Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/78u_gVQoSQbPB-CTjpfkC_ES30E.roa
File: 78u_gVQoSQbPB-CTjpfkC_ES30E.roa (raw, json)
Hash identifier: XWc5/z4wK8sKD8Y+ShlGwmwZUVbPIhdqGbL/7CRZWAk=
Subject key identifier: EF:CB:BF:81:54:28:49:06:CF:07:E0:93:8E:97:E4:0B:F1:12:DF:41
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CD5DD21A7B0E207F3F3597CCF225B5BE0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/78u_gVQoSQbPB-CTjpfkC_ES30E.roa
Signing time: Thu 04 Jan 2024 19:04:48 +0000
ROA not before: Thu 04 Jan 2024 19:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:d5dc:aa86/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d5:dd:21:a7:b0:e2:07:f3:f3:59:7c:cf:22:5b:5b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 4 19:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efcbbf8154284906cf07e0938e97e40bf112df41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:10:7b:86:d5:0d:49:01:db:81:e0:a7:94:b9:
38:2e:d8:aa:5a:af:e8:6a:32:71:40:f3:a9:01:ad:
b5:33:bc:79:2f:ed:db:fd:18:05:b5:05:71:eb:fb:
e9:8a:54:42:9d:db:68:86:0e:03:a9:7b:55:80:53:
8f:b7:57:44:e9:ce:39:26:c9:56:67:e8:3a:3b:e3:
04:4b:93:01:a6:4b:1a:bc:ba:01:95:48:35:2c:60:
e5:59:7b:8c:9b:2d:71:eb:8e:59:40:a7:94:58:78:
a9:cc:83:30:f2:b0:9c:fd:19:aa:3c:1c:19:ff:df:
62:83:88:61:97:55:cd:21:17:98:86:48:9b:0f:67:
70:b7:e9:06:1c:b1:10:e9:37:7c:54:4c:db:e1:57:
4c:88:fe:7c:d3:ad:95:87:5c:f5:2e:04:7e:4a:d2:
03:3f:0f:78:0d:42:b8:e6:c6:b7:50:d0:eb:fe:e8:
b7:91:7d:ec:04:e0:4f:e1:0d:df:35:af:0f:64:43:
97:75:90:f1:b0:6f:42:ab:63:a9:80:4f:6c:84:7e:
d5:2e:54:4c:97:57:5d:6f:bb:31:3e:0f:11:91:e1:
e5:86:6c:d9:6b:2a:f1:38:2e:be:67:20:11:6c:8c:
1a:df:f2:df:c8:08:a7:06:49:c6:e1:1b:39:e3:b3:
99:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CB:BF:81:54:28:49:06:CF:07:E0:93:8E:97:E4:0B:F1:12:DF:41
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/78u_gVQoSQbPB-CTjpfkC_ES30E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:b8:46:fc:48:c1:f1:07:32:49:8c:8b:55:78:15:27:c7:6e:
59:7d:19:78:ab:a8:17:0e:7a:88:0f:b2:ef:1a:26:1b:d3:e3:
b4:c3:6a:5a:81:e5:1a:12:09:0f:92:a5:10:28:54:26:1e:ae:
27:c2:2f:c3:86:92:02:d5:d7:c1:1a:23:b2:4f:16:50:55:15:
17:5a:fc:3c:25:0d:6d:05:94:1d:f3:50:d1:ec:f1:44:b9:e7:
39:fb:93:f9:7a:ed:24:c1:49:a4:e8:09:b4:03:78:93:b4:9b:
8c:f1:00:a4:68:b1:50:58:95:23:03:29:1e:95:15:be:0c:21:
32:ab:fa:98:15:12:ea:49:4c:3c:b3:34:ba:85:0d:48:71:d6:
f9:a1:c6:9d:2a:5a:60:12:e2:15:d6:20:f1:7d:ed:55:76:e5:
47:d1:0d:67:93:68:36:14:90:d7:63:67:d3:fe:5b:33:d7:29:
76:33:47:88:f1:2b:61:3e:fa:69:d1:ba:61:56:d6:03:23:c7:
63:0b:fb:a8:5b:90:ca:0d:85:56:1a:68:ec:80:05:e2:7f:1f:
18:7b:34:a5:8c:86:0e:33:f3:4e:18:99:e5:2a:02:9c:b2:be:
d9:b1:2b:b7:00:6a:99:57:34:32:4f:2b:97:c0:a6:09:65:21:
11:98:57:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org