Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5BPv5iY5NrNx64LG_1aiQK8WWDg.roa
File: 5BPv5iY5NrNx64LG_1aiQK8WWDg.roa (raw, json)
Hash identifier: Cl509oPgLSYUOa/UEmjF+BuWQC+GTOPr0sbryUlwbeo=
Subject key identifier: E4:13:EF:E6:26:39:36:B3:71:EB:82:C6:FF:56:A2:40:AF:16:58:38
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E2BEFA7C18FF39326A49A922685E6B635
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5BPv5iY5NrNx64LG_1aiQK8WWDg.roa
Signing time: Mon 11 Mar 2024 05:15:10 +0000
ROA not before: Mon 11 Mar 2024 05:15:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2b:ef:a7:c1:8f:f3:93:26:a4:9a:92:26:85:e6:b6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 11 05:15:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e413efe6263936b371eb82c6ff56a240af165838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6b:3b:08:e9:0d:2e:dd:87:77:f8:e0:49:8d:
40:44:15:df:aa:be:79:5e:f5:23:c9:f1:db:3f:70:
7a:cb:d2:f9:7f:2f:0f:c8:1e:e0:ff:fe:d1:43:e0:
e6:f1:2d:43:5a:17:13:ec:9c:17:eb:3a:97:38:2c:
94:26:a3:e2:01:91:22:a5:92:21:78:5d:4b:b6:0d:
c4:29:b6:d8:ed:29:10:ab:de:85:c5:07:fc:9b:8e:
8f:bf:19:9c:ba:d1:1a:db:05:27:36:fb:cc:a3:10:
6e:69:bc:02:f9:43:04:1a:25:87:8b:67:38:12:86:
07:f0:0a:8d:8d:75:eb:f1:cb:d4:56:d3:d7:18:85:
aa:b2:12:e8:23:f3:a9:df:cd:5e:57:4f:c7:96:0e:
f7:e7:a4:8b:df:3f:19:4c:29:f9:0a:95:31:5e:4a:
55:84:a9:1f:8f:c7:93:69:f9:f4:f9:76:a5:e4:c0:
b3:7a:da:83:76:58:6c:af:b9:50:09:f0:4f:44:5d:
f0:76:04:bd:8f:0c:f5:5a:e2:b8:7f:f4:1a:64:fe:
dd:67:8f:5b:04:31:88:1a:39:7c:0a:29:17:41:2a:
dd:0c:9e:68:af:5a:19:95:72:c8:64:20:ba:40:f3:
5e:ba:47:55:29:0e:da:a7:b5:91:d0:94:e6:9a:50:
1a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:13:EF:E6:26:39:36:B3:71:EB:82:C6:FF:56:A2:40:AF:16:58:38
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5BPv5iY5NrNx64LG_1aiQK8WWDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:d0:8f:41:ba:77:81:70:00:fe:17:ce:a3:75:f2:83:74:d3:
3f:cc:1a:ec:7b:16:57:bb:30:20:4f:41:c0:b2:94:a6:f8:25:
16:fd:09:b5:cc:f1:aa:86:f2:ec:16:0f:69:4d:28:91:22:b9:
d1:4c:58:ad:90:39:14:54:c0:b8:01:cf:3d:d5:c2:9f:37:98:
bf:26:6b:6c:d0:7a:a7:44:6f:1f:95:02:8a:b5:35:6d:6a:ce:
4a:cc:df:6e:9d:0b:44:c4:63:d3:d4:e3:8f:48:a6:2d:7c:c8:
43:8b:88:b6:88:29:58:f1:3d:c6:ab:f0:3c:82:1a:de:bc:36:
86:56:5c:3d:7c:fe:ab:b9:ad:0e:34:a3:60:6c:28:f2:f5:d9:
15:62:0d:b9:17:9b:b8:2d:61:89:1c:08:45:20:bc:95:c3:c1:
19:c3:f5:b3:d1:20:e3:8a:b8:9d:b8:13:00:57:f2:4e:b5:85:
c7:d3:a3:ad:a3:34:92:11:7e:65:c9:56:ee:5f:05:7d:73:73:
d9:1e:a6:ff:93:2f:0f:6b:6d:ed:81:74:95:98:05:cc:cd:8a:
4e:2c:db:bc:f3:ef:0f:88:3a:82:95:b2:88:d3:37:fa:6c:82:
65:8c:9b:c0:96:e8:cf:b7:b5:73:8c:f3:07:d3:09:5a:ad:15:
a1:da:81:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org