Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ER0oRVy0x5Dt9_rREiPc-2ycIZc.roa
File: ER0oRVy0x5Dt9_rREiPc-2ycIZc.roa (raw, json)
Hash identifier: ubV7nHn6zTLmMxuyDxrJryDkawIgzjgiG0LU2I+lML8=
Subject key identifier: 11:1D:28:45:5C:B4:C7:90:ED:F7:FA:D1:12:23:DC:FB:6C:9C:21:97
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E927DD9753D9D9BDEA0BC7DB5CEC7B31C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ER0oRVy0x5Dt9_rREiPc-2ycIZc.roa
Signing time: Sun 31 Mar 2024 03:11:44 +0000
ROA not before: Sun 31 Mar 2024 03:11:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:92:7d:d9:75:3d:9d:9b:de:a0:bc:7d:b5:ce:c7:b3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 31 03:11:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=111d28455cb4c790edf7fad11223dcfb6c9c2197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:29:4c:0c:18:33:15:2e:dc:bd:a4:26:ff:
1d:38:7c:63:77:b8:18:ed:d4:56:87:09:52:bc:01:
c3:9e:b1:aa:ef:b0:86:2f:8c:76:37:9f:dc:93:75:
5c:59:d9:19:e5:b6:86:84:28:64:fd:f2:b9:d4:c9:
5b:56:0e:76:d0:b8:ff:ff:e7:07:ae:f3:2f:23:90:
bc:2c:99:11:a9:61:6d:93:fc:e3:f8:1f:2b:f3:10:
d8:97:da:3e:d6:14:fa:fb:00:d0:3a:f9:f0:38:2e:
66:b2:25:23:97:24:72:b2:35:29:49:31:82:bf:71:
11:51:b9:13:31:55:95:06:74:56:d8:f3:62:84:5d:
ec:e9:dd:9f:03:22:ce:3f:c8:cc:5a:e6:99:ea:16:
c4:53:f4:2b:c6:cf:d1:76:3f:ed:7c:ae:d0:91:a3:
c1:a2:73:00:ec:71:c2:d5:9c:f8:81:fc:a6:ba:cb:
f3:29:5a:3e:c2:3a:64:52:4b:62:4f:c3:ee:e0:c1:
15:6e:86:f4:e4:74:9a:14:b0:37:e5:c4:c5:02:ef:
cc:ee:71:6c:d8:9f:0c:e0:ac:c8:a2:24:8c:41:05:
ff:6f:ec:9c:cf:3c:8d:19:ff:62:08:2f:82:09:20:
0e:44:65:3f:d6:bf:8f:0f:53:7d:a0:2e:78:8a:fd:
da:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1D:28:45:5C:B4:C7:90:ED:F7:FA:D1:12:23:DC:FB:6C:9C:21:97
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ER0oRVy0x5Dt9_rREiPc-2ycIZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:40:d7:70:61:c4:c9:ec:e0:09:ed:80:e8:b6:67:18:47:3f:
1a:89:6b:2e:77:94:05:3f:87:f7:d2:57:7e:04:91:b3:82:eb:
2a:5f:93:82:a1:f3:59:78:6d:67:3b:0b:60:5d:d2:8f:07:ab:
7b:cf:f2:53:0b:11:84:e4:b8:64:36:0e:f0:f0:a9:c6:88:ae:
71:bf:9d:c0:48:98:cb:9f:6d:ae:eb:6a:d2:33:50:0f:65:23:
a1:e7:1c:aa:1c:3d:c3:95:5e:b0:81:79:c3:13:ed:51:25:d7:
c0:71:a4:23:de:cf:cc:0a:c2:0d:08:dd:4a:0e:7c:3e:44:de:
33:4f:73:a9:d0:1a:d2:31:7d:f7:32:67:85:96:b0:57:c1:94:
af:73:59:4b:12:46:72:c6:59:66:91:a4:10:88:3a:3a:cc:e8:
f8:6d:ac:b9:bc:d3:75:80:d8:81:2c:99:dd:63:c3:63:7a:38:
62:e7:24:61:bb:b3:af:19:32:e7:cb:ea:4a:97:47:1f:d8:c4:
ec:f2:cf:e0:67:fc:b8:68:57:d5:70:d4:a5:dc:63:51:17:20:
35:b9:48:fb:b0:59:c1:0d:f1:4c:1d:cd:7c:e9:7c:12:64:d5:
2c:3b:b0:de:d3:39:22:2f:34:17:8e:db:f1:2f:36:65:59:e1:
67:2e:35:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org