Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9_aBzMCZjCpBqDnveKYSReGF_bo.roa
File: 9_aBzMCZjCpBqDnveKYSReGF_bo.roa (raw, json)
Hash identifier: aThjd578UO72iPv3rQtdE27zI7JwcAEanQnf3rnQ1xs=
Subject key identifier: F7:F6:81:CC:C0:99:8C:2A:41:A8:39:EF:78:A6:12:45:E1:85:FD:BA
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E314ABCCA672425B2A5609AD9E7A25C17
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9_aBzMCZjCpBqDnveKYSReGF_bo.roa
Signing time: Tue 12 Mar 2024 06:12:45 +0000
ROA not before: Tue 12 Mar 2024 06:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:31:4a:bc:ca:67:24:25:b2:a5:60:9a:d9:e7:a2:5c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 12 06:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7f681ccc0998c2a41a839ef78a61245e185fdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:56:9c:08:24:e8:72:16:3d:20:20:70:b9:47:
56:d0:6b:c3:59:08:49:81:e7:0c:24:2b:06:60:b5:
75:af:f4:50:2f:b7:9e:b9:3a:3c:c2:82:01:6f:ca:
84:4d:60:ff:5c:bc:43:88:18:bf:5b:cf:aa:8c:85:
8e:72:16:bd:21:b0:a8:86:13:c0:3a:35:0d:91:a8:
19:35:b1:7e:42:76:80:33:d7:f2:a4:38:1e:31:6d:
c9:60:de:a2:5c:9a:e9:f6:27:97:e2:be:0a:e0:50:
52:56:57:f1:68:10:f8:a0:7d:24:64:81:2f:3f:06:
b5:15:98:65:46:bb:cc:cc:b6:f1:45:40:33:69:a3:
1e:ae:15:1f:9d:6c:77:1c:2e:ef:9a:53:15:b0:91:
35:92:d7:c0:e3:30:e3:a8:5c:85:81:7f:b2:b9:55:
a7:e6:74:bc:e8:14:eb:2d:58:85:6f:e9:56:cd:25:
c0:91:67:03:bf:ad:77:d6:0e:71:ba:1e:bb:a3:e3:
e2:3c:59:d6:73:29:2b:f6:f2:87:23:bb:ee:a8:d2:
7e:3a:d1:6c:f8:2a:5a:46:14:fa:5d:5c:47:ab:f0:
15:97:dc:db:5d:10:41:8b:bb:f2:ed:2f:41:79:48:
85:c3:0d:42:6e:e9:f2:0e:65:81:e7:2b:05:31:e2:
2c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F6:81:CC:C0:99:8C:2A:41:A8:39:EF:78:A6:12:45:E1:85:FD:BA
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9_aBzMCZjCpBqDnveKYSReGF_bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:2d:71:4d:76:8c:a0:e6:26:a7:e4:b3:e6:23:ae:bf:c0:e6:
5a:14:e3:ba:b3:a7:f5:6a:d1:6e:78:2f:e7:c4:c7:96:06:82:
4b:8c:c1:53:17:c4:df:fe:99:42:38:20:a1:8f:7b:f5:35:6b:
ab:c7:a3:32:0c:3c:ef:6c:be:25:e0:93:5f:d1:a0:60:b5:bd:
2c:43:9b:09:47:c4:ca:2c:bd:ff:75:83:fd:23:e7:ca:dd:1f:
6f:27:d8:dd:cb:80:26:7c:3e:2a:1a:33:4a:b6:4f:e1:2c:f6:
d1:66:6b:35:a6:67:5e:95:f0:72:df:35:aa:0f:e8:32:65:3e:
74:ed:cc:21:fd:99:62:1d:6e:e0:2e:7f:55:a6:87:fc:26:ca:
92:9b:9a:c2:1f:b7:39:37:43:8d:a2:99:69:0a:b8:7b:48:8d:
37:56:24:a1:db:aa:a8:cf:3d:2c:b0:f5:2c:84:72:b1:54:7c:
15:83:57:af:a9:a8:96:17:3d:64:c7:26:06:e4:8d:ba:e7:16:
e5:31:e4:f6:33:20:2f:1c:9b:6c:63:55:99:cd:1a:ad:2f:5e:
08:72:9a:59:e4:36:77:85:94:93:02:aa:f3:f5:10:f7:78:18:
b1:bd:2d:ee:b8:9e:04:a0:15:0a:02:a7:0f:41:a5:9c:b6:3a:
f1:68:c1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org