Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7ab1A_V0WrYjJ1kccK-z9UmKdho.roa
File: 7ab1A_V0WrYjJ1kccK-z9UmKdho.roa (raw, json)
Hash identifier: hIsrCBVRSc0zp6+31xVKmmgpuw59u72sSI29yljGFgw=
Subject key identifier: ED:A6:F5:03:F5:74:5A:B6:23:27:59:1C:70:AF:B3:F5:49:8A:76:1A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EDCF4624A8C6DD3D2C59E59DCCDEFCCA2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7ab1A_V0WrYjJ1kccK-z9UmKdho.roa
Signing time: Sun 14 Apr 2024 14:13:07 +0000
ROA not before: Sun 14 Apr 2024 14:13:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:dc:f4:62:4a:8c:6d:d3:d2:c5:9e:59:dc:cd:ef:cc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 14 14:13:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eda6f503f5745ab62327591c70afb3f5498a761a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c8:c8:44:a6:9a:e6:84:7d:e5:f6:70:06:f3:
e0:71:72:2c:63:de:f4:b3:60:95:96:97:e5:8c:62:
40:9a:5c:c6:bf:71:bc:a6:85:e4:af:85:81:b0:73:
57:5d:68:45:a7:fb:61:5f:51:ac:de:34:30:d1:50:
2d:59:02:25:5b:e6:e8:c4:89:f7:a9:6c:f0:1d:a5:
51:42:52:6d:e0:64:c2:81:af:be:54:90:9b:2d:2c:
b8:98:2e:dc:d5:70:c1:85:20:6b:4f:a0:bf:af:19:
2e:cd:c0:92:a6:d7:ef:a2:30:09:66:8c:cb:2c:cd:
52:46:08:27:af:0a:ef:0a:ed:ee:6b:f1:18:55:4e:
a4:66:b6:a7:5c:ef:92:14:bf:43:18:b8:2b:48:50:
62:94:0d:e7:e6:6b:90:de:7f:57:cd:9c:da:97:22:
c2:64:67:a5:fb:01:f5:19:fe:a1:ff:ee:3a:48:fd:
53:4e:6d:7d:71:0d:2a:2c:2e:68:ef:2b:a3:30:a4:
9e:40:2f:37:5d:99:14:f0:9b:1d:43:78:c6:eb:e4:
db:49:d2:f2:dc:f7:71:b5:98:43:bb:7d:ff:c8:45:
a1:77:90:ca:48:d9:b4:50:39:17:5c:e8:86:7f:53:
11:81:91:68:89:01:48:66:8d:8c:8a:dc:12:7e:a5:
96:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A6:F5:03:F5:74:5A:B6:23:27:59:1C:70:AF:B3:F5:49:8A:76:1A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7ab1A_V0WrYjJ1kccK-z9UmKdho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:d5:bb:9a:1b:04:ad:24:49:19:2c:9b:c0:1c:02:32:35:a6:
90:04:d7:34:e9:3c:3e:53:7a:ad:14:42:6f:09:8c:be:16:f5:
65:2f:78:97:c4:f2:2b:57:70:cc:04:6c:06:24:20:55:7d:9e:
0f:4e:76:58:d6:43:89:04:34:5f:66:d6:8c:1c:4e:ff:c9:a0:
62:53:01:86:3e:e5:3c:37:41:ea:15:cb:59:00:c5:9b:39:61:
42:52:80:da:32:3d:fa:bc:fd:e5:c7:82:ee:7e:71:e7:36:28:
26:e0:4b:85:86:5f:4e:7d:b3:98:b6:88:86:63:11:ea:81:eb:
11:6c:ff:cc:e9:dc:e1:3d:4a:61:c8:fc:65:dd:57:3f:e9:f7:
ba:d1:b4:3a:c1:ee:95:18:0c:e9:5f:32:00:4b:62:21:aa:95:
0c:12:7d:74:ed:43:67:82:1f:99:87:64:1a:a3:71:01:ba:57:
1e:e0:79:f8:2d:ae:74:f0:e0:e3:20:62:9f:fd:db:fe:e1:d1:
dc:f0:d6:ad:ee:af:ca:d0:ed:db:3f:55:17:c5:7b:53:44:98:
dc:57:48:26:85:04:73:18:a2:82:b6:a6:a7:34:f6:0a:ba:fa:
45:e2:49:d7:b9:3a:3f:e0:e1:0d:86:10:b8:bf:c8:67:ab:cb:
2d:39:e1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org