Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ea5926DPyHHfkDFw1GX1SfWArr0.roa
File: Ea5926DPyHHfkDFw1GX1SfWArr0.roa (raw, json)
Hash identifier: 9r969q3xNa5cTjj1IXbv+3TWcznY04REGB8pRytyhng=
Subject key identifier: 11:AE:7D:DB:A0:CF:C8:71:DF:90:31:70:D4:65:F5:49:F5:80:AE:BD
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E72841F7ABA03715765C7A72E5DAF1D47
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ea5926DPyHHfkDFw1GX1SfWArr0.roa
Signing time: Sun 24 Mar 2024 22:10:45 +0000
ROA not before: Sun 24 Mar 2024 22:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:72:84:1f:7a:ba:03:71:57:65:c7:a7:2e:5d:af:1d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 24 22:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11ae7ddba0cfc871df903170d465f549f580aebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e3:1a:21:86:72:fd:70:cd:ff:a2:60:f8:b7:
a1:6c:1b:77:a3:30:8e:0f:7c:89:0e:f1:56:e4:7e:
da:d6:c2:8a:ad:19:5f:1d:f0:2b:9a:e7:e1:e6:85:
60:d2:85:4a:f4:f5:60:38:40:1f:51:85:53:c5:63:
ce:b6:c1:85:6b:c3:23:36:47:3d:b0:8e:2a:1c:b0:
e7:10:ab:a5:d2:e7:7a:48:fd:2f:b6:61:6c:3f:0e:
50:33:c3:5e:f3:ea:f3:27:1a:2e:18:47:15:21:ef:
ba:dd:91:1b:9a:e3:a5:f4:6b:42:43:21:99:78:91:
52:a9:99:57:8d:25:e3:ea:17:30:7e:ae:25:42:48:
99:eb:5e:6c:85:d7:47:53:1f:24:4f:6d:fd:d7:a4:
6c:40:5c:bb:ab:55:20:fb:a4:4c:13:cc:fc:32:8b:
57:a4:9e:e4:53:7f:73:72:63:8d:db:be:04:31:0c:
30:d8:5a:f6:20:02:c6:4b:5f:a4:32:d5:2a:56:30:
b0:22:db:19:0b:61:6f:94:55:a7:9b:cb:b2:14:92:
50:b8:da:41:29:4d:46:bc:53:23:00:dc:70:63:3e:
17:c3:c0:aa:87:32:51:ac:df:ef:8c:62:4b:42:62:
6a:a3:d1:c0:75:52:8f:d7:43:69:c9:5b:60:bb:f6:
7a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AE:7D:DB:A0:CF:C8:71:DF:90:31:70:D4:65:F5:49:F5:80:AE:BD
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Ea5926DPyHHfkDFw1GX1SfWArr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:dd:00:ad:c0:25:bc:be:6c:05:a0:c0:63:b0:e2:34:2b:2d:
7e:49:38:2c:02:80:34:af:0a:b2:04:7d:d8:ea:ee:41:e8:b1:
8b:17:45:5d:98:c1:cf:c8:23:13:ba:bd:2c:95:6f:e2:12:f8:
37:ac:0d:64:77:ab:ae:9c:ad:bb:ba:ea:b6:62:8d:ce:05:00:
61:68:e2:4b:51:0c:44:60:b0:80:3e:af:8e:b6:d7:29:aa:62:
94:c7:0a:4b:98:4f:93:fe:ec:3c:02:a5:33:6a:08:b9:45:4e:
d9:43:5d:55:0a:26:ee:6b:01:3a:f2:c0:ad:fb:2c:43:4b:8e:
02:ca:b7:49:40:75:f1:77:f4:5c:c4:35:22:bb:96:83:cd:ae:
35:09:53:b0:22:03:80:58:9f:bc:0c:a6:7e:01:d8:dd:96:90:
30:b1:31:99:cf:e8:f5:6a:07:7f:e7:b0:64:8d:03:e5:a6:33:
e2:7f:3c:21:23:2d:69:d0:b7:98:9e:b4:7f:1b:da:8e:27:e9:
a2:83:f1:c5:b5:3c:30:d6:08:da:14:37:f4:32:d1:b9:43:b4:
20:7e:ab:bc:a1:9f:f7:7d:69:de:12:5f:53:54:bc:e5:04:e0:
62:f6:6b:a9:2c:f2:42:1b:b4:d8:4c:df:81:5e:e3:ce:5f:76:
c4:ac:7d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org