Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7VYZRAmABIrsRhlAPRgHGRZ2uDM.roa
File: 7VYZRAmABIrsRhlAPRgHGRZ2uDM.roa (raw, json)
Hash identifier: gixo2EVL3n8Gl66ExFvpxsmwwgAd7dwX4SaSOsdaNWM=
Subject key identifier: ED:56:19:44:09:80:04:8A:EC:46:19:40:3D:18:07:19:16:76:B8:33
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DA59EF23B4E7C12A7EB1E01391D208143
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7VYZRAmABIrsRhlAPRgHGRZ2uDM.roa
Signing time: Wed 14 Feb 2024 03:17:53 +0000
ROA not before: Wed 14 Feb 2024 03:17:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a5:9e:f2:3b:4e:7c:12:a7:eb:1e:01:39:1d:20:81:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 14 03:17:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed5619440980048aec4619403d1807191676b833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:35:8f:6e:2b:1c:0c:64:23:be:1b:0f:5c:
de:5f:de:b2:f1:30:01:67:fc:20:47:b9:37:7d:6e:
b7:31:1c:f7:a3:ba:4f:f0:3e:2f:29:a0:aa:7f:55:
a2:92:1e:27:27:f7:66:94:da:39:4c:28:fa:5e:95:
32:37:a0:6e:6e:bc:55:d0:42:89:88:8c:b6:eb:77:
f1:34:60:b4:82:d6:0c:66:11:8e:77:0c:c1:cc:34:
96:1b:a8:d0:e1:3f:fa:53:23:f4:e6:ec:61:8b:dc:
c8:b0:ca:58:8d:11:c1:27:8a:97:00:e3:8d:8c:dd:
ad:38:7c:8a:d3:da:87:15:0e:4d:b7:d7:26:c5:51:
f3:37:c8:e6:73:c3:3c:47:12:16:38:20:5f:35:34:
66:b6:79:c9:ce:b4:91:a1:a4:06:2f:87:41:dd:38:
16:68:b0:29:1e:8e:89:0c:e2:1f:66:69:0f:14:af:
02:b5:0c:1f:c1:53:e7:6e:90:28:4c:72:f0:a9:c4:
85:ed:2a:18:41:67:e7:41:07:5e:69:e3:ca:69:75:
c4:0c:70:78:b7:75:0c:76:53:25:52:e7:40:52:42:
02:a7:75:ec:65:d6:cc:df:74:a7:65:94:e4:a1:c8:
1e:f2:30:e2:4e:ef:b5:a5:a2:57:a0:f7:8e:2e:2b:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:56:19:44:09:80:04:8A:EC:46:19:40:3D:18:07:19:16:76:B8:33
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7VYZRAmABIrsRhlAPRgHGRZ2uDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:15:bf:6c:e7:30:2e:b4:d6:b1:15:56:04:93:d1:cf:74:53:
a3:76:cd:5b:01:b9:99:3f:9f:83:66:b7:9b:ed:8b:74:7a:42:
24:2b:bd:40:1d:80:3c:e7:67:a2:c5:97:eb:ef:af:08:fc:31:
94:49:ab:16:b5:22:c9:37:90:ca:47:26:bc:e4:6a:2c:70:2d:
17:7d:b7:6e:72:a0:22:2e:cb:e3:3e:06:91:7d:bc:79:bb:87:
b1:c4:64:6e:3b:4e:fd:68:77:4e:13:ad:1c:c5:36:cd:08:2e:
6a:59:f0:56:aa:dc:de:72:c2:03:77:ad:71:34:f1:4e:4b:62:
17:cc:4a:79:40:89:cf:dd:6a:27:da:f0:a2:b2:bf:b0:ce:37:
02:3e:b5:03:78:17:3d:0e:48:8a:7f:b9:7f:c2:33:a6:58:08:
18:06:3f:63:de:60:98:72:49:74:44:8c:c0:b5:90:28:75:c5:
03:a8:3b:5a:7a:07:f7:04:82:3f:00:84:80:df:4e:55:bb:e4:
37:76:ea:b9:e3:c9:8f:7f:93:4b:3f:a9:cb:f5:bb:eb:1a:78:
52:13:9b:26:bb:02:84:dc:df:b1:cd:d4:43:9f:18:19:1d:19:
ce:51:15:82:a4:d5:e2:69:df:dc:c6:4a:4f:64:98:35:ca:7d:
14:8c:3a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org