Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/81z1QqH2ij25VgMMyHbYBddYDmo.roa
File: 81z1QqH2ij25VgMMyHbYBddYDmo.roa (raw, json)
Hash identifier: yx/NcLyWi0lW4DX2oGKlDjFIXZO+T58fr4+NyODqM0w=
Subject key identifier: F3:5C:F5:42:A1:F6:8A:3D:B9:56:03:0C:C8:76:D8:05:D7:58:0E:6A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EAB98FDC543AA6C88AFA159EF50E5E8D4
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/81z1QqH2ij25VgMMyHbYBddYDmo.roa
Signing time: Fri 05 Apr 2024 00:11:54 +0000
ROA not before: Fri 05 Apr 2024 00:11:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ab:98:fd:c5:43:aa:6c:88:af:a1:59:ef:50:e5:e8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 5 00:11:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f35cf542a1f68a3db956030cc876d805d7580e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:41:b0:09:ab:2a:a6:7d:af:4e:09:e3:49:79:
61:39:81:20:cd:1f:da:3c:3f:af:89:6d:07:c7:30:
61:0b:45:db:31:be:c9:65:da:04:3f:c0:90:6f:2a:
56:c6:b1:6f:66:47:52:4c:1e:5e:27:9f:5b:40:65:
6e:04:74:71:b3:38:94:69:30:75:fd:99:e5:74:5e:
e0:5f:82:c4:b1:6a:14:99:04:0f:c2:8a:67:ff:73:
14:38:5f:26:b2:48:35:2d:92:d8:5a:a8:43:1c:94:
56:e7:67:75:02:e9:a5:7a:b2:2e:ed:ef:9d:0f:cd:
cf:22:9c:5d:2d:51:fa:19:9d:88:10:86:e2:fb:f9:
6c:6e:7a:6f:cd:50:7d:cf:7b:a7:33:81:b7:78:3f:
81:07:a4:c3:a4:77:0e:1e:61:ac:01:67:27:9c:a4:
16:97:8c:74:c7:d0:b1:36:a8:d5:90:a5:a7:f3:72:
e4:b8:73:79:01:cf:71:f8:82:a3:e7:82:e8:b7:67:
e8:76:92:ba:00:4d:9b:c6:87:00:29:13:39:f7:e6:
7f:fa:3e:2f:f8:08:fe:bb:16:3e:78:e4:af:07:83:
70:53:43:78:6b:7e:a9:7f:65:0d:7c:e6:2a:33:c3:
78:47:61:8e:0d:ae:5c:2f:85:6e:ee:6a:c2:de:4a:
ba:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5C:F5:42:A1:F6:8A:3D:B9:56:03:0C:C8:76:D8:05:D7:58:0E:6A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/81z1QqH2ij25VgMMyHbYBddYDmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:fd:09:07:85:3f:68:39:48:c4:aa:fb:b2:9a:56:50:46:cd:
e3:17:6c:70:ec:21:0e:46:98:d5:89:cf:6d:1d:cc:3a:fa:85:
af:fe:93:db:99:44:5c:0a:0e:6c:d7:8c:12:f3:1e:ba:26:a7:
45:fb:de:d1:f9:21:f6:f7:a1:ae:ef:4b:52:b2:54:ea:d0:ae:
ec:95:b4:db:07:7c:d8:b7:98:70:e4:7b:96:1a:dd:8b:61:fb:
26:99:5a:75:e8:95:e0:f6:70:08:33:32:8f:b9:48:4b:b1:d5:
5f:d2:6a:3c:c3:7a:b7:f7:fb:e5:a6:37:53:0d:9e:77:15:16:
8b:0d:6a:34:6f:6c:fd:1c:5b:cd:91:e6:98:56:4c:2e:0e:fd:
19:13:e0:93:6f:7c:b0:80:ca:2c:39:b9:81:bd:0a:d1:57:0e:
9b:ea:26:00:43:40:c5:c4:30:bc:bb:ba:95:e2:dc:87:8d:ae:
f6:c7:f2:91:38:05:77:a2:e9:1f:40:dd:e4:c1:f0:94:2a:70:
45:ee:91:24:3b:6e:af:3b:ef:18:ba:65:30:fa:0f:0f:91:ef:
76:5a:9d:f9:22:db:fa:1a:f8:36:7a:84:3e:d6:0e:7c:a8:af:
e3:8e:36:a0:35:0f:87:a7:16:e6:f3:2b:6b:b9:15:84:5e:2e:
bd:02:6d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org