Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Bnsz0jcEavNTfg8FSRGpD6jceek.roa
File: Bnsz0jcEavNTfg8FSRGpD6jceek.roa (raw, json)
Hash identifier: yTngjgNK+4xfIIFLm7QyyL0VGLomANkao9LrbzvgWNM=
Subject key identifier: 06:7B:33:D2:37:04:6A:F3:53:7E:0F:05:49:11:A9:0F:A8:DC:79:E9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E6DCC8A632BCD40EF40F90FB7476794A4
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Bnsz0jcEavNTfg8FSRGpD6jceek.roa
Signing time: Sun 24 Mar 2024 00:11:45 +0000
ROA not before: Sun 24 Mar 2024 00:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6d:cc:8a:63:2b:cd:40:ef:40:f9:0f:b7:47:67:94:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 24 00:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=067b33d237046af3537e0f054911a90fa8dc79e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0f:50:d8:77:86:6e:f0:f9:aa:11:66:83:1c:
a0:f8:93:10:5c:df:b2:0c:4b:63:6d:1f:d1:8b:27:
f7:97:28:77:bc:63:ed:43:1a:83:f6:10:e5:e0:05:
e1:39:1b:8b:ab:94:78:34:49:ae:76:4b:ce:88:6b:
4e:35:30:28:db:f6:c2:b1:90:4a:6d:29:09:ac:ea:
cc:a9:f0:d2:3d:b8:9d:e6:14:56:69:07:9e:8a:4b:
e2:92:d9:d9:fa:d5:fb:75:24:d2:e0:7c:20:da:79:
f2:96:c5:75:1f:1d:68:ff:c5:07:44:97:1d:29:03:
17:2f:e0:b0:fb:a1:9a:ad:86:32:18:cc:14:9f:7b:
fc:c4:c1:34:af:1c:0e:c4:d8:32:1b:0d:e2:aa:7c:
36:5d:de:38:22:ff:00:c7:88:b3:be:eb:00:97:7e:
21:65:5f:de:96:a8:59:53:84:9f:e6:01:e2:b6:2c:
2c:e2:b7:54:24:91:da:a1:f2:b8:f0:bf:1f:11:c9:
a0:08:7c:07:61:cd:f7:34:16:bb:e1:dd:85:8b:24:
6d:a9:51:75:09:65:fb:c3:06:1a:4d:32:fa:c7:7b:
48:af:00:28:21:81:37:59:d5:d4:97:b7:3c:f7:84:
af:c6:84:97:45:a8:0f:5e:50:3e:96:44:3b:52:65:
24:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7B:33:D2:37:04:6A:F3:53:7E:0F:05:49:11:A9:0F:A8:DC:79:E9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Bnsz0jcEavNTfg8FSRGpD6jceek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:94:e2:3b:08:6b:d6:f5:a3:20:b2:9e:63:2e:3a:a3:34:f9:
e3:c9:47:e6:3d:6d:9d:5f:51:2f:e4:ed:48:be:57:cd:04:33:
57:a2:1a:53:2b:70:bd:3d:1a:9d:b9:58:7f:43:2d:25:f7:b8:
ba:f2:6e:7f:f8:a9:75:f7:c3:44:b9:2b:8d:09:ad:d9:99:55:
1b:57:5c:99:c4:5d:08:8c:3c:00:7d:af:cd:20:af:bb:83:9f:
e7:0a:1d:88:f0:a0:18:c7:62:75:a6:6c:3b:46:6c:7a:00:55:
03:1f:79:cf:15:87:35:e8:78:8d:89:b0:4b:5b:7c:88:29:b3:
2a:aa:d7:36:e9:4f:f9:8d:e9:43:cb:14:97:66:d5:9c:9b:32:
35:ab:8f:85:1b:9b:5f:2c:fd:16:1c:fa:22:6c:e3:f0:b9:77:
5e:b8:7d:de:27:0c:ba:b4:4d:0c:2b:3e:28:6e:f8:04:31:cf:
07:99:75:f8:02:8e:01:cb:87:86:c9:97:e6:f7:2b:08:45:50:
8e:99:31:65:4c:a0:37:6a:0c:41:98:00:b3:d2:1f:c2:d6:a6:
27:62:82:d4:b8:0d:b9:e9:ee:68:1d:85:77:5e:c9:a3:8f:07:
c3:44:c4:d1:6d:26:9d:df:17:63:94:8c:c6:22:5f:87:29:2a:
e8:db:34:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org