Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8aLLcCjDggK2y35vG_BxTPoSEzU.roa
File: 8aLLcCjDggK2y35vG_BxTPoSEzU.roa (raw, json)
Hash identifier: GEZhqCPVY2bH1hxDFeOm6KmvCPa6+EUWbZcQZXTo6LY=
Subject key identifier: F1:A2:CB:70:28:C3:82:02:B6:CB:7E:6F:1B:F0:71:4C:FA:12:13:35
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CEFA50E6C48240953502A6DE977CBC246
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8aLLcCjDggK2y35vG_BxTPoSEzU.roa
Signing time: Tue 09 Jan 2024 19:13:40 +0000
ROA not before: Tue 09 Jan 2024 19:13:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ef:a5:0e:6c:48:24:09:53:50:2a:6d:e9:77:cb:c2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 9 19:13:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1a2cb7028c38202b6cb7e6f1bf0714cfa121335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9c:48:fc:55:cd:f1:da:79:8d:5c:e4:ca:e2:
b4:25:49:cf:84:16:89:ed:36:5c:18:fd:d2:49:5c:
f6:c3:7e:01:58:9c:44:5f:ec:56:1d:c9:14:08:41:
39:b8:56:a3:9b:93:71:2b:72:c6:c5:82:15:5e:b6:
51:9b:90:e6:f1:23:18:bd:ad:1d:0d:d8:bc:8f:72:
23:18:e9:a4:dc:55:11:b7:8a:a7:b4:47:8e:44:c6:
6e:a9:35:fc:99:07:d3:d9:1e:ef:18:99:8b:08:e8:
e0:d2:95:b7:9c:7f:4b:47:02:50:19:f9:70:62:ad:
b5:7e:5b:86:15:f1:32:c0:fb:70:4a:3a:52:49:1e:
e7:8d:ff:b9:1d:15:92:cd:8d:e3:a6:93:bd:2e:36:
ba:e7:47:17:a6:6b:78:e2:14:fd:c6:eb:7b:98:e0:
40:46:25:d5:c4:0f:bb:43:e8:59:ac:74:74:2d:3a:
f3:56:e9:cc:55:1e:e0:ed:c0:70:a0:45:60:0d:95:
20:e8:d8:e6:ed:a2:c8:54:8b:72:56:62:d2:a2:32:
ac:e7:c0:d1:4f:36:76:d0:9e:cf:41:be:f1:80:ad:
8b:27:1c:c0:42:6c:81:ea:bb:86:0c:d1:19:0d:d9:
9f:24:d8:a1:6a:29:3f:79:ea:c0:94:3a:80:2e:9f:
5d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A2:CB:70:28:C3:82:02:B6:CB:7E:6F:1B:F0:71:4C:FA:12:13:35
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8aLLcCjDggK2y35vG_BxTPoSEzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:ba:a2:ab:30:f5:95:f0:14:52:53:37:f4:b9:5d:93:7e:e8:
4b:92:b9:b7:14:91:0b:b2:6e:98:b3:6f:3b:be:6a:f7:42:d7:
96:99:af:1e:ac:6f:e2:3c:cb:e9:f2:c6:e3:40:6c:31:7a:64:
b8:91:2a:41:8b:a2:a5:49:d6:35:6d:59:58:ae:dc:58:5c:98:
da:ae:5d:b5:33:10:20:00:96:73:85:b3:4e:22:06:40:1f:05:
0d:a8:a6:e0:ab:71:4f:cc:ff:4e:50:21:39:e0:3d:3e:1b:03:
fa:d7:ec:c2:30:90:51:c7:3c:31:3d:ac:cf:42:c2:18:6a:62:
ee:1b:88:75:e3:33:55:00:ba:94:e4:cf:0a:a8:e2:d5:1c:48:
5a:be:87:1c:36:65:1d:af:70:e4:30:b6:bc:d4:65:54:4c:b4:
2c:9e:ab:62:c5:5c:bd:23:45:29:6e:7f:db:61:41:e2:19:3d:
e4:00:27:da:87:e1:63:7b:a1:aa:35:c9:54:67:8a:ac:68:8f:
4a:cd:ee:c3:50:4f:f5:b3:32:cf:6d:e3:05:c5:38:aa:25:d2:
fc:a6:7b:40:7a:e7:e0:6f:fc:3a:85:80:01:b3:3b:25:2f:fb:
84:4d:4c:c5:14:53:02:48:36:35:47:a8:aa:59:a1:53:be:25:
36:a9:dc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org