB2A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4ubG69AFcnVxXJQERpAADzGQjpc.roa
Signing time: Sun 31 Dec 2023 12:14:58 +0000
ROA not before: Sun 31 Dec 2023 12:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:bf:cc:7b:75:54:f1:47:c3:6b:6e:4a:04:5d:95:fb:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 31 12:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2e6c6ebd0057275715c94044690000f31908e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:a9:a6:6b:67:73:8c:84:0d:5e:48:95:d8:
b0:12:ec:ba:24:f9:6c:ca:16:00:f4:51:11:76:90:
3f:72:e7:a8:f0:6a:15:03:57:43:a4:6a:66:8a:a1:
cc:ba:d1:11:99:83:44:e2:eb:60:f6:82:cf:f2:7d:
12:e1:45:02:c7:c1:35:b1:95:b0:06:71:20:12:03:
1e:97:e4:24:c1:2c:44:a3:26:64:e0:4d:a4:a0:e4:
03:3b:dc:12:1b:d6:b8:9e:d8:ca:65:d7:c9:9f:0b:
a9:df:45:4f:5b:37:e9:1f:41:66:60:59:d5:41:50:
a8:dc:b4:08:db:04:ac:b6:ea:8a:56:ac:93:e8:66:
1e:5c:bf:76:1f:83:12:36:32:d8:7b:ce:95:6f:1e:
17:59:93:79:36:3e:75:b8:34:6d:90:72:9c:89:1c:
7b:76:c5:9f:2c:8d:2d:d5:b9:e9:33:c2:cb:aa:a1:
ab:06:14:a5:3b:45:f0:18:09:31:df:f4:ce:44:45:
57:a3:2d:13:1f:4e:04:0c:dc:7a:c9:bb:9c:e4:8b:
63:b2:84:c5:fe:8c:a9:19:dd:b9:ea:29:26:7f:80:
e1:87:d3:f4:0a:f5:e4:2b:2b:36:45:a2:e6:c1:17:
ef:38:31:0b:63:55:7c:8d:9f:25:65:3e:c5:33:ba:
91:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E6:C6:EB:D0:05:72:75:71:5C:94:04:46:90:00:0F:31:90:8E:97
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4ubG69AFcnVxXJQERpAADzGQjpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:ae:9f:d6:94:fa:11:64:b1:a7:b6:e1:ac:42:bc:ae:e8:57:
4d:01:4b:36:e2:bc:a4:e8:8d:35:ed:cc:8e:dd:9e:17:a4:1a:
1b:3e:f3:82:3e:4d:07:af:67:04:87:0f:e9:03:c3:4d:1a:d8:
68:ee:0e:63:ab:fe:98:ac:ce:b9:c3:95:d8:ad:0a:28:de:a1:
7d:ac:3c:8f:b7:9b:c6:0c:dd:94:09:e6:6f:88:46:22:92:60:
ce:2e:96:29:9d:f7:f8:36:93:68:ce:31:b9:52:ef:b7:ab:b2:
e0:96:4a:18:34:54:7b:d6:43:c2:17:78:3e:53:f1:e6:a4:6f:
3a:8e:e5:c0:ad:6a:0d:11:42:06:36:b7:17:4b:00:34:e8:fe:
47:32:5c:1b:6c:a4:a8:af:9a:20:de:18:90:8a:24:03:99:62:
da:4c:c7:47:eb:ff:e9:74:21:22:78:71:c0:08:cc:1c:da:a5:
25:2d:c0:a7:1c:99:cc:ee:c3:94:fe:c7:81:a1:0c:72:22:df:
07:2d:2a:92:48:f3:a7:3e:a3:9e:6b:b3:2b:81:61:d8:ff:fe:
37:63:35:59:b3:26:ec:05:94:76:7c:c6:3d:bd:e2:6c:14:15:
fe:53:71:55:75:7c:57:36:8c:b5:bd:05:31:27:03:2e:71:5a:
73:d4:a0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org