Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6Og8r4z3AoqC8TLE6Q_9PhRaf78.roa
File: 6Og8r4z3AoqC8TLE6Q_9PhRaf78.roa (raw, json)
Hash identifier: 4Q2BZNe298iNdzAqNFR7tgEo9FE8SRw8uwYOIgRxdk8=
Subject key identifier: E8:E8:3C:AF:8C:F7:02:8A:82:F1:32:C4:E9:0F:FD:3E:14:5A:7F:BF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9E883F7A30D3F8422AC6569732938A73
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6Og8r4z3AoqC8TLE6Q_9PhRaf78.roa
Signing time: Mon 25 Dec 2023 01:12:58 +0000
ROA not before: Mon 25 Dec 2023 01:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9e:88:3f:7a:30:d3:f8:42:2a:c6:56:97:32:93:8a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 25 01:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8e83caf8cf7028a82f132c4e90ffd3e145a7fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c2:9e:c1:32:ba:fe:84:40:8e:aa:93:e1:0a:
cc:2e:4e:c2:5a:e5:b9:ae:50:88:e4:f6:ae:08:2f:
a8:00:5b:43:73:e9:fb:56:25:54:b7:94:9d:11:28:
18:23:88:e6:05:63:30:49:53:d5:a8:ea:a1:9e:27:
1b:86:06:fe:52:ce:b8:00:00:85:4e:67:7f:dd:eb:
ee:72:07:ad:cc:4b:6f:7d:32:85:ca:9e:3a:17:d5:
4b:34:a3:93:0f:34:a7:58:35:ef:86:3e:92:cd:ab:
06:2e:1f:81:78:98:09:b1:c8:17:d0:6f:a2:74:34:
ea:39:58:66:91:89:85:6f:ea:c4:e2:6e:22:35:c5:
44:c9:66:f0:c7:2d:5d:73:d6:a1:54:9e:24:fb:b4:
25:bf:60:4b:fa:49:7e:af:0c:ba:d9:d3:60:a3:a5:
0c:c5:60:d5:13:e0:f1:52:83:01:b7:63:80:79:31:
8d:6c:99:df:9c:e0:fe:2c:88:e5:23:46:44:23:f2:
9e:cd:f5:f5:f6:71:4b:91:d7:ab:56:da:a0:86:b3:
af:29:4c:5d:53:b7:46:d4:82:2e:20:d2:03:5b:16:
2b:d8:cb:45:52:43:98:fc:df:f4:55:40:45:9e:5c:
43:3e:eb:32:e6:d2:49:38:ff:71:7d:3f:18:3a:c2:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E8:3C:AF:8C:F7:02:8A:82:F1:32:C4:E9:0F:FD:3E:14:5A:7F:BF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6Og8r4z3AoqC8TLE6Q_9PhRaf78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:e3:7a:5d:1c:07:2a:c5:ee:2a:30:f8:f3:84:aa:a5:ed:d4:
95:3b:cf:ce:c3:fb:00:af:7f:a0:fd:16:df:5a:4f:f6:90:22:
98:b9:44:f3:02:8f:f9:e7:78:56:00:02:d2:e2:e2:00:e5:45:
3e:55:72:e6:c3:43:34:c7:13:d3:aa:e9:f2:96:17:6c:f7:c6:
72:a3:f3:d9:ae:7d:b5:dd:1e:59:c5:3c:ca:18:93:01:c3:2c:
e2:bf:74:10:7f:1b:6f:92:5b:e9:3b:d0:2e:9b:bb:d5:4a:50:
2c:f6:7d:b6:0d:65:a0:44:3a:f5:d5:a1:2b:75:8b:74:d9:ef:
1d:22:fc:e4:1a:fa:ae:f9:46:8d:79:3d:ec:28:ab:ec:ad:bc:
8a:3d:e7:ff:09:0e:68:17:48:ef:71:e5:bd:7f:aa:91:1c:07:
fd:32:b4:42:21:00:66:cc:ff:ec:0e:a5:63:9f:6e:85:5f:d0:
f9:9f:e8:42:b6:c1:8e:98:5f:b1:e2:58:33:9e:b0:bc:18:d9:
7e:d0:23:dd:bf:69:70:9e:da:6d:77:84:58:76:b5:5f:52:c2:
4d:a1:06:a9:a9:4e:89:75:b6:27:78:6e:9c:37:1a:a3:a2:06:
9f:b7:37:eb:8e:72:2d:c1:8a:13:36:d2:08:d9:27:c4:ee:2f:
be:4f:38:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org