Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/D50KJjNkmmL1z5Ao57ocyGWgUe4.roa
File: D50KJjNkmmL1z5Ao57ocyGWgUe4.roa (raw, json)
Hash identifier: 22ZTzyErEp547vSI9lZycDhXRUw3jZd56WGOMEfCDaQ=
Subject key identifier: 0F:9D:0A:26:33:64:9A:62:F5:CF:90:28:E7:BA:1C:C8:65:A0:51:EE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DDC88C881509E8531BB28795C84F0179A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/D50KJjNkmmL1z5Ao57ocyGWgUe4.roa
Signing time: Sat 24 Feb 2024 19:12:48 +0000
ROA not before: Sat 24 Feb 2024 19:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:dc:88:c8:81:50:9e:85:31:bb:28:79:5c:84:f0:17:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 24 19:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f9d0a2633649a62f5cf9028e7ba1cc865a051ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a3:75:80:0a:a1:5b:3c:5e:e1:ff:52:ca:97:
44:0a:a5:38:19:7b:d0:6f:02:ba:35:fe:11:09:58:
06:7b:dc:2a:a6:be:18:33:61:2f:9f:e8:42:f2:ce:
6e:3d:20:6c:fd:fa:e1:53:f2:7a:a2:40:86:eb:12:
0c:29:fe:00:56:48:75:e0:0b:06:eb:53:46:02:d7:
18:ff:0f:46:c8:ed:aa:c1:0b:75:52:5f:0b:bc:a8:
a5:44:f2:15:27:09:b1:8f:35:33:af:84:17:4d:7f:
67:90:a6:10:2b:7d:3a:5a:cb:ec:9e:2e:ea:41:d3:
60:bb:d7:63:51:75:b9:e5:9b:22:21:bb:ee:bc:a0:
f1:2c:3f:e9:55:2c:7d:a0:7d:27:0d:be:f5:3c:ad:
06:4c:ca:04:17:cc:3c:74:23:1d:17:07:85:77:0f:
dd:a6:a2:b3:34:fe:dd:9a:21:7a:52:c7:b1:cc:b0:
74:bb:9a:7b:2c:61:85:1f:6a:d3:67:cb:2d:45:d5:
9a:34:4b:7e:f1:4d:f6:4b:ad:bb:3a:91:de:4e:84:
2c:dc:1d:c4:e2:2a:44:b2:0a:a2:a4:46:ea:00:dd:
cd:20:f9:25:8f:5c:7a:45:3a:f1:6f:7e:5e:3b:2d:
ae:a7:a2:e2:0b:74:3b:4c:d4:7e:ff:11:d4:fb:c1:
3b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9D:0A:26:33:64:9A:62:F5:CF:90:28:E7:BA:1C:C8:65:A0:51:EE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/D50KJjNkmmL1z5Ao57ocyGWgUe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:5c:67:e4:45:49:f8:c0:8f:24:5f:17:95:64:07:45:ed:e1:
8f:44:2a:f0:0d:71:25:0e:cd:56:cc:69:c9:3f:1f:7d:e9:43:
de:c9:f7:43:ce:6f:d2:5d:5e:38:a2:c1:a2:1b:a4:a5:fd:5a:
8c:d9:91:72:49:68:de:03:ed:a3:b4:78:c2:b2:62:ff:a4:7c:
42:21:b4:bf:08:0f:36:5a:06:9f:62:a3:e8:1e:6f:da:e3:04:
6a:28:85:e6:8b:7d:f8:4d:61:f0:ea:c0:9c:5c:ac:03:9c:5b:
d3:44:10:bd:e8:e5:91:a5:3b:cc:56:52:26:13:61:96:77:ce:
78:a9:da:b0:aa:4c:c4:80:2b:37:c7:4f:33:b6:c3:3a:40:b6:
6d:ab:76:4a:5d:ee:1f:48:a9:3e:f9:e4:fe:bf:8a:3a:f4:d6:
91:b8:0f:76:c6:79:7f:46:c9:49:4d:9a:e1:c0:9e:ef:35:05:
70:48:85:c5:76:da:8d:51:a9:c5:0d:f7:67:86:67:7f:d4:3d:
5b:cb:4d:07:2a:95:cc:37:ec:c8:0d:12:3f:87:84:0f:a6:03:
a4:7f:84:b2:4e:6c:d6:f5:76:f8:80:9c:a5:80:45:b9:6f:9a:
62:99:fb:72:48:ef:a1:f9:bf:93:1f:ca:ef:67:67:00:46:cf:
92:fc:46:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org