Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AT6_-Sthcw2Idnlq2aJDzZacYAQ.roa
File: AT6_-Sthcw2Idnlq2aJDzZacYAQ.roa (raw, json)
Hash identifier: 0VlueHYwy1hvwA84GXtvCVo3nJOiVmgj6EDOeTEtnZY=
Subject key identifier: 01:3E:BF:F9:2B:61:73:0D:88:76:79:6A:D9:A2:43:CD:96:9C:60:04
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E788634AE42613734BEE9F98ECA71B1AA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AT6_-Sthcw2Idnlq2aJDzZacYAQ.roa
Signing time: Tue 26 Mar 2024 02:10:44 +0000
ROA not before: Tue 26 Mar 2024 02:10:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:78:86:34:ae:42:61:37:34:be:e9:f9:8e:ca:71:b1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 26 02:10:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=013ebff92b61730d8876796ad9a243cd969c6004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:31:f6:aa:2f:64:30:08:52:cc:46:db:93:e5:
b2:a5:53:08:7c:14:49:43:9b:6c:8c:cb:72:d7:13:
1b:f3:68:95:d8:61:51:4a:bc:5c:70:24:3b:77:22:
59:b4:af:37:33:0e:15:a0:8d:b3:b6:3b:35:56:f9:
f7:50:fd:70:b6:ca:a1:d0:b7:09:69:8e:c4:c1:e2:
0a:7e:b7:97:cd:78:92:e4:59:31:26:8e:e3:70:63:
ea:97:a6:5e:14:19:44:5e:3d:52:bb:77:40:d9:2a:
35:41:6c:33:27:cb:04:16:94:e6:60:5c:9b:f3:52:
57:b2:90:70:7d:61:25:9f:50:e5:b3:1e:f4:3a:2a:
c6:b3:b4:11:78:66:14:da:87:19:66:df:9d:c9:c1:
da:0a:e3:e0:0b:08:35:28:f5:37:6a:a8:01:93:ca:
44:37:25:c2:58:99:33:53:4e:e7:ab:e7:0d:41:13:
6c:ee:37:22:cf:53:98:b1:24:c7:d5:1b:44:b5:8e:
d7:44:5b:2d:81:69:b5:b1:1e:21:0f:48:0f:fe:13:
eb:4f:00:ff:db:b3:43:e3:73:4a:dd:4a:6b:4e:89:
19:ab:bb:75:51:9b:dd:c2:34:e5:8c:1d:f3:b9:20:
be:16:ea:ad:14:2b:17:42:f3:bb:60:30:d7:0b:2f:
0b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3E:BF:F9:2B:61:73:0D:88:76:79:6A:D9:A2:43:CD:96:9C:60:04
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AT6_-Sthcw2Idnlq2aJDzZacYAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:d4:39:76:26:0b:e7:17:1d:39:20:06:f7:c7:8b:c7:e1:95:
15:1e:04:f0:c5:81:d7:73:ac:34:9a:9e:e7:d4:20:6d:f5:3c:
1b:1d:7a:9f:b1:e4:5b:61:67:db:a0:de:8b:bb:03:d9:8f:78:
96:6f:7e:63:b1:c1:ae:c1:46:33:7b:7d:7c:5a:f4:9a:08:78:
0d:70:b4:72:db:03:60:de:1c:8c:2d:15:28:a4:e9:6a:a5:ac:
f6:4b:e2:fc:9a:82:b5:e7:e4:8c:38:de:4e:65:33:cc:3e:9c:
09:56:33:87:59:17:c9:75:39:25:a7:62:0d:ec:54:96:7c:e6:
f3:47:83:61:8a:2b:08:c9:18:c6:5a:f6:09:be:3e:57:9a:f9:
e8:c0:1b:87:dd:1c:85:5d:c0:45:c2:ed:48:c9:12:e5:ea:90:
19:11:9a:6b:89:3e:81:8f:b0:05:9f:5d:44:eb:92:2f:04:12:
3b:a4:70:a7:7d:47:0d:96:cc:e6:10:8b:06:33:20:9e:64:42:
2b:f3:a9:20:cc:8a:9d:f8:b4:08:00:98:f3:96:fe:81:52:a7:
d5:df:6d:31:96:99:2c:b4:00:65:7a:8e:dc:7f:fc:87:29:86:
e4:e1:ed:24:5d:9e:25:7c:a8:b8:8f:43:f7:13:f2:dd:3b:b0:
72:30:d2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org