Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/C34K0Z1Rue_AzHesfxb1LucTWbM.roa
File: C34K0Z1Rue_AzHesfxb1LucTWbM.roa (raw, json)
Hash identifier: x7jAJuZTQ5iQ6jV5Jp1qgnyRirB4bFqIFJG9lFtBRQg=
Subject key identifier: 0B:7E:0A:D1:9D:51:B9:EF:C0:CC:77:AC:7F:16:F5:2E:E7:13:59:B3
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D4AD43C94B844374A09844B1B64029ABF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/C34K0Z1Rue_AzHesfxb1LucTWbM.roa
Signing time: Sat 27 Jan 2024 12:10:39 +0000
ROA not before: Sat 27 Jan 2024 12:10:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4a:d4:3c:94:b8:44:37:4a:09:84:4b:1b:64:02:9a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 27 12:10:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b7e0ad19d51b9efc0cc77ac7f16f52ee71359b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7f:43:0d:4f:f8:a8:05:d1:be:df:2b:23:ed:
fe:cc:27:f8:ef:57:90:ac:1c:eb:a3:60:e1:8d:3e:
68:c5:f2:ed:08:62:51:c5:59:53:d7:8b:6d:19:f7:
3e:26:cd:13:de:cc:dd:f8:be:68:34:cf:dd:bf:34:
8c:e8:7e:4f:66:27:08:bd:4a:8d:bf:8b:d1:af:b8:
31:ed:62:73:27:ea:35:44:a7:12:3a:79:0d:ba:11:
31:c4:f7:4b:98:8b:3a:d3:8d:41:07:66:19:56:74:
a8:6e:d5:e1:6c:b9:37:91:6a:0a:90:5e:73:f6:e2:
e5:02:39:b7:65:01:dc:e2:56:6f:7e:9d:23:97:c0:
af:c7:e9:3c:96:55:b4:f7:ed:e3:d6:52:21:82:9a:
6e:de:13:c9:3b:1d:4b:d4:01:53:7c:fb:b8:f3:d7:
ad:2a:2e:d2:bc:c8:3b:3c:7c:66:7e:85:87:c1:7d:
9a:68:8d:0a:91:59:24:de:f5:7d:35:7a:9c:bd:89:
cc:79:6f:f0:06:29:89:99:c7:62:a2:a2:70:8d:ac:
64:5d:12:c5:92:62:f0:4a:2b:c7:33:57:54:f8:d7:
24:e0:99:4d:ec:92:ef:79:ab:f0:e8:cb:b9:d1:7f:
07:05:1a:c8:a4:37:cd:9c:9e:02:d8:e9:70:d3:74:
b3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7E:0A:D1:9D:51:B9:EF:C0:CC:77:AC:7F:16:F5:2E:E7:13:59:B3
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/C34K0Z1Rue_AzHesfxb1LucTWbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:3d:d0:c3:d2:be:72:28:12:c6:ff:ef:42:d7:8a:62:87:52:
05:45:20:ef:ac:b3:0b:6d:4b:4a:0e:a9:64:78:41:86:3b:9c:
5e:f1:73:7f:d3:c2:5f:b7:be:71:e0:0a:9c:7d:97:50:24:20:
a5:c5:89:1a:9e:de:18:08:a4:aa:dd:01:94:f4:37:08:cf:f0:
5b:3b:b7:69:bb:56:9a:14:50:31:48:d3:da:5d:7c:99:73:b2:
a5:46:e5:5b:c4:3c:1a:55:0a:99:62:d9:1b:d1:ac:60:01:1c:
95:cd:63:b0:5c:da:ab:8d:5e:78:e1:aa:76:b2:56:e0:e7:eb:
ae:3c:8a:8c:9b:85:e3:de:5e:fe:35:78:03:c3:10:ca:c3:20:
5b:19:2b:f4:19:ca:22:a1:7d:00:7e:5f:01:b6:db:cd:98:cc:
c9:41:06:5a:fa:70:bc:22:04:06:c0:75:62:ad:a1:b9:17:a6:
e6:33:42:9b:33:d8:06:6c:3d:35:f0:67:1c:45:69:0c:98:bd:
82:12:e3:1d:5d:1f:9d:ab:94:9c:5f:87:b4:1d:12:65:cd:2f:
65:5d:7e:43:95:f8:f9:bd:99:bf:4e:fd:14:f8:95:bd:76:26:
07:1f:cf:5e:bf:af:4c:84:43:f6:31:ab:13:0a:59:4c:32:cd:
ad:2a:70:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org