Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/A395sbpMr5o3Sdwt5p5VeRCjUxA.roa
File: A395sbpMr5o3Sdwt5p5VeRCjUxA.roa (raw, json)
Hash identifier: RHPsIVdpKxeVljGB7i/pVddMMwnQYWBV/qxvYpRbCj4=
Subject key identifier: 03:7F:79:B1:BA:4C:AF:9A:37:49:DC:2D:E6:9E:55:79:10:A3:53:10
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D2C98DBDF1FD1F0A5DF8DE4C376B498C5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/A395sbpMr5o3Sdwt5p5VeRCjUxA.roa
Signing time: Sun 21 Jan 2024 15:17:11 +0000
ROA not before: Sun 21 Jan 2024 15:17:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2c:98:db:df:1f:d1:f0:a5:df:8d:e4:c3:76:b4:98:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 21 15:17:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=037f79b1ba4caf9a3749dc2de69e557910a35310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:da:da:07:d9:1d:5d:c1:dd:96:43:47:dc:
24:af:5e:b9:55:b1:02:23:5b:ae:b9:d4:79:83:22:
40:29:57:0e:36:70:e3:9b:d8:92:8b:53:f5:79:f6:
af:74:ff:26:b7:5a:bd:b7:88:68:72:cc:40:7d:80:
27:97:b8:aa:4a:e2:87:8b:48:3e:86:90:09:37:90:
bb:0b:88:a2:25:24:99:a7:33:8f:6a:84:df:f4:af:
82:63:85:cb:2e:ae:74:49:7e:f4:13:e5:bb:21:72:
15:0e:a5:a7:aa:c7:31:5c:ba:bc:1d:14:d8:24:0a:
d1:6d:a7:c4:1a:c3:4f:44:51:12:77:a6:5d:0f:c9:
1e:09:d0:c2:33:3e:a6:4a:15:75:35:c7:e4:4a:23:
a4:6a:f6:9e:aa:77:84:e7:83:39:fb:90:5f:dc:b6:
45:57:c3:ea:82:62:39:80:1e:f3:f8:95:fb:64:f5:
70:c2:34:dd:fd:64:f5:30:68:c6:0e:1a:bf:32:40:
51:66:00:ec:64:ef:54:0e:18:c9:bd:5c:dc:b9:2b:
ca:94:a6:7d:e6:d3:bd:a1:93:9f:37:fe:ac:80:63:
7b:ca:5e:bc:46:be:0c:de:61:67:e9:03:a0:49:41:
32:9a:36:c5:27:23:ce:29:43:df:2e:b1:60:1a:da:
88:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7F:79:B1:BA:4C:AF:9A:37:49:DC:2D:E6:9E:55:79:10:A3:53:10
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/A395sbpMr5o3Sdwt5p5VeRCjUxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:8e:89:83:49:77:31:6e:11:75:5b:16:0d:e3:5d:dd:35:14:
0e:3b:6a:88:9b:99:85:91:ab:8f:1a:57:9d:86:75:3f:53:1e:
06:1d:b0:e0:aa:c2:5d:4d:e8:70:7d:79:b7:a6:85:9e:30:01:
2e:74:55:eb:56:6d:e8:c1:28:9b:34:fb:7b:90:e3:ae:07:c4:
0c:5b:ab:52:97:30:ca:7a:0c:a1:e1:83:ea:08:b0:5b:b3:01:
e0:3c:f1:2a:ff:25:69:02:a8:a7:c1:c7:63:d1:d9:f2:d6:5e:
35:80:5a:da:5f:16:08:c4:be:eb:28:e6:0d:de:ce:0d:c4:66:
13:db:f0:db:cd:d3:13:86:51:6d:8f:c7:68:96:8a:85:5b:86:
5a:d3:1e:39:8d:26:b2:5a:3c:78:6b:18:e9:1e:cc:21:4b:90:
2b:68:29:91:d7:3a:e0:1a:ea:bf:af:4a:5f:03:d3:a2:ab:44:
27:f6:82:8a:2d:7e:52:73:de:ec:e5:fb:f3:99:32:72:2a:c8:
7f:20:e4:91:c1:d1:4e:c2:23:07:7c:1c:90:34:31:c2:db:cb:
83:8a:4e:16:8b:b6:b3:69:92:88:ec:37:4c:e7:d4:27:8d:43:
75:ea:ee:1b:39:a3:ff:68:30:2e:e5:65:a6:a4:1b:a5:2c:03:
bf:20:48:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org