Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Bsd-vePVS_0T-Iz8EWE-k4Yxy0c.roa
File: Bsd-vePVS_0T-Iz8EWE-k4Yxy0c.roa (raw, json)
Hash identifier: zaCrd4WwoI7g0Vfwa9RJt1L1HzgUgk4mEyCijI4eGMQ=
Subject key identifier: 06:C7:7E:BD:E3:D5:4B:FD:13:F8:8C:FC:11:61:3E:93:86:31:CB:47
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9EF530ED8AC235D38CE6481169AC378E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Bsd-vePVS_0T-Iz8EWE-k4Yxy0c.roa
Signing time: Mon 25 Dec 2023 03:11:58 +0000
ROA not before: Mon 25 Dec 2023 03:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9e:f5:30:ed:8a:c2:35:d3:8c:e6:48:11:69:ac:37:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 25 03:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06c77ebde3d54bfd13f88cfc11613e938631cb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:a1:1e:11:6b:4f:3e:00:f5:6a:b1:8d:ce:
8f:4d:1d:77:d3:1f:ce:8c:c6:89:2c:af:3e:aa:53:
c1:db:29:09:be:e0:91:0c:cf:15:5b:94:8b:c7:30:
e3:35:a4:5b:ac:56:a1:33:8e:c9:f1:44:e1:65:3b:
33:8c:0f:89:6b:95:2c:83:b9:02:d8:8a:34:2c:e0:
ce:f8:07:90:a1:06:99:98:97:2f:57:de:59:7f:35:
15:87:53:7f:4b:76:c1:76:40:0e:cd:ad:ac:bf:7f:
f0:3f:72:c4:1e:5f:6d:a3:67:f4:41:16:5f:70:61:
1e:70:0b:92:0a:b0:68:cb:9b:c0:09:ff:a0:b2:62:
28:ca:13:1d:dc:cf:2d:0d:bb:77:7d:e9:90:22:64:
99:dc:fd:8a:fe:94:d1:5c:2a:22:8e:92:94:03:e5:
cd:c2:79:c1:a7:95:5e:d6:04:d1:e2:05:ce:cc:cc:
e4:53:dc:70:bd:06:df:a1:d9:c7:e0:01:1d:16:9d:
bf:ce:43:51:b2:7e:6b:d5:b4:40:ee:f6:55:55:a6:
fa:9f:4e:7e:eb:a6:8f:68:eb:53:1a:3d:7d:e3:2b:
70:ad:de:44:43:68:16:2d:cd:43:75:c6:9e:fc:9b:
00:3e:b8:0f:10:56:d1:09:d6:d5:0b:6a:34:30:d3:
71:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C7:7E:BD:E3:D5:4B:FD:13:F8:8C:FC:11:61:3E:93:86:31:CB:47
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Bsd-vePVS_0T-Iz8EWE-k4Yxy0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:a5:5d:ed:91:d3:45:46:29:5f:6f:16:03:4e:0d:cc:78:9d:
d5:f0:71:13:be:18:16:d9:80:ae:1d:7f:39:5d:bf:3a:ef:ff:
cf:fe:95:3a:68:87:21:a2:7b:12:4c:b4:fa:e1:77:86:72:e8:
3f:c3:a2:08:9f:56:05:4a:06:bb:d0:59:90:1b:33:e5:aa:ef:
8f:04:0a:8c:e3:b9:1e:00:71:e1:a0:bf:86:31:71:36:00:74:
11:16:ba:f7:13:84:8e:57:55:b5:a6:e5:87:93:d7:14:ea:c3:
04:a4:3d:1c:7a:22:07:d1:71:44:73:35:2d:f8:b8:2e:19:05:
79:5b:e4:85:89:9b:40:23:c6:18:5c:c3:2e:b8:3b:66:45:12:
1e:55:49:e6:50:4c:c1:81:08:6f:33:7e:01:61:8c:fb:05:04:
34:23:c1:5c:fe:78:ec:bf:74:a7:5a:e1:1a:e8:5b:a3:f7:58:
66:c3:e6:19:6c:09:bb:d3:4e:24:d9:9d:e6:b1:84:43:4d:d4:
a9:58:2c:28:fb:eb:69:45:93:ca:45:34:44:72:c2:73:e3:0c:
9d:9f:ed:6e:ca:8a:a9:64:cd:9b:79:e1:18:20:dc:d5:21:d6:
a6:40:03:1e:43:70:f1:50:e5:09:63:8e:6e:6d:2b:2a:61:fe:
9b:0e:6d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org