Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AnH94Lbzu62zOvWj40n9hg7Zwy8.roa
File: AnH94Lbzu62zOvWj40n9hg7Zwy8.roa (raw, json)
Hash identifier: 5udV9IHrGQiArJpn35h10P8fe4hwCxLxhUPTecHp+AA=
Subject key identifier: 02:71:FD:E0:B6:F3:BB:AD:B3:3A:F5:A3:E3:49:FD:86:0E:D9:C3:2F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E5DAE439969425F025AB6B8643FE50DB2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AnH94Lbzu62zOvWj40n9hg7Zwy8.roa
Signing time: Wed 20 Mar 2024 21:04:45 +0000
ROA not before: Wed 20 Mar 2024 21:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:5dad:c810/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5d:ae:43:99:69:42:5f:02:5a:b6:b8:64:3f:e5:0d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 20 21:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0271fde0b6f3bbadb33af5a3e349fd860ed9c32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0c:7c:b5:2a:00:57:75:72:e6:ba:12:b2:84:
1b:aa:26:54:2b:dc:77:a8:65:cc:b6:fd:a1:b5:28:
b6:8e:6c:38:e3:9b:03:82:86:79:22:b0:1f:ea:74:
55:3e:73:3a:43:d0:e2:5b:31:fe:2c:07:b8:11:6c:
d9:ab:27:a6:a1:ed:96:45:33:ce:cb:87:28:87:ec:
06:06:27:5a:53:47:6c:bc:ca:d3:ef:fa:00:cb:87:
b0:f9:6b:de:c6:fa:7e:30:87:e7:4c:36:b4:0c:b9:
7e:46:e6:21:db:52:98:dd:0f:f4:2c:68:74:5e:37:
6a:a4:ec:1b:cc:ea:14:76:3f:83:3c:24:27:3c:1a:
eb:6c:dd:95:4e:48:8e:23:76:85:1d:1d:1a:05:04:
ca:03:34:e1:11:d9:82:d7:90:ae:e9:e1:98:78:90:
c9:e5:2c:50:af:29:df:e1:dc:e5:59:95:97:d6:69:
5d:cd:46:9f:f4:c2:9c:19:2c:cd:70:f2:12:2f:25:
ce:8b:82:28:c1:80:e6:01:71:1e:14:a4:4a:1d:88:
3b:6a:10:33:e2:ad:b6:e5:c4:05:df:9b:1c:5f:42:
26:7b:4d:a1:4c:eb:45:47:24:4e:74:68:d8:9a:2f:
16:07:7d:6f:5d:b1:36:56:db:3b:2a:c3:21:03:b7:
56:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:71:FD:E0:B6:F3:BB:AD:B3:3A:F5:A3:E3:49:FD:86:0E:D9:C3:2F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AnH94Lbzu62zOvWj40n9hg7Zwy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:ef:e1:ce:44:90:71:99:26:fb:6e:6f:b3:53:d8:38:8e:26:
09:88:60:ba:2f:a5:ec:de:99:ca:75:71:1c:3c:57:5a:92:11:
af:63:a1:5c:0d:82:1d:b4:3f:04:6b:1c:61:5d:aa:3f:8c:6f:
34:aa:c2:85:39:da:06:b6:e3:2a:8a:b0:a0:02:14:f5:b0:06:
e6:6e:c8:d1:55:0e:db:5a:7d:3c:c3:f1:4e:7d:08:f2:36:7f:
1b:d3:1c:90:df:29:3b:14:7a:eb:43:62:87:93:5e:97:b6:2b:
44:f2:7b:fe:a2:5f:06:4e:c3:fe:00:e6:c1:fe:6f:7d:88:66:
0f:96:73:b0:f1:77:c3:dd:6c:4a:49:ce:04:7d:5b:7d:03:89:
bf:66:e9:a2:58:db:47:cf:17:0e:b7:3e:4e:cf:29:90:27:93:
81:71:d7:df:f3:39:ec:89:cc:6d:2b:ec:46:f1:6b:94:d7:df:
cd:dc:87:c0:35:43:1d:5a:d1:43:66:b8:0f:cd:c1:0a:6d:a6:
ca:c1:b4:27:12:b8:80:38:b9:40:bd:d0:a4:40:52:02:02:24:
dd:9f:8a:de:cd:cb:16:c7:06:18:13:b0:91:84:5b:98:bc:99:
2a:b7:39:16:6b:85:aa:d4:48:fd:99:ac:5c:23:a4:2b:a3:ab:
0b:00:cc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org