Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CrUJKYqTPISPMGnRTxg_s0Q_dA8.roa
File: CrUJKYqTPISPMGnRTxg_s0Q_dA8.roa (raw, json)
Hash identifier: KhVW2eet6zdCNWUyXtV2ZFvCWpETZv4MST9+DN7LJpo=
Subject key identifier: 0A:B5:09:29:8A:93:3C:84:8F:30:69:D1:4F:18:3F:B3:44:3F:74:0F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D596E55E8995615DA99CA50E01E72C880
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CrUJKYqTPISPMGnRTxg_s0Q_dA8.roa
Signing time: Tue 30 Jan 2024 08:13:39 +0000
ROA not before: Tue 30 Jan 2024 08:13:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:6e:55:e8:99:56:15:da:99:ca:50:e0:1e:72:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 30 08:13:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ab509298a933c848f3069d14f183fb3443f740f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:f5:37:8c:c0:4b:78:68:a8:18:65:b0:f8:
75:23:91:d0:4e:5f:a2:a7:0e:b0:c2:5d:98:8a:45:
0a:15:06:64:43:f5:8b:0c:5a:9b:22:73:ba:ea:e7:
05:a5:36:9a:21:eb:ad:63:5f:cc:6d:9c:6a:dc:c2:
c9:d0:4f:6f:b3:2c:9b:72:1e:91:7f:6c:98:65:e4:
7e:c6:70:d3:1c:e0:dc:ed:63:b7:bb:59:c8:f8:fc:
bc:8d:82:dc:00:58:dc:7d:69:5c:6c:a4:30:56:41:
f2:96:d2:cc:8b:6a:d0:aa:91:75:2c:8d:11:24:de:
28:69:c3:04:73:d9:43:ad:51:ad:b8:91:b1:b9:18:
3e:18:63:a7:1d:0f:02:4a:86:c5:bd:8d:f0:9f:2a:
8b:b2:e6:8c:75:ec:30:dd:10:1d:dd:93:b4:03:bc:
9c:1e:d8:03:d4:14:1f:f8:d0:c8:53:58:58:07:87:
0f:5a:4f:83:15:16:95:2e:e4:fa:7b:40:ec:1b:8a:
20:e1:b1:bc:97:b6:5f:3f:b1:51:d9:69:18:59:0f:
39:63:70:b1:0c:e1:0b:86:23:41:7a:c3:e7:1b:07:
e3:ac:4d:a9:ca:8d:47:9b:ee:44:44:fd:07:80:91:
15:78:16:20:0d:cb:ad:95:b1:e5:36:69:1e:df:ab:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B5:09:29:8A:93:3C:84:8F:30:69:D1:4F:18:3F:B3:44:3F:74:0F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CrUJKYqTPISPMGnRTxg_s0Q_dA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:e9:4b:7f:22:50:3a:99:39:17:7e:72:e1:aa:2f:a5:1f:6e:
c5:ca:8f:66:4f:7c:65:bb:7f:77:72:2b:26:35:7a:ce:c6:32:
b1:93:78:75:7f:b2:2e:48:bb:56:91:55:26:a0:ae:bb:4b:57:
22:48:c1:c4:89:2f:f1:cc:a0:29:d1:06:78:52:3a:4c:10:cb:
98:45:08:a7:f8:1e:85:f1:84:38:a1:32:74:de:ce:dd:e2:c0:
b5:49:c0:c0:7a:d3:a1:70:76:10:61:ca:c7:41:78:6b:08:86:
32:73:8f:51:ed:ea:1a:d5:60:44:c3:08:38:5b:65:8b:24:cd:
49:e1:50:64:66:5e:1d:b5:0d:34:6e:f7:4a:76:74:71:8d:68:
d6:14:a1:75:da:ee:4b:b6:df:33:45:a8:99:d9:53:9d:e5:99:
03:4f:de:a2:0f:1b:f9:6e:93:30:8d:13:c8:62:36:30:cb:07:
7a:52:c4:e0:07:f6:b8:87:f6:09:f1:d6:ff:4d:d7:4f:13:b3:
ac:c3:58:ae:02:f4:49:76:63:96:46:1a:b4:ea:bb:e7:ca:d5:
ea:8c:2d:57:2a:d2:47:cc:c4:9c:d6:ce:11:0a:3d:93:14:96:
3d:66:09:06:8b:21:3d:9e:ae:8d:32:45:4b:95:88:c9:83:3b:
50:f4:ba:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org