Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Dh5Yp2rVqxQeOqwF8-TJ9KccB-s.roa
File: Dh5Yp2rVqxQeOqwF8-TJ9KccB-s.roa (raw, json)
Hash identifier: 0KwfX60st1iFo0dw9eKaY7YrN5wS7FArlxZdDDyJeWA=
Subject key identifier: 0E:1E:58:A7:6A:D5:AB:14:1E:3A:AC:05:F3:E4:C9:F4:A7:1C:07:EB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9923A19F3A859825819D5118BE7F71BF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Dh5Yp2rVqxQeOqwF8-TJ9KccB-s.roa
Signing time: Sun 24 Dec 2023 00:04:58 +0000
ROA not before: Sun 24 Dec 2023 00:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:9922:fbae/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:99:23:a1:9f:3a:85:98:25:81:9d:51:18:be:7f:71:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 24 00:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e1e58a76ad5ab141e3aac05f3e4c9f4a71c07eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2c:f0:f0:8d:1c:5c:6d:5a:45:1e:28:b9:65:
4a:5b:fd:43:7d:81:30:02:0d:b6:5e:e2:2a:83:91:
05:0e:be:93:ac:63:80:b5:60:76:17:24:14:66:a0:
ec:4e:23:2b:99:d4:c0:b5:61:18:47:ce:0b:76:f4:
1d:b6:ee:10:d0:b3:db:b6:11:3b:6e:66:c5:6d:db:
39:41:99:24:6b:64:59:62:79:59:30:4e:0a:d2:0b:
da:73:e9:a4:c4:5e:0a:b1:f8:93:05:7c:13:2b:5c:
45:bb:36:d8:f5:0c:db:94:75:c4:e6:a7:ad:60:3d:
ee:42:77:ba:4f:76:6a:76:a5:2b:4c:71:01:70:a5:
a8:32:07:60:43:53:98:2c:90:ce:34:9a:a2:6b:12:
2a:41:5d:49:b9:df:87:9c:f0:78:03:c9:40:c4:33:
38:a2:18:60:6c:3a:b7:3a:ac:1d:0a:d3:cf:08:cf:
5e:7b:f1:78:53:87:f7:58:36:3e:f7:fa:53:5c:f3:
09:4a:22:7c:6d:57:88:55:d5:44:0e:35:10:70:75:
fb:47:2f:e9:9b:1b:49:72:b4:07:52:ff:ae:f6:8d:
78:d3:b3:85:e9:96:90:46:0d:59:a1:c8:25:3c:bb:
03:99:3a:12:fb:e3:d6:2f:b0:50:a8:01:04:08:d9:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1E:58:A7:6A:D5:AB:14:1E:3A:AC:05:F3:E4:C9:F4:A7:1C:07:EB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Dh5Yp2rVqxQeOqwF8-TJ9KccB-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:34:b6:14:92:b7:be:ca:d2:6e:2e:28:9d:36:71:93:f4:70:
0b:4f:2b:c3:e7:f5:b7:86:a3:84:e8:6e:e2:7a:51:77:6c:ec:
bc:52:c7:0b:f5:65:0d:45:3d:42:f0:5a:a4:f8:56:4b:41:65:
18:03:24:41:40:90:42:8b:09:46:b6:a3:ab:f5:7e:e7:0c:90:
4d:85:b4:c4:ea:bb:2e:a4:e1:7e:e0:39:08:54:c2:27:5d:28:
9b:0f:34:96:1e:3c:cc:ea:82:65:36:cf:2d:dc:4c:01:eb:d0:
cb:db:84:69:c4:27:97:a2:bb:9a:87:c7:00:c7:2e:a2:b3:ee:
28:c6:46:5d:06:3f:ee:e1:10:03:3e:89:ed:bd:a6:22:02:d0:
58:7b:5b:ef:88:14:d6:16:9c:99:4a:b1:4e:8f:b2:b5:6e:82:
24:ab:05:6a:2d:24:df:5a:d1:00:4d:91:d4:fd:06:4f:13:bc:
be:4f:db:3a:79:f5:dd:1d:bf:70:68:ee:70:fb:a5:4b:63:e1:
8a:38:9e:a8:ec:e5:af:31:ee:79:39:e2:5f:47:44:1a:19:e2:
b9:b8:86:d2:e7:25:73:c4:24:fd:93:2d:5a:9b:09:65:89:ea:
3f:4b:20:92:58:ab:28:89:7a:fe:90:95:bd:e8:88:c8:8a:21:
fb:0f:76:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org