Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7dmBhOhGQLz_5vYk6gK0LrJAhv8.roa
File: 7dmBhOhGQLz_5vYk6gK0LrJAhv8.roa (raw, json)
Hash identifier: JuiaRlGFxMIr0W2Ov5PsPaKYQ1n7j1S/aSxhiG9BGck=
Subject key identifier: ED:D9:81:84:E8:46:40:BC:FF:E6:F6:24:EA:02:B4:2E:B2:40:86:FF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EA3A777780C7EFCF783BD0FBA7B3E17F2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7dmBhOhGQLz_5vYk6gK0LrJAhv8.roa
Signing time: Wed 03 Apr 2024 11:10:45 +0000
ROA not before: Wed 03 Apr 2024 11:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:a7:77:78:0c:7e:fc:f7:83:bd:0f:ba:7b:3e:17:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 3 11:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edd98184e84640bcffe6f624ea02b42eb24086ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:0e:a5:36:7e:f4:31:44:f7:e4:56:27:d7:
0d:49:c2:62:48:bf:61:0b:c2:dd:b3:78:ed:70:e1:
f9:e8:90:9e:99:2a:3b:36:1a:03:6a:29:3d:7f:7b:
e2:ed:75:c2:43:f9:c8:64:a9:52:51:95:74:77:15:
89:16:46:9b:2c:3b:d1:4b:84:7e:47:14:35:6f:c7:
b7:aa:2a:db:9e:0a:7a:89:c2:e2:dc:5f:bc:90:62:
b1:10:ab:55:c5:15:84:73:48:78:2b:f0:a1:a5:e0:
b4:f9:3f:af:71:61:cb:5e:a8:2d:18:17:31:64:30:
be:24:d5:ab:c0:bd:d5:ee:58:6d:e8:f6:a7:f2:49:
1f:b4:be:a1:17:11:fc:25:13:c4:e9:e9:e3:8f:f2:
0a:cc:3e:cb:db:f4:05:48:52:06:22:24:13:d6:5c:
31:78:47:e6:e9:a8:98:e1:2d:dd:86:60:12:27:bf:
d3:6c:30:8a:71:e1:d1:ba:e7:37:b4:c8:67:4a:64:
42:01:7f:fc:6c:9e:59:e9:09:39:bd:60:cf:cb:61:
1e:5a:ec:7b:77:fa:ee:85:5b:9d:a3:19:e0:8b:a4:
30:d3:9a:27:67:b0:f0:ef:4e:a9:08:0b:02:4e:c3:
0f:93:2d:59:1d:a1:f3:b0:58:dd:8e:0c:25:8c:eb:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D9:81:84:E8:46:40:BC:FF:E6:F6:24:EA:02:B4:2E:B2:40:86:FF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7dmBhOhGQLz_5vYk6gK0LrJAhv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:ce:46:7c:84:15:ef:a5:56:80:fd:b3:6c:96:52:cd:8a:51:
2b:26:74:1f:3c:ee:bb:ac:0d:c9:e1:f3:42:70:8b:b6:cb:ba:
df:52:60:3c:ee:d8:a7:fa:cc:05:86:4f:bb:d5:4b:1c:95:66:
f0:3a:3f:f8:f0:89:ff:ee:69:10:01:93:ba:6e:a1:cb:67:62:
50:b4:31:78:38:5a:c4:15:86:dc:2a:92:6d:1b:f4:6a:20:26:
1d:47:c5:80:14:9e:40:77:9c:e9:3d:56:80:40:af:f2:16:1a:
d1:d8:09:15:4a:49:97:ec:a8:24:63:65:be:eb:f3:80:0e:8c:
6c:ce:31:2b:3e:ef:21:d8:60:a0:57:ec:44:b5:ad:b9:6d:a2:
7c:a2:73:7c:41:07:3c:44:1c:f7:e5:8f:38:c4:5e:c0:b6:c3:
34:50:f8:71:a8:33:be:e6:e7:01:bd:61:f5:87:ba:02:a1:ca:
49:7a:bb:47:0a:51:d8:64:b3:40:a6:c8:cf:07:71:db:be:1a:
3d:f0:4d:fd:59:e7:a7:61:45:a6:88:ee:b0:64:f8:bb:79:92:
ef:b3:36:75:69:67:ce:24:64:56:f8:e2:50:bb:63:1b:b2:76:
23:42:53:eb:35:b9:50:d7:1b:ec:ba:d3:51:39:52:73:c5:19:
43:35:1b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org