Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Crl4GvFNBlY6dGVTYjjuWBDT21g.roa
File: Crl4GvFNBlY6dGVTYjjuWBDT21g.roa (raw, json)
Hash identifier: zZQmUHFdcdIuZ77bDr8NbF1IKCepOUIAWf0egPnbtns=
Subject key identifier: 0A:B9:78:1A:F1:4D:06:56:3A:74:65:53:62:38:EE:58:10:D3:DB:58
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D574904CE8C679C66934E18F25045E6D1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Crl4GvFNBlY6dGVTYjjuWBDT21g.roa
Signing time: Mon 29 Jan 2024 22:13:39 +0000
ROA not before: Mon 29 Jan 2024 22:13:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:57:49:04:ce:8c:67:9c:66:93:4e:18:f2:50:45:e6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 29 22:13:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ab9781af14d06563a7465536238ee5810d3db58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:a8:ec:4d:c1:6d:98:b0:dd:57:66:b2:cc:
6d:3d:63:12:6b:09:5e:93:59:da:f6:cf:61:43:b0:
df:e4:5a:84:48:c3:84:8c:5d:f9:f3:b6:60:a5:69:
5d:cf:70:02:0a:fd:62:62:88:fb:70:a3:a4:d3:f8:
b0:0f:f6:95:fb:fd:31:0f:2c:8d:b5:2e:b4:fd:21:
53:f0:eb:52:a5:46:03:7f:75:24:e1:25:64:9b:a8:
cd:ed:b4:18:37:c3:c4:1f:51:8d:6c:aa:54:a9:ca:
74:9a:34:e6:14:49:34:ac:54:f4:9e:58:e9:0c:08:
61:df:01:b1:80:24:49:c0:64:68:f6:33:7f:f0:8c:
6b:a0:c4:bf:f8:fa:75:9f:0a:9e:cb:ec:ed:e3:08:
2c:88:2d:4a:f7:45:34:de:a2:bb:7a:dd:df:33:f5:
4f:a4:b6:32:39:12:cc:9e:d3:b3:a7:b9:97:24:42:
bc:d3:ab:a2:14:d6:90:03:2b:d7:0f:87:81:88:20:
c2:7e:f3:90:9c:de:fe:6e:6c:87:ee:3d:e6:7a:d9:
83:dd:f8:43:c2:6e:74:e7:bb:06:41:30:24:41:25:
a2:16:c8:ac:a4:71:3a:a1:91:56:7a:ff:e4:03:51:
8d:7a:f4:7b:2b:83:9e:f6:19:a5:1e:3b:3b:e5:95:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B9:78:1A:F1:4D:06:56:3A:74:65:53:62:38:EE:58:10:D3:DB:58
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Crl4GvFNBlY6dGVTYjjuWBDT21g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:f1:28:56:82:ef:9d:55:fa:c9:78:df:2c:a9:a1:14:cf:a5:
26:02:4e:43:16:6a:dd:d3:4c:e2:dc:5a:ac:67:9b:c0:19:ba:
5d:e0:fc:17:fc:f1:bf:c0:76:dc:2a:43:66:11:ba:d7:e3:98:
06:55:2e:3e:cf:37:d4:54:d0:4e:77:3f:5a:8d:ca:be:8f:f2:
3b:dc:cb:7e:71:db:46:b5:a7:24:77:a9:59:30:ee:72:42:71:
88:af:1e:76:af:af:fe:da:a4:60:3a:74:c9:24:ae:fc:2e:f3:
47:02:85:7d:a4:02:0d:35:f7:91:23:78:a9:4e:49:7e:ab:13:
6c:a8:9d:fd:71:65:4f:99:8b:3b:5f:f9:c1:e6:95:95:27:93:
83:ff:09:5d:f3:cb:48:90:1e:9a:3d:5c:d9:b1:a7:f9:8e:d4:
96:ad:19:e6:e2:5b:9e:9b:ec:4a:75:c7:67:a4:38:86:2f:5b:
b2:6e:45:de:be:ac:51:85:e0:68:a3:26:2f:66:c8:1f:16:90:
c1:63:b9:da:9a:54:9a:92:60:c7:94:18:06:fd:9b:e8:fa:3a:
42:79:cd:33:e6:c3:bc:0e:72:f7:d3:d5:90:6d:fc:ea:88:ab:
35:14:3c:f9:51:ae:3c:73:3e:2b:33:11:96:6e:07:34:73:12:
23:63:d5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org