Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8fcO--o-1tJiUU5Of0NuO3AKEyg.roa
File: 8fcO--o-1tJiUU5Of0NuO3AKEyg.roa (raw, json)
Hash identifier: YXze1SIH9Q+FxYMK1ACfY1knSr8ix89h0dBNSTPj+gA=
Subject key identifier: F1:F7:0E:FB:EA:3E:D6:D2:62:51:4E:4E:7F:43:6E:3B:70:0A:13:28
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D40B972CA8B8BD6FDBC131AB6F9CC7EC5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8fcO--o-1tJiUU5Of0NuO3AKEyg.roa
Signing time: Thu 25 Jan 2024 13:05:11 +0000
ROA not before: Thu 25 Jan 2024 13:05:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:40b8:93a9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:b9:72:ca:8b:8b:d6:fd:bc:13:1a:b6:f9:cc:7e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 25 13:05:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1f70efbea3ed6d262514e4e7f436e3b700a1328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:98:7d:05:48:5f:c8:c8:08:03:82:92:7b:
22:15:4f:c9:30:1d:bb:e9:14:9e:be:a1:b5:19:52:
a1:68:74:aa:20:ca:92:a3:e1:25:f2:13:25:36:35:
c2:79:3b:7f:b1:b8:f6:de:5e:75:0b:0e:b8:ee:91:
8c:b2:d3:52:82:79:0f:28:4b:16:e8:3f:39:50:80:
6c:42:a0:32:cd:15:7d:33:ed:2e:09:c2:cb:f5:82:
e2:fa:f3:ac:b6:88:11:7c:97:e9:29:57:50:87:15:
4f:ee:c1:0a:f2:d9:a5:88:5d:cd:0d:e9:cb:18:d0:
55:06:3a:c1:ad:ea:7a:25:45:b1:35:5c:ef:ac:7c:
d4:5c:78:8f:38:bf:37:1f:58:09:96:5b:32:c0:28:
92:a4:4c:41:18:45:36:70:1d:94:6d:d8:33:2b:4b:
e2:b8:99:7a:d2:68:a5:b0:d5:5f:61:87:23:5a:d0:
44:49:ca:81:80:1a:af:3d:89:d6:63:1c:af:f3:b6:
73:40:42:5a:05:40:37:19:55:13:c5:07:e1:bc:3e:
92:0b:7a:e1:e6:ca:cc:6d:82:7e:42:d0:b2:71:f6:
06:b2:68:72:62:db:7a:3a:bc:a5:18:88:75:8b:df:
59:7a:85:b0:50:85:37:9c:59:88:b8:c5:98:a1:1e:
49:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F7:0E:FB:EA:3E:D6:D2:62:51:4E:4E:7F:43:6E:3B:70:0A:13:28
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8fcO--o-1tJiUU5Of0NuO3AKEyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:0d:60:e2:5f:46:83:90:af:89:64:b0:71:d6:70:05:af:02:
d4:97:b9:db:35:a6:15:e8:59:7f:0f:46:88:d4:44:b6:30:44:
8b:a5:90:32:dd:3e:74:23:4d:70:b4:db:9c:1a:9b:27:99:72:
d9:e2:e1:42:b9:5e:3c:11:6d:9b:20:f6:b6:14:b9:a3:db:ea:
8a:42:ab:f6:34:b0:c2:69:f6:77:87:31:e1:22:5e:75:61:08:
7a:c0:1f:30:ac:89:5d:7e:aa:99:0b:10:3a:25:20:84:3b:4b:
7f:29:69:79:2d:4f:7f:d9:0f:56:a0:29:a2:5e:cb:a0:ad:2a:
0f:04:77:ad:f0:c7:59:a5:a8:29:e6:26:60:d5:ae:59:c3:29:
ed:ac:57:0d:dd:eb:1c:a5:c5:2b:e4:aa:1c:92:31:9e:b8:aa:
4c:45:e2:7c:26:06:be:41:f6:2c:a6:bf:21:12:09:55:0c:1e:
5e:f1:a3:1e:7f:3a:1c:ec:58:f7:b0:03:4e:1a:eb:3d:e7:5f:
d7:dc:81:ee:0e:62:a9:a6:33:2b:20:b4:00:26:fe:ed:4f:f4:
1c:55:90:7f:f5:ba:0e:87:c9:5c:91:32:f7:40:92:46:69:99:
0c:53:86:81:b8:6e:0d:f5:4c:a5:f5:8a:81:c1:ed:1e:03:b8:
d4:b3:d3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org