Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7Ea-xN3CUBJYVvQdsPLubB2DYxI.roa
File: 7Ea-xN3CUBJYVvQdsPLubB2DYxI.roa (raw, json)
Hash identifier: 96xO2NFlRddWPJJ7UMUgXE31GaBjyRSsMLRKNFxCyVU=
Subject key identifier: EC:46:BE:C4:DD:C2:50:12:58:56:F4:1D:B0:F2:EE:6C:1D:83:63:12
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EBB0B278735B59DDA58C19261FF12BA3D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7Ea-xN3CUBJYVvQdsPLubB2DYxI.roa
Signing time: Mon 08 Apr 2024 00:10:54 +0000
ROA not before: Mon 08 Apr 2024 00:10:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bb:0b:27:87:35:b5:9d:da:58:c1:92:61:ff:12:ba:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 8 00:10:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec46bec4ddc250125856f41db0f2ee6c1d836312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:aa:ad:b9:11:d2:45:07:dd:e0:ca:45:a2:b2:
db:5a:c7:ee:e3:a8:89:36:5f:e6:68:ea:b4:12:f0:
3d:65:50:3e:12:b3:ae:d8:e4:15:ba:69:d3:6e:43:
bd:62:42:5d:f2:9e:c3:61:f0:7c:32:8e:b2:fd:c1:
2c:85:b0:e7:d4:00:d5:43:58:05:96:fd:ab:30:91:
9c:72:c5:ae:c3:5b:68:0a:43:92:0e:25:6b:fc:60:
c3:c7:2f:07:50:6d:a9:1f:f7:fa:26:bc:88:3c:c5:
d5:31:7f:2c:fb:3d:08:b4:85:7b:df:d9:bc:6b:5b:
f5:03:30:f6:b3:db:d6:ca:3c:8b:ff:39:05:7f:5d:
6d:ed:50:17:37:95:b2:8d:19:84:e1:0e:64:67:e9:
36:c5:59:3a:cb:46:0c:93:3b:44:4c:d0:89:7a:47:
4a:eb:7b:23:9f:76:00:86:2c:d2:e0:d2:42:0c:12:
8a:12:14:56:a9:12:0a:01:ed:4e:2c:6e:33:f2:9d:
aa:52:ba:07:3d:cd:0d:16:d8:ba:17:1e:06:25:22:
22:30:18:f2:ec:ee:b7:c1:0e:9a:dc:e1:00:ae:e3:
91:b4:05:9b:87:fc:70:3a:62:0b:37:da:ad:ae:31:
5b:64:c2:85:1e:62:22:33:de:d9:57:77:8b:b8:96:
e9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:46:BE:C4:DD:C2:50:12:58:56:F4:1D:B0:F2:EE:6C:1D:83:63:12
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7Ea-xN3CUBJYVvQdsPLubB2DYxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:96:5b:a8:31:96:4c:4b:03:fb:b9:a7:53:a2:37:45:1a:f3:
9a:7d:c8:97:dc:af:56:c1:ea:0a:32:4b:59:49:5f:6a:b0:50:
41:30:32:bc:d7:66:09:26:86:52:da:06:d9:8f:f7:f9:99:7e:
db:02:30:7a:ed:86:64:3a:8f:60:1a:22:ec:17:86:30:e0:9c:
a2:c0:9b:68:38:95:17:c1:7d:f3:68:5b:4b:2a:3f:f0:0a:3a:
95:35:9b:1f:87:a5:db:e8:84:fb:8e:6a:64:4c:6c:b2:52:c9:
0f:3d:65:59:e3:92:0b:f0:f1:41:2d:1c:69:fc:00:13:3d:f8:
f9:2f:15:dd:9c:1a:82:26:b0:54:c6:15:59:95:4b:c6:c5:db:
96:ab:a8:63:02:8d:4f:41:0f:88:fa:d4:1e:3c:68:02:91:3e:
81:02:04:a4:32:86:dd:70:f1:27:06:72:48:47:7c:8a:62:aa:
05:8a:b5:4e:04:dc:de:c1:31:ba:fc:e7:00:ea:21:7c:60:46:
29:52:0f:b5:6d:8f:94:1f:78:93:47:6e:27:bc:7b:9e:67:cb:
ac:89:12:d5:c9:26:92:64:38:b1:a4:c1:a5:24:ca:16:bd:4e:
1f:36:dd:5e:c6:14:fa:fd:89:d5:d7:22:cb:30:3b:35:27:d7:
7e:db:5b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org