Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9mMplJ2C8KIx_Wm0aEKqS2UmNSk.roa
File: 9mMplJ2C8KIx_Wm0aEKqS2UmNSk.roa (raw, json)
Hash identifier: TDynp1BOXTUEuJJ+kdDzt23hi8vx+orUR6YZk9BYyPE=
Subject key identifier: F6:63:29:94:9D:82:F0:A2:31:FD:69:B4:68:42:AA:4B:65:26:35:29
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D6EAD20207BB5498150A24701C9D4C1E7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9mMplJ2C8KIx_Wm0aEKqS2UmNSk.roa
Signing time: Sat 03 Feb 2024 11:14:16 +0000
ROA not before: Sat 03 Feb 2024 11:14:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6e:ad:20:20:7b:b5:49:81:50:a2:47:01:c9:d4:c1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 3 11:14:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f66329949d82f0a231fd69b46842aa4b65263529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:20:9b:5a:7c:7e:e0:f5:6f:2c:11:68:24:9d:
75:69:ba:03:3b:f2:8a:f2:19:e8:60:3f:cb:c5:2b:
53:de:72:12:e1:65:3a:24:af:98:4d:31:19:8b:56:
d1:eb:04:37:35:c2:cf:19:89:95:bc:e3:f9:09:19:
f6:4d:a2:4a:a5:6c:0e:85:ac:42:33:34:87:73:4a:
7c:eb:61:46:09:d3:27:f7:90:eb:c9:38:d3:03:fb:
0a:93:2c:e2:c2:f9:e3:cf:64:fe:47:75:f2:ae:d0:
67:34:87:5c:10:2c:f5:a2:7e:57:7a:91:aa:b7:c6:
74:fb:48:a3:59:3f:11:98:1e:71:00:f8:84:6c:14:
3c:ba:fd:2f:91:84:ea:88:cb:4e:c9:2a:f3:9e:cb:
e8:df:82:bb:cf:31:54:96:eb:93:62:7a:12:4b:e0:
c2:6e:4e:ca:be:e5:23:6e:7f:a5:65:75:9e:dd:66:
09:b0:06:b9:19:1e:e7:4e:29:ab:17:42:62:b2:d4:
9a:aa:8a:09:77:1e:a7:bf:39:3c:e5:6a:11:57:0e:
11:52:2a:7c:2c:a9:09:b4:1e:fd:99:64:ed:64:d2:
ed:40:d1:d5:46:a9:d5:3a:b6:2b:98:27:90:19:04:
90:e2:64:9d:7b:b6:85:eb:b1:b4:92:f2:fa:e5:d7:
c2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:63:29:94:9D:82:F0:A2:31:FD:69:B4:68:42:AA:4B:65:26:35:29
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9mMplJ2C8KIx_Wm0aEKqS2UmNSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:d0:6b:3f:ae:1a:cb:a5:86:5b:7f:07:b7:ef:a1:b4:7b:f1:
6b:9d:01:c1:57:d8:12:f7:c6:ed:1b:d0:e4:29:ef:94:e3:dd:
05:6b:93:4c:db:eb:b1:24:25:8b:74:68:40:df:40:47:3f:29:
94:7c:1e:92:af:4f:ea:42:0b:82:5c:15:0f:d7:07:89:87:7a:
cf:bf:98:24:e2:bd:69:35:39:c6:f3:66:d4:13:8e:bf:87:a2:
79:d1:a1:fd:19:7b:99:b8:77:95:80:cb:0c:3d:7e:e6:6a:5f:
bc:64:1e:a9:f6:eb:fa:fc:bd:54:77:44:1d:9e:c9:eb:54:e7:
5a:47:95:20:51:a7:6d:ea:18:a8:16:cf:94:95:33:11:55:01:
19:6e:c2:97:a0:3a:17:f9:68:49:3c:14:c8:3e:84:ad:35:49:
cd:b7:28:f9:f1:09:3a:b7:5d:bc:83:f1:3c:10:50:3d:40:09:
3a:03:32:7a:c5:fc:f9:01:7f:f7:c2:75:a1:be:b7:b5:3e:fe:
98:f9:9e:f5:c6:a8:4c:6d:1a:41:dc:ea:27:40:cc:f3:31:d4:
e3:e4:b3:39:54:bd:95:eb:7d:53:31:6c:4e:61:c7:2d:f8:07:
df:4a:dd:d7:12:71:38:97:a1:f5:b9:1c:ae:d8:e8:7c:4f:19:
c5:41:e2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org