Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6uVsdaBT5z-kcgPwEbr3UqeKs48.roa
File: 6uVsdaBT5z-kcgPwEbr3UqeKs48.roa (raw, json)
Hash identifier: 4F40QOp/EBw8aK7d1ZMxpcc8CvlLSBSI8v1UGlT/MxU=
Subject key identifier: EA:E5:6C:75:A0:53:E7:3F:A4:72:03:F0:11:BA:F7:52:A7:8A:B3:8F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E92ECA2566B0043B2F2CFFD829CA88A80
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6uVsdaBT5z-kcgPwEbr3UqeKs48.roa
Signing time: Sun 31 Mar 2024 05:12:45 +0000
ROA not before: Sun 31 Mar 2024 05:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:92:ec:a2:56:6b:00:43:b2:f2:cf:fd:82:9c:a8:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 31 05:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eae56c75a053e73fa47203f011baf752a78ab38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c3:c1:94:0f:06:52:7d:d1:b7:ac:74:d6:cd:
62:60:46:d8:80:d0:59:d7:37:1c:ed:ff:db:07:9b:
3e:7c:0e:95:d3:cc:63:2f:d9:64:a6:c5:00:37:d9:
04:a3:9d:2a:b5:b7:0a:c4:a2:4d:d9:f4:c5:d6:03:
39:fd:ed:1d:21:64:2f:6e:24:38:79:6c:5f:c3:a9:
8c:c2:ac:64:18:2a:9b:db:62:fc:54:67:f8:42:ca:
df:27:22:42:2e:f9:12:26:0e:38:f1:a6:7b:ac:41:
92:61:fb:5e:bc:81:22:79:2d:aa:87:b1:7b:ab:2c:
07:a1:8b:9e:09:f6:a1:51:ec:a2:4e:64:7a:cb:68:
0a:6e:04:56:86:0b:b6:d2:60:5c:be:9b:00:b8:7b:
c5:91:b2:7d:22:a5:96:a1:a3:bf:e8:7b:24:96:c0:
76:e9:b4:99:08:45:1b:50:a8:fc:c0:cd:73:3d:89:
7e:30:48:2a:24:f3:85:06:65:4d:bb:3f:66:3b:4e:
e3:5f:64:c7:6a:3e:a3:01:d7:be:d0:35:1b:32:e1:
8c:69:a3:9e:dc:40:68:af:a6:f1:61:61:0e:98:7c:
8e:01:0d:77:73:e9:b1:44:25:92:90:66:a5:b6:c4:
df:54:ad:ba:cd:d9:3d:19:46:4b:3e:e0:54:04:e7:
19:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E5:6C:75:A0:53:E7:3F:A4:72:03:F0:11:BA:F7:52:A7:8A:B3:8F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6uVsdaBT5z-kcgPwEbr3UqeKs48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:af:3d:3a:3a:cd:c0:03:a6:c2:ac:1e:fb:81:e4:5f:4f:62:
93:c8:ea:d1:4a:7f:f8:0f:f5:fc:b2:5a:29:01:da:80:fb:47:
5a:d9:39:81:a4:98:cf:a1:c8:38:e8:bd:24:ff:fa:f2:e3:15:
80:21:ad:16:10:d2:2d:2e:71:3b:ec:4f:29:fd:38:11:52:90:
95:a8:c2:38:64:15:54:4a:5b:cf:7a:46:4d:b4:53:ac:da:f4:
35:9f:26:a0:3b:34:14:ad:aa:4e:b0:db:9d:ae:0c:75:ca:c4:
5e:4e:61:94:ca:7d:a4:87:2a:66:ad:e1:33:b4:cb:37:c6:58:
4b:af:03:4f:54:04:b6:38:13:ed:f6:50:1d:5f:4a:55:c9:76:
06:88:f0:c3:3f:5b:49:0f:b0:b6:97:3b:3d:b1:7a:cf:f1:53:
fd:b1:ae:d4:ed:e3:d6:50:b0:48:60:6f:43:37:a7:dc:47:36:
36:75:63:5e:23:bd:b4:e8:ce:a5:df:1b:de:46:4f:ee:c2:75:
a6:dc:ad:7f:a9:4a:51:8d:64:fe:71:e4:a4:d9:34:61:60:8a:
dc:8b:56:a5:41:13:c8:a4:35:4a:38:ed:f3:07:e3:fe:fe:a0:
0e:c6:e2:e2:ea:19:88:28:d7:05:96:92:93:8a:ec:69:a6:0c:
92:dd:a7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org