Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CO6sFo53DqBFohERnhHCdPGIf20.roa
File: CO6sFo53DqBFohERnhHCdPGIf20.roa (raw, json)
Hash identifier: j6C27v8vdV22s+cyEdYk0QHjiACowEevlNnLFVtHyKM=
Subject key identifier: 08:EE:AC:16:8E:77:0E:A0:45:A2:11:11:9E:11:C2:74:F1:88:7F:6D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D94DEF23BE1EE52E3EE9EEE29B00FB504
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CO6sFo53DqBFohERnhHCdPGIf20.roa
Signing time: Sat 10 Feb 2024 21:14:15 +0000
ROA not before: Sat 10 Feb 2024 21:14:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:94:de:f2:3b:e1:ee:52:e3:ee:9e:ee:29:b0:0f:b5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 10 21:14:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08eeac168e770ea045a211119e11c274f1887f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:cd:94:e3:b8:cc:f4:86:89:73:62:eb:4c:
1b:aa:09:08:5a:72:5e:df:d5:e0:a0:1e:26:72:cc:
cb:ff:ec:8c:59:22:eb:a7:c6:ae:1c:22:ce:b0:66:
9b:1f:77:7c:29:0c:95:9b:21:1a:71:04:d0:ed:3b:
6e:5c:6d:0c:57:c1:76:42:cd:a9:86:38:2f:db:35:
79:94:4c:85:dd:ee:d5:dc:f2:9c:3f:40:f4:44:88:
49:62:f9:8e:32:fd:a8:70:dd:19:54:2c:37:32:b7:
cf:9e:09:b5:8d:13:f9:0b:90:0a:46:4a:ac:13:aa:
bb:f2:5a:18:aa:34:4a:a2:be:90:89:8a:df:8a:79:
0f:6a:47:bc:8d:d6:02:90:0f:49:64:f5:3e:6f:9a:
30:73:c5:16:44:ba:37:da:6c:bb:ef:7a:e2:36:b3:
26:ec:c5:07:48:ac:2e:a8:2f:23:50:f1:68:b0:1a:
3b:97:ac:10:92:13:cd:bb:43:55:80:94:d3:b5:d9:
66:ad:2c:a6:05:3b:64:95:1c:14:63:ee:eb:b2:76:
59:be:72:d4:dc:b3:dd:03:a1:17:9f:50:d1:4f:bb:
58:06:05:fd:11:c0:c6:e7:c3:71:68:ec:57:29:7e:
cf:1f:88:aa:27:82:fe:9d:94:62:da:a6:18:44:ce:
08:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EE:AC:16:8E:77:0E:A0:45:A2:11:11:9E:11:C2:74:F1:88:7F:6D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CO6sFo53DqBFohERnhHCdPGIf20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:7a:25:d1:e3:77:88:bb:5b:be:72:2b:b8:28:2c:c5:64:4e:
16:b5:b4:27:dd:58:34:0f:2c:5a:5d:c4:ca:05:87:b4:b8:b4:
fd:7c:f4:43:e7:69:84:30:fd:a4:a1:3d:99:fd:0b:1f:0b:39:
bc:8c:ce:18:db:86:82:7a:91:7b:50:76:0c:03:11:68:14:05:
e2:33:a1:51:b1:bf:72:77:8c:08:8c:f9:c4:99:54:c5:f0:73:
2f:60:dd:6a:d0:c5:38:32:e2:5a:40:3a:e1:6e:67:48:9b:87:
8f:f6:e7:85:b9:f4:ac:0f:aa:30:2b:4f:0a:80:d0:c8:c3:5d:
d7:75:86:fd:df:5b:40:9a:ad:f9:05:0d:5f:d4:c3:af:1a:ac:
a1:a8:0d:5f:e5:d2:20:a9:c7:9f:cf:43:6c:13:b0:db:8e:e8:
e8:9b:e8:44:4f:73:78:82:68:6f:73:66:bd:3e:46:f4:cb:ea:
61:ea:d4:47:7e:01:35:05:24:f0:c8:e2:1b:96:3a:49:75:a7:
6a:71:eb:ad:10:0e:69:51:16:7e:87:2e:db:ac:f9:e7:4f:e0:
6b:0a:98:8c:2d:04:1e:ef:44:d3:04:ca:7a:cf:28:11:da:27:
1d:75:39:98:80:97:b4:0f:b7:b8:a2:eb:ff:a8:a8:0c:10:9d:
14:d2:c5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org