Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6Ma_HUci7QGIgVKgRCjlvxFFJ4k.roa
File: 6Ma_HUci7QGIgVKgRCjlvxFFJ4k.roa (raw, json)
Hash identifier: nhM7p7z0dy1J6qOTu7XP4sg7ZTh+5fbyRXGwl1z8HGw=
Subject key identifier: E8:C6:BF:1D:47:22:ED:01:88:81:52:A0:44:28:E5:BF:11:45:27:89
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E34F09292F5FF8CCAEBC17EC12779C1B3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6Ma_HUci7QGIgVKgRCjlvxFFJ4k.roa
Signing time: Tue 12 Mar 2024 23:12:45 +0000
ROA not before: Tue 12 Mar 2024 23:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:34:f0:92:92:f5:ff:8c:ca:eb:c1:7e:c1:27:79:c1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 12 23:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8c6bf1d4722ed01888152a04428e5bf11452789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fb:b4:8a:00:3d:75:9d:7e:c7:b5:60:48:e7:
62:4f:53:a5:08:43:41:ee:e3:ad:73:59:87:14:4b:
83:aa:df:23:80:d8:e2:ae:53:d0:05:84:34:56:a1:
39:37:21:22:4f:61:85:b5:e6:48:81:28:10:fa:ae:
22:c1:54:ef:49:79:4a:c9:11:89:a2:29:da:fe:a3:
4d:df:cb:3b:73:c7:14:1a:3c:12:0f:15:e1:19:7d:
e2:6e:58:7f:98:7b:75:19:9d:19:27:10:ad:e6:8f:
d8:e7:94:dd:76:8a:9b:5e:7e:6e:26:b9:94:52:32:
4f:ec:df:83:b2:09:3b:17:da:5a:af:53:6b:49:48:
4c:f7:bf:e0:b0:8b:34:52:4c:5f:08:f4:56:e2:78:
61:a1:dd:77:03:75:1d:be:db:f4:a3:ae:50:cb:45:
cb:54:fb:bb:e7:6c:94:b2:2e:9a:01:31:a2:d3:34:
67:a2:55:40:cf:d5:60:bc:26:00:50:f2:e1:0d:56:
b0:03:28:c0:76:dd:42:5f:dd:73:6b:75:51:fa:6b:
5a:0f:58:e8:e1:7c:ee:15:e5:c7:53:6b:6f:b7:24:
59:13:40:56:23:f4:e4:05:24:bb:d1:94:45:6b:3e:
91:ac:82:b0:c7:1f:c5:46:81:e3:39:25:73:05:cb:
0d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C6:BF:1D:47:22:ED:01:88:81:52:A0:44:28:E5:BF:11:45:27:89
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6Ma_HUci7QGIgVKgRCjlvxFFJ4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:0d:aa:7e:1f:2e:39:92:52:e0:05:83:8f:90:a3:42:99:11:
61:58:cb:e3:2a:da:c6:1e:a2:f9:2a:25:a7:f7:4b:b4:af:32:
e9:57:dd:98:87:7e:1f:1d:80:1d:92:26:e6:f7:cd:50:79:eb:
fb:ea:d7:c8:24:98:7b:34:cd:75:31:36:59:00:02:38:95:9b:
94:d4:18:30:d6:a1:6b:c6:88:06:ec:aa:fc:d3:74:4f:34:df:
d8:66:cd:76:19:60:b9:3c:9b:69:bf:0f:8a:7e:63:cd:ee:a5:
44:a0:f3:b3:e1:5e:d5:33:ca:bd:7d:88:b0:b3:d5:3a:82:71:
9d:fa:df:b4:24:24:c3:ee:e4:cf:ce:a8:92:c6:db:b4:64:c0:
bf:7a:b0:6f:26:a4:ad:05:c7:8d:1e:70:80:33:65:21:53:e4:
0e:fa:cf:19:e8:66:68:17:d1:4a:7e:de:48:31:e7:b3:99:ce:
6c:5d:ab:9d:f9:f7:66:fc:62:6f:18:64:55:0f:cd:1d:02:49:
ec:15:80:68:ec:b3:3f:40:d0:dd:69:03:98:03:db:76:40:1f:
54:29:73:43:b4:96:ad:b2:25:04:24:9c:1b:9b:70:b4:38:80:
08:e3:fa:a3:46:30:b9:0f:7c:84:3d:01:37:b8:e6:5b:c2:19:
aa:5a:2a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org