Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/D0tQqfShNKVQqtene_9-O7hG7cE.roa
File: D0tQqfShNKVQqtene_9-O7hG7cE.roa (raw, json)
Hash identifier: gqnA2Og0lm3QI+ezwh1J4ltExjj4cUg2+uqHIryW6as=
Subject key identifier: 0F:4B:50:A9:F4:A1:34:A5:50:AA:D7:A7:7B:FF:7E:3B:B8:46:ED:C1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E9C23F1894A6BB148BCB6E305F89AD065
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/D0tQqfShNKVQqtene_9-O7hG7cE.roa
Signing time: Tue 02 Apr 2024 00:09:44 +0000
ROA not before: Tue 02 Apr 2024 00:09:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9c:23:f1:89:4a:6b:b1:48:bc:b6:e3:05:f8:9a:d0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 2 00:09:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f4b50a9f4a134a550aad7a77bff7e3bb846edc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b4:3f:88:a3:c3:4b:7a:16:4f:c0:52:a8:75:
43:e0:10:8f:e4:04:3c:43:b2:cd:cc:ab:2a:4f:97:
0c:cd:31:8f:73:ad:cc:d8:c3:14:ae:5b:87:a3:15:
1d:c2:a4:78:b6:c8:80:55:a1:da:16:e7:f5:79:0a:
2f:f7:99:71:38:2e:ab:09:e1:08:66:fd:d7:d2:b1:
70:12:dc:02:c5:cf:73:76:f8:40:22:91:27:33:b4:
9d:3e:90:af:91:ae:9d:25:d3:a6:11:00:50:98:11:
1e:a9:9c:69:b3:eb:aa:9c:0e:d3:3c:af:f4:c6:51:
be:41:16:99:49:7a:1f:0d:1a:33:55:cc:b7:c0:c5:
41:03:54:2a:8d:3f:05:c5:7d:1d:3e:d2:87:1f:10:
12:c6:4b:2e:40:44:69:d5:6a:06:6f:5a:b0:dd:f6:
57:82:7e:d1:eb:d9:c0:dd:1f:c5:8e:37:c7:95:3a:
56:d7:87:80:ee:90:2f:57:61:df:40:cf:f7:2f:76:
af:c2:ab:37:20:d0:bc:c0:2d:36:0c:a7:12:9d:50:
b4:f0:a2:62:1b:bd:89:da:37:48:48:6c:c0:51:e3:
60:51:c1:9c:0f:8f:15:5e:a6:3f:3b:95:19:4c:fb:
3b:c9:82:03:89:11:64:b2:9a:d0:6e:6c:9f:a5:f9:
d5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4B:50:A9:F4:A1:34:A5:50:AA:D7:A7:7B:FF:7E:3B:B8:46:ED:C1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/D0tQqfShNKVQqtene_9-O7hG7cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:e3:bb:77:5f:df:d8:7d:53:13:30:37:60:e1:8b:fa:61:3b:
9d:ab:cb:b4:9e:82:04:b0:46:d1:f7:69:57:8e:f8:6c:74:74:
eb:50:90:b2:68:94:cc:cd:84:b7:47:6f:06:6e:2b:91:ba:3e:
f4:ec:2a:13:93:89:a6:aa:4b:f5:f3:21:22:7b:f3:1d:d2:8b:
dd:99:80:60:0d:24:ca:60:dd:ce:eb:c7:3d:4d:67:c2:0b:6c:
0b:c1:7b:cb:27:dd:8e:25:e6:17:c7:fd:d2:ac:3f:2c:fb:59:
79:6a:0e:c5:06:4e:43:72:6a:96:52:19:25:7c:25:07:92:c1:
31:74:03:1b:d0:3f:c3:51:a7:34:3a:e4:ab:61:7a:3e:c3:ff:
0b:58:94:e0:4d:ae:fc:76:35:48:28:3b:7f:71:84:00:b1:fe:
7a:95:a0:f1:8c:14:19:ee:0b:5c:e4:4d:26:f0:4a:29:05:27:
5f:9d:7d:75:f1:ed:df:84:4a:7b:6a:04:4a:2c:99:17:d8:a9:
34:eb:73:e0:05:a6:ba:8a:2a:f8:9c:5a:ba:8a:cc:4c:09:72:
ec:70:bb:c1:98:7a:ff:3d:e9:5b:5f:1a:60:d9:82:92:f9:43:
01:b8:cd:9f:89:6c:01:dc:2d:8c:76:54:f6:35:82:fc:38:53:
f3:fc:6e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org