Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7Tm5G6S8XP8JJkzEbmKoFZgAfnI.roa
File: 7Tm5G6S8XP8JJkzEbmKoFZgAfnI.roa (raw, json)
Hash identifier: K5XbH4brsqXMOPf8NMmYibTGkRhrOua5jsFsG9XFQIs=
Subject key identifier: ED:39:B9:1B:A4:BC:5C:FF:09:26:4C:C4:6E:62:A8:15:98:00:7E:72
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E938F97E66BE685A47EBB5009495008C2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7Tm5G6S8XP8JJkzEbmKoFZgAfnI.roa
Signing time: Sun 31 Mar 2024 08:10:44 +0000
ROA not before: Sun 31 Mar 2024 08:10:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:93:8f:97:e6:6b:e6:85:a4:7e:bb:50:09:49:50:08:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 31 08:10:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed39b91ba4bc5cff09264cc46e62a81598007e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:11:93:cd:a9:ad:2e:9c:95:d1:cb:fc:5b:5b:
24:63:38:a1:cd:97:0b:7d:20:d7:3a:98:e6:ce:be:
5c:ce:12:fd:d7:18:8c:c6:37:b4:d8:17:b5:58:54:
6a:37:cd:92:2e:4e:09:93:06:68:0f:26:80:be:0f:
b1:3f:4d:b1:0f:aa:e4:1d:cf:32:b7:af:42:dd:e1:
34:71:4c:27:a0:4a:3d:5a:9c:b2:9d:6b:a5:93:1a:
09:87:87:bf:34:95:ea:31:62:32:cc:c5:5e:b8:f1:
7c:99:2b:7a:9a:9f:ed:59:84:01:bc:69:b6:e3:c2:
04:d1:d0:85:ad:3d:7d:5e:e8:44:e0:25:8d:f9:38:
4d:d0:fc:bb:3b:ee:3c:7a:a9:58:b7:53:44:7e:39:
36:37:f6:0f:7d:23:ca:bb:71:f2:ad:13:78:35:b9:
7f:fa:ec:ab:2f:0a:98:1c:64:4c:1a:9a:b8:4c:40:
18:d3:a3:02:e1:b5:d5:d2:7a:fa:80:0e:11:1e:11:
97:d1:8d:86:cc:65:fd:fa:64:40:ea:79:a0:28:e0:
5a:c2:dd:b3:91:17:52:b6:83:0c:cb:d9:e9:ac:b2:
f8:f9:76:60:d6:40:ae:8c:d1:03:0c:31:c7:1a:d2:
23:42:f8:0e:dc:eb:29:dd:2c:f0:d8:3b:20:bd:0d:
46:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:39:B9:1B:A4:BC:5C:FF:09:26:4C:C4:6E:62:A8:15:98:00:7E:72
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7Tm5G6S8XP8JJkzEbmKoFZgAfnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:8c:8f:ef:96:0c:cd:fd:37:58:08:37:20:da:c8:f9:fc:17:
44:44:ce:4b:a9:0e:21:6e:d0:e1:76:de:29:4a:75:a8:cf:8a:
00:39:3e:14:f5:5b:70:1a:63:2b:ed:24:d1:b2:56:76:44:1a:
1f:b7:46:78:40:d8:bb:7c:01:cf:94:80:98:81:2d:a9:6c:0f:
a0:71:f7:ec:86:62:54:4b:a7:29:ce:fa:21:e1:13:c6:6d:98:
9e:c3:4b:b3:67:c1:1a:e8:72:fc:85:0a:58:48:f3:cc:a2:52:
4d:8c:9e:35:9e:d6:63:f3:8f:c2:dd:22:d6:a4:36:de:de:37:
76:4f:25:7f:16:95:9f:45:61:03:cb:f4:3e:01:67:db:9e:95:
9e:90:aa:c8:80:5a:46:01:5a:40:a5:95:45:b1:c6:66:d9:55:
ea:ee:18:c2:33:bd:ac:b5:b2:8d:74:24:b5:ea:54:68:38:84:
da:61:00:a4:5f:73:35:a0:46:3b:85:07:2e:68:81:74:a7:83:
c9:96:bc:44:3c:21:ce:f0:7b:5e:0c:a6:66:6f:27:57:18:1c:
6a:d3:2d:0f:41:14:22:59:95:de:a6:81:be:9f:f9:66:3e:ed:
f4:71:15:87:05:a3:4f:36:94:c1:1f:52:fd:14:be:90:2c:8d:
50:89:99:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org