Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DKAx1SuWf899vlKilEs7in7ebAY.roa
File: DKAx1SuWf899vlKilEs7in7ebAY.roa (raw, json)
Hash identifier: mwwW+fVMEG2gTDqLaATL7KiqevQqau+XFsStliRrz1E=
Subject key identifier: 0C:A0:31:D5:2B:96:7F:CF:7D:BE:52:A2:94:4B:3B:8A:7E:DE:6C:06
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E5A0FBF02CAA216E3B1F3B5D32CE55A50
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DKAx1SuWf899vlKilEs7in7ebAY.roa
Signing time: Wed 20 Mar 2024 04:12:45 +0000
ROA not before: Wed 20 Mar 2024 04:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5a:0f:bf:02:ca:a2:16:e3:b1:f3:b5:d3:2c:e5:5a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 20 04:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ca031d52b967fcf7dbe52a2944b3b8a7ede6c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:da:aa:4e:c9:7b:13:d0:21:92:5a:69:7b:
1f:dd:5d:01:48:e8:36:b4:45:dc:fd:1d:bc:06:8d:
99:ef:89:1e:33:d8:ac:49:07:24:06:1a:14:28:5f:
6a:2e:20:fe:f2:b2:5f:25:ff:21:4b:89:3c:85:63:
bf:2f:bd:d7:a2:ae:21:4b:31:98:78:e0:76:22:ef:
c8:35:6a:79:56:5a:7e:29:61:c7:2e:ff:3d:73:ec:
7e:05:b1:a8:7d:88:fd:cb:fc:bc:6c:5b:d2:b4:c9:
df:22:74:ff:a2:1e:c4:de:61:98:ad:5c:19:44:58:
89:f0:9e:45:b9:16:cc:57:19:cd:43:1c:07:85:e7:
be:5f:25:bd:85:68:8d:a3:e7:96:8d:80:78:e3:ec:
ad:3d:8b:01:a9:af:54:c8:f4:62:ef:46:b2:39:9b:
64:a6:0a:a8:97:7d:de:d5:f0:2c:12:c1:7c:97:03:
01:80:07:05:74:45:2c:fc:94:37:61:ec:92:f8:db:
86:56:ee:73:21:45:84:78:c2:6c:19:18:38:7d:3d:
be:6f:79:e5:de:a7:17:f4:8b:35:39:68:ab:26:a1:
6f:da:60:52:f4:d9:69:e8:21:e0:47:8a:eb:82:93:
28:a7:17:91:ff:42:35:a9:ba:e9:52:d0:af:51:03:
8f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A0:31:D5:2B:96:7F:CF:7D:BE:52:A2:94:4B:3B:8A:7E:DE:6C:06
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DKAx1SuWf899vlKilEs7in7ebAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:81:70:7f:c0:13:11:fb:47:83:08:66:38:19:dc:11:33:ae:
f9:94:42:06:79:54:41:47:53:dc:3a:25:a4:af:8f:a7:f9:8d:
5c:8e:a7:2b:09:48:a8:1c:a1:82:d6:43:34:6e:29:44:a4:c3:
88:f3:e9:d2:b3:58:a1:f0:dc:8c:e9:d1:04:1c:cf:4c:0c:3b:
24:e0:02:f4:6a:3b:58:ee:ed:8c:32:aa:3e:12:fb:53:31:03:
24:cb:48:0c:9c:b2:dc:b4:f0:29:dd:60:49:b2:31:80:5b:54:
0b:6b:45:a5:af:62:1e:4e:ae:a6:3a:d3:e1:3d:e5:ba:71:cb:
77:a7:07:dd:49:ad:8a:4e:04:c7:20:3b:dd:85:09:d9:8b:e0:
d6:40:34:0b:38:a2:6f:b3:0b:9e:f5:e3:3d:97:11:b2:a9:7f:
ec:02:78:64:cf:a5:01:8b:b4:5c:3a:fb:36:e4:ea:96:cb:a9:
6c:61:d5:d3:1a:04:55:f7:85:4f:e0:8c:3a:27:21:69:51:82:
16:d0:3d:6b:df:73:cf:e2:4d:00:5e:01:bd:b3:f9:c7:53:10:
26:5d:df:f7:8e:29:d8:08:95:27:07:23:8b:eb:dc:de:26:e6:
dc:cd:63:bc:70:78:77:3e:b7:25:47:1b:86:8c:92:50:4a:8e:
92:1e:ee:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org