Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/C-_FleJUdlq6Xl6YGJOY29nQO3s.roa
File: C-_FleJUdlq6Xl6YGJOY29nQO3s.roa (raw, json)
Hash identifier: F4L8TvwEqnyeO5u0jGy1k2vaFp5BUPcKipodYkEYdGM=
Subject key identifier: 0B:EF:C5:95:E2:54:76:5A:BA:5E:5E:98:18:93:98:DB:D9:D0:3B:7B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E664AD9B5B89FDCC05BED5D8D770C68BF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/C-_FleJUdlq6Xl6YGJOY29nQO3s.roa
Signing time: Fri 22 Mar 2024 13:12:45 +0000
ROA not before: Fri 22 Mar 2024 13:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:66:4a:d9:b5:b8:9f:dc:c0:5b:ed:5d:8d:77:0c:68:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 22 13:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0befc595e254765aba5e5e98189398dbd9d03b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b9:d9:1d:c8:71:66:42:07:82:f0:4a:1e:bc:
55:8d:1f:65:45:fb:09:a8:ea:2f:7c:11:fe:ae:b5:
b5:ce:42:24:b5:da:34:cd:b1:a8:53:56:f0:c5:06:
b3:74:03:b5:fc:0f:4a:9f:60:5b:3b:48:89:8a:f4:
21:5b:8d:32:2f:4e:5b:dc:21:87:d0:45:59:66:ed:
19:fb:34:f2:b2:d0:ba:4a:5a:1a:c3:ff:2b:00:c9:
16:2c:3e:7b:f5:9b:ca:e9:5d:d2:99:85:2d:7f:47:
52:8a:e2:ed:f1:af:84:42:18:48:91:60:53:93:bd:
b4:a6:37:24:23:c1:97:c6:a6:d5:88:e9:75:21:0d:
be:e2:7b:e1:37:ac:15:30:aa:43:f4:b4:43:6a:7b:
58:b7:83:eb:81:cb:33:ea:cf:cd:f8:45:aa:e3:42:
2b:66:22:af:95:70:b4:bb:a8:11:35:ce:36:f1:34:
7a:22:c6:5a:b5:c7:b8:0a:d6:de:f9:08:dd:2a:47:
ef:23:af:6c:47:f4:05:a0:59:eb:9d:2e:22:66:0e:
f1:7f:0f:d1:b0:24:6b:5d:43:9a:b1:e1:6d:d1:47:
f9:95:17:12:64:e4:75:8a:cc:37:ce:fc:1b:31:98:
67:56:47:2a:df:1d:00:44:4d:5b:c7:98:80:e3:49:
b4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EF:C5:95:E2:54:76:5A:BA:5E:5E:98:18:93:98:DB:D9:D0:3B:7B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/C-_FleJUdlq6Xl6YGJOY29nQO3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:30:98:c0:d9:2b:fd:50:68:d0:fb:51:4f:c3:3a:4a:a2:1b:
44:a9:c9:fb:bd:29:bd:47:15:6a:16:e7:df:07:79:8f:95:47:
e4:ca:2a:1d:f1:60:03:fc:13:d7:6f:36:7a:1c:59:f6:d5:8c:
03:9a:b2:c1:f3:72:82:a9:c8:9c:55:d4:06:5e:c7:a4:33:26:
99:5c:2c:b2:80:af:45:2c:d3:64:d2:6a:bb:67:00:78:78:1e:
19:f7:24:5c:a3:38:d7:ef:c1:e4:77:4a:40:eb:d5:e2:f8:a3:
be:b7:0f:3e:9e:7d:6d:d6:44:99:13:f3:27:18:03:d1:26:43:
c8:7f:ed:7e:eb:82:68:f8:14:f3:f1:0c:72:16:8f:96:f1:2f:
13:f8:7b:e6:9e:21:20:b3:91:06:dc:f8:dc:2e:47:da:5a:a3:
f2:bc:e5:06:78:2d:83:e3:d5:8c:cf:90:72:0d:9a:aa:a0:81:
28:85:e4:cd:df:7c:bd:f3:5f:b8:ef:da:df:56:8c:69:9b:14:
c8:fb:8e:61:7f:9b:0a:ee:ee:3b:dc:b9:ed:7d:b1:a8:ca:c6:
8c:89:60:1b:cb:d1:58:1d:80:67:34:55:eb:0c:d9:b7:8e:36:
e0:76:83:4b:0c:83:f7:33:65:ff:c2:a9:79:85:87:b4:e2:59:
28:f6:0d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org