Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9Wd2G_JPZlYmka959qiDpqj02NA.roa
File: 9Wd2G_JPZlYmka959qiDpqj02NA.roa (raw, json)
Hash identifier: AsT+ue11XO+22BhFjxMXFVjNaff3b5Txi/WZyla404o=
Subject key identifier: F5:67:76:1B:F2:4F:66:56:26:91:AF:79:F6:A8:83:A6:A8:F4:D8:D0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CBC8B5A74A7D74D46542F3216523BC1B8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9Wd2G_JPZlYmka959qiDpqj02NA.roa
Signing time: Sat 30 Dec 2023 21:04:58 +0000
ROA not before: Sat 30 Dec 2023 21:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:bc8a:c462/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:bc:8b:5a:74:a7:d7:4d:46:54:2f:32:16:52:3b:c1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 30 21:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f567761bf24f66562691af79f6a883a6a8f4d8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ef:c1:6c:7d:e0:4e:e1:12:87:18:75:a7:64:
4f:f1:78:f1:e9:96:01:21:8b:8d:c9:3d:bd:54:e8:
08:3d:2a:57:02:09:9e:dd:b8:aa:5c:cc:3b:7e:86:
91:0f:f1:2d:6c:c2:d2:53:7d:2b:d5:4f:fd:b9:47:
40:81:b2:69:c6:90:5b:46:2a:52:bb:65:31:a6:39:
f0:de:0e:5e:12:a2:d8:03:50:01:95:c5:f6:05:76:
62:e8:1e:5e:64:f0:9b:1e:16:24:a6:4d:33:68:17:
93:05:a4:e4:67:0d:a9:03:ee:e6:6d:db:cd:c5:ba:
92:f2:b8:f2:a4:92:fb:36:fd:70:02:8c:bc:c3:a5:
38:bc:06:a2:20:87:cd:2f:ed:04:78:38:d7:fe:1d:
0e:bc:bf:40:b5:04:0e:b5:bc:50:7b:b3:20:55:bf:
63:e1:ee:54:ee:fd:47:57:fe:70:58:86:f7:9f:a8:
6a:1e:5b:2d:ac:70:6b:6f:bb:e0:b3:78:d7:42:ff:
89:7b:9c:cd:4e:35:0e:ce:83:35:20:2c:92:94:61:
70:be:71:17:44:47:e7:7e:81:fe:32:5d:5c:2d:c3:
23:4b:9f:14:e2:b8:78:40:7a:99:54:7d:30:53:b6:
19:6e:81:e0:b8:79:48:1d:0f:ed:23:aa:c1:c1:1c:
9d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:67:76:1B:F2:4F:66:56:26:91:AF:79:F6:A8:83:A6:A8:F4:D8:D0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9Wd2G_JPZlYmka959qiDpqj02NA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:4f:51:74:62:59:b6:e1:a7:47:e9:dd:02:b9:34:a4:a1:e0:
cc:86:7f:46:d3:a9:19:64:22:28:e8:19:4d:cc:e9:e2:1b:c5:
d8:9e:ee:96:de:d2:4e:91:6e:51:22:69:69:5b:ad:46:c2:81:
8c:0f:c0:79:e3:e2:d9:b6:7b:42:4c:46:7a:17:e1:27:b9:bd:
0d:ea:09:3e:d9:6b:be:eb:e7:ed:2b:44:d3:f6:6f:73:7e:cb:
f6:ce:56:c8:47:aa:87:25:bb:6a:aa:a5:6a:8e:ff:6d:7f:ab:
fb:13:69:54:28:72:b2:01:25:4c:ad:4c:90:32:3a:57:45:56:
30:22:86:a9:a1:2f:95:d3:dd:e3:57:c4:ac:cc:ca:02:43:cf:
e4:2f:f0:d4:0e:20:df:c5:8a:0e:8e:98:fe:35:17:82:e7:87:
cd:6c:bf:78:e3:7e:25:8c:47:2e:54:e7:12:55:e6:f3:6f:d7:
fa:29:11:0c:8d:16:1e:2a:71:9b:ca:7a:ca:a5:40:36:1f:28:
a2:9c:ef:ad:71:34:14:58:e6:4e:aa:44:c6:61:7a:6b:2a:58:
48:c8:5d:6a:df:09:37:74:c1:64:7f:ff:1d:ae:55:12:0a:f1:
97:98:50:31:76:5d:7e:91:8f:f3:cc:35:54:9e:b6:db:1f:46:
5b:0f:9a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org