Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BeRdEgCMMN9SJLoL1LI-2juHbyo.roa
File: BeRdEgCMMN9SJLoL1LI-2juHbyo.roa (raw, json)
Hash identifier: sfUAnqf3kZjDlYv7Mot1hwD3xetwyxDOyMq9esnbTAI=
Subject key identifier: 05:E4:5D:12:00:8C:30:DF:52:24:BA:0B:D4:B2:3E:DA:3B:87:6F:2A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E7095BC542783E649F548D1E5DFD3261A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BeRdEgCMMN9SJLoL1LI-2juHbyo.roa
Signing time: Sun 24 Mar 2024 13:10:45 +0000
ROA not before: Sun 24 Mar 2024 13:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:70:95:bc:54:27:83:e6:49:f5:48:d1:e5:df:d3:26:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 24 13:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05e45d12008c30df5224ba0bd4b23eda3b876f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:39:37:4b:52:a1:4c:6e:68:71:06:66:77:a7:
43:02:45:6f:bd:5b:11:3e:d0:e2:93:25:5b:f5:59:
63:b9:8a:d4:bf:51:ca:1d:34:fb:b1:d5:7b:74:f2:
77:2b:ac:15:76:69:91:13:63:3b:8e:a9:8e:d9:b9:
7b:ab:f0:8b:33:55:b7:ef:b5:5b:46:20:1c:f5:db:
28:66:18:0e:18:f6:94:4e:ba:90:5c:18:e9:fa:02:
de:d0:7a:ae:2e:41:eb:37:b9:18:80:c4:25:3a:24:
9b:c0:9f:ab:a8:cb:bd:44:50:1d:36:35:85:dd:4e:
fb:63:28:36:1b:df:b0:83:61:b7:4d:40:74:dd:0e:
6a:cf:6c:9d:4b:ff:76:c2:93:ea:a5:63:43:f3:32:
1e:7c:18:56:f9:46:84:6c:d6:2e:a0:6e:86:07:6b:
53:3b:4c:a4:94:b6:bb:da:b2:4e:b1:a6:6a:58:af:
43:f0:b7:89:2b:5c:d2:11:b9:7a:f9:79:c0:56:85:
7e:ab:0c:53:df:84:93:21:fc:a1:a6:ab:8f:c2:d5:
8e:e1:11:8e:0f:e3:af:d6:61:73:61:af:40:78:3b:
2f:9a:8c:56:fe:3f:92:da:8f:0e:bf:8b:7c:db:60:
b3:bd:5a:c2:1b:19:0a:63:0c:92:71:72:41:fe:e1:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E4:5D:12:00:8C:30:DF:52:24:BA:0B:D4:B2:3E:DA:3B:87:6F:2A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BeRdEgCMMN9SJLoL1LI-2juHbyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:57:be:71:1f:55:16:00:dc:67:38:f6:51:d6:2d:41:4b:98:
68:74:09:a8:4f:87:5d:18:ef:6f:4c:9f:40:84:91:f2:ed:e2:
34:a9:eb:86:4f:b1:86:0b:9b:5c:f9:59:36:3d:ed:1a:57:73:
11:d9:e1:03:d1:dd:9d:8b:15:2d:2c:98:3f:e6:89:a3:a0:48:
d0:3a:fe:38:64:77:b8:b3:04:82:3a:7e:6d:be:82:f1:eb:b7:
25:53:2a:e6:9d:60:70:a3:3f:73:16:04:39:d3:eb:02:73:d8:
6c:d0:68:c2:46:b6:0d:63:cb:23:16:95:3e:8b:7e:d7:31:ee:
9a:59:4f:c8:d5:34:58:29:14:6e:b8:da:db:23:dd:ae:b8:b3:
fc:ad:94:e8:7c:72:f2:9a:a5:ed:fb:11:89:fb:1f:33:e0:13:
a4:8f:ae:91:06:e9:36:1e:e3:e2:71:d2:0b:aa:03:e6:40:ef:
cf:2e:47:33:20:f1:8f:5c:9b:63:af:10:88:b1:e4:0d:1a:d4:
f0:63:3f:0d:85:d6:60:c7:6b:31:81:0b:44:d7:b7:d4:7c:fb:
f2:98:7d:c8:85:64:b7:20:91:1b:7e:fc:36:00:7b:99:ac:da:
37:9d:e7:7f:01:49:1e:b0:c0:68:c6:75:43:fb:e2:4c:ee:31:
95:90:80:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org