Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/51sKWXET9CS6nBK9FXwr6nYiskk.roa
File: 51sKWXET9CS6nBK9FXwr6nYiskk.roa (raw, json)
Hash identifier: lU8Zsq1P/ueevGEMPBayTxO29m49N2/iFgNxzv9akY8=
Subject key identifier: E7:5B:0A:59:71:13:F4:24:BA:9C:12:BD:15:7C:2B:EA:76:22:B2:49
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DC5CCF50A4DE14D2C05D47F56A295046C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/51sKWXET9CS6nBK9FXwr6nYiskk.roa
Signing time: Tue 20 Feb 2024 09:16:00 +0000
ROA not before: Tue 20 Feb 2024 09:16:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:cc:f5:0a:4d:e1:4d:2c:05:d4:7f:56:a2:95:04:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 20 09:16:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e75b0a597113f424ba9c12bd157c2bea7622b249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:5d:21:a0:92:f1:c1:fa:70:58:2a:f4:bf:
7a:dc:a4:4f:fc:4d:96:98:af:ec:1c:d8:e8:0f:c1:
0d:64:d8:21:d9:40:da:98:fb:66:d6:ff:24:d6:44:
ff:85:21:f8:cf:2b:6c:1f:3b:59:95:32:a9:88:32:
69:72:40:7e:80:1b:db:8c:a3:dd:6b:39:83:a0:5c:
92:96:5e:5e:22:da:b2:01:55:6c:c8:28:7b:81:9b:
23:ec:78:bc:34:0a:03:ef:df:0f:97:1f:7d:bc:64:
ad:da:4c:e7:fb:5a:4d:a8:d8:b2:b0:15:33:8f:00:
69:b0:cd:62:b3:56:43:2e:f1:73:7d:84:d5:5f:02:
5e:21:72:ae:e0:60:8c:4b:d9:15:d8:f1:f9:f7:f5:
b7:af:07:0c:22:7c:54:02:8d:c1:c0:35:ce:39:15:
e9:d6:f4:db:00:a5:b8:eb:c9:aa:79:65:1b:c2:b3:
c5:64:b5:fd:c9:f8:a1:81:9d:76:ad:70:21:f9:f5:
a1:94:d0:4f:45:61:1c:19:56:51:fe:63:87:4f:b7:
ad:6d:c1:7a:f7:d0:c6:22:f8:c5:48:5b:a9:70:b0:
64:fa:62:22:07:82:4f:9b:f1:3e:3e:45:93:85:d0:
53:27:46:2c:b9:86:a8:5e:8d:8f:76:3f:9a:ca:cd:
e9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5B:0A:59:71:13:F4:24:BA:9C:12:BD:15:7C:2B:EA:76:22:B2:49
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/51sKWXET9CS6nBK9FXwr6nYiskk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:2e:73:33:7a:2c:7c:42:7e:06:80:d2:89:a5:3a:85:2a:7b:
a2:1b:ed:5a:b3:25:70:88:12:30:0b:d2:46:00:db:e0:ac:95:
79:4a:61:3c:bb:3a:fd:ca:78:3a:0b:c2:6f:41:86:8c:6a:49:
fd:71:dc:8d:17:33:06:08:c7:d1:a6:ef:ac:45:55:0e:b8:55:
dc:6e:01:7d:8c:6d:13:23:8c:33:43:b9:32:75:48:4a:3f:a9:
e0:43:b0:f4:48:5d:1d:76:1d:a4:6b:23:eb:b7:b9:33:85:f9:
8e:79:5d:04:df:2b:a0:80:d5:2b:ab:4a:4d:1b:17:80:54:1c:
94:d5:fa:e1:a7:23:2e:79:96:1b:3b:a7:0c:9a:69:97:e1:3a:
ac:75:49:33:b7:54:17:4d:dd:20:ea:17:36:0b:14:d2:e8:85:
1c:71:b6:19:e0:56:e8:a2:1c:a3:19:d3:98:09:05:72:16:50:
5c:f5:86:eb:a7:48:f4:2e:37:de:af:5e:ab:04:d7:03:65:15:
71:66:2b:b3:91:f0:6a:9e:7c:7f:36:33:3f:6a:89:ab:75:fc:
65:17:0d:90:d8:65:e9:9c:19:63:5d:24:ee:e2:7f:fe:d8:13:
a7:a8:96:e4:b7:35:bb:37:73:5c:b9:39:62:bb:6c:b7:2c:ac:
d6:28:33:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org