Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Eh2xn1nfr4dw2Y0-vA1syrJFYLs.roa
File: Eh2xn1nfr4dw2Y0-vA1syrJFYLs.roa (raw, json)
Hash identifier: Uuvrv3Rpfz/S42Y8guPP0yGyfHdJARj9SAWd8cKQuow=
Subject key identifier: 12:1D:B1:9F:59:DF:AF:87:70:D9:8D:3E:BC:0D:6C:CA:B2:45:60:BB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB3C84EE2428E439AAB3E733B45296C5C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Eh2xn1nfr4dw2Y0-vA1syrJFYLs.roa
Signing time: Fri 29 Dec 2023 04:14:58 +0000
ROA not before: Fri 29 Dec 2023 04:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b3:c8:4e:e2:42:8e:43:9a:ab:3e:73:3b:45:29:6c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 29 04:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=121db19f59dfaf8770d98d3ebc0d6ccab24560bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1b:fc:62:77:32:76:41:65:08:c1:c6:00:b5:
23:29:c0:17:c1:3d:db:7a:84:f8:9b:cc:5b:d2:d8:
34:bd:ca:d9:61:e2:27:c3:3e:ea:1c:de:05:38:fb:
1a:c3:d5:8a:a9:5f:2d:18:07:7e:fa:ff:9d:78:c5:
d5:b2:f7:6b:29:47:39:a2:22:a0:55:9a:89:db:c4:
90:61:4f:c9:8d:fe:f2:89:ad:2d:a4:05:90:8c:be:
24:ae:a9:69:11:69:0c:2a:aa:86:72:ff:e5:3c:c8:
99:a1:5b:a3:41:75:11:28:5c:1c:23:55:56:f0:fc:
b3:91:43:91:16:92:f9:22:04:67:46:82:43:f9:d1:
02:b3:18:73:a3:83:ea:11:f7:49:72:cd:82:e5:0f:
7d:00:48:4b:28:2d:2c:4a:86:b0:ab:b9:43:cd:95:
85:30:19:90:fb:ee:3d:c4:ac:b5:14:5e:13:00:2b:
00:8a:81:5b:3b:4a:64:02:8e:b2:0e:64:6d:e1:77:
15:0b:f3:33:96:52:22:5f:65:c7:08:74:70:db:94:
68:75:b5:be:8a:df:27:0b:59:09:65:1a:c8:11:66:
5d:45:90:72:26:1e:02:4e:a1:de:12:c6:18:f2:83:
64:91:d8:2c:20:80:43:08:0e:c9:b4:b0:8c:38:90:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1D:B1:9F:59:DF:AF:87:70:D9:8D:3E:BC:0D:6C:CA:B2:45:60:BB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Eh2xn1nfr4dw2Y0-vA1syrJFYLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:62:8c:67:b8:d3:04:5d:33:fb:c6:26:48:48:b9:1e:e1:bc:
fd:81:ea:db:2e:e8:96:fa:e0:26:7d:24:ea:df:44:58:dd:d5:
38:88:32:2e:b2:49:f7:af:05:f0:d2:82:84:63:be:e8:31:3f:
f0:cd:9b:55:1d:43:b0:00:db:78:57:60:4b:5f:41:3b:f5:74:
b1:e7:c8:3b:a0:45:6f:6c:d2:98:23:54:30:d7:b6:64:d0:c8:
b5:77:92:a0:94:1c:72:a6:51:d7:9b:0c:18:f6:1e:98:70:f0:
22:b3:64:36:99:5b:68:b9:65:85:b0:cb:d2:f4:71:bb:20:b5:
5f:25:a8:14:f8:ed:6d:80:5a:03:ae:09:ea:f2:9d:c0:fe:99:
19:4d:15:95:88:ff:3f:ed:24:7f:81:f2:c3:a1:0d:93:f3:44:
39:3c:87:e2:5a:fb:27:d2:53:0e:c2:e0:bd:d9:65:ae:4b:88:
b9:49:b6:d2:10:cf:f4:35:14:78:a5:8b:73:01:2c:36:a8:ea:
26:fd:05:d5:b5:5c:58:02:2c:fb:ac:7d:bc:c9:6c:bd:ab:97:
e2:75:7b:46:a9:a4:75:b8:31:ac:95:d4:b2:75:a9:d8:ab:0c:
8a:21:27:65:8c:f5:86:da:5a:92:bc:36:c0:ca:1e:09:ad:a5:
17:ca:49:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org