Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EzkX0GwHDGnGH9KBt-7AtqOMIdg.roa
File: EzkX0GwHDGnGH9KBt-7AtqOMIdg.roa (raw, json)
Hash identifier: vd9oeBrdOy0dPMojNxebGMfcBjIn4pC4TiQVx0/cBv0=
Subject key identifier: 13:39:17:D0:6C:07:0C:69:C6:1F:D2:81:B7:EE:C0:B6:A3:8C:21:D8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D66BCA7C9DAF18DBE3E53A1F1862F115F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EzkX0GwHDGnGH9KBt-7AtqOMIdg.roa
Signing time: Thu 01 Feb 2024 22:14:16 +0000
ROA not before: Thu 01 Feb 2024 22:14:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:66:bc:a7:c9:da:f1:8d:be:3e:53:a1:f1:86:2f:11:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 1 22:14:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=133917d06c070c69c61fd281b7eec0b6a38c21d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:15:73:6c:43:c2:76:8b:95:b6:c6:7c:ed:c9:
e5:1f:be:65:3a:a5:93:f2:54:b0:e4:10:a4:94:31:
65:59:f4:e3:7d:e2:1d:f1:31:6e:b0:90:88:10:57:
2d:b9:fd:1e:73:17:b3:a6:cf:26:b7:55:31:86:a2:
79:b0:1d:00:29:49:af:03:44:e7:f0:11:1c:4c:1b:
0c:b8:a9:6d:54:32:98:6f:ad:b3:a6:e8:34:5f:a8:
b2:6b:23:0c:63:f8:aa:82:9d:13:92:e8:63:9a:24:
d1:f8:52:72:8c:ec:a4:7a:f5:82:01:8c:cd:09:c6:
5f:2e:b3:4d:0c:2c:08:c4:9c:52:fa:2f:93:1e:ba:
bc:1e:af:f4:04:36:cc:c4:7f:0b:c6:c0:7c:1c:77:
73:16:43:ff:06:c2:3b:57:8d:5e:2b:51:b3:85:5c:
e2:da:fd:b0:3d:19:31:44:d4:6a:7d:e0:87:db:77:
d1:67:3a:bb:2b:95:f2:f9:97:fd:02:8b:dc:cd:fe:
07:61:52:89:c9:07:52:7f:bc:00:65:d9:71:8d:8d:
00:b8:38:45:c9:5d:63:5e:da:8f:18:b8:16:44:c1:
2d:52:b0:73:53:3c:8b:61:66:f1:9a:b7:dc:9d:fa:
84:14:4e:e9:0e:e2:73:1f:0e:b8:35:b6:f8:b5:b1:
23:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:39:17:D0:6C:07:0C:69:C6:1F:D2:81:B7:EE:C0:B6:A3:8C:21:D8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EzkX0GwHDGnGH9KBt-7AtqOMIdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:e2:eb:66:76:ed:2f:30:a3:76:b4:8a:22:c4:17:ff:e7:0b:
03:c3:b6:de:e8:d1:35:9e:e4:03:d9:08:a1:0d:ef:70:7b:ed:
b1:94:5d:e3:63:4f:c6:87:da:d4:88:2c:0e:07:44:52:00:cf:
54:1d:ff:a1:d1:7b:34:f3:a0:84:ae:ec:f6:ef:25:99:3c:e5:
3d:d8:1b:a9:10:ff:32:12:1f:53:e6:40:10:58:e2:a3:0d:73:
0b:f9:55:5c:4c:90:16:17:7d:e6:a0:f8:cc:68:4b:32:19:09:
03:d0:f5:70:cd:c2:83:d6:91:b5:7b:c2:95:56:90:9d:3e:05:
b3:f6:56:51:e3:22:1d:6c:26:33:f8:9e:5b:e2:78:4a:14:62:
27:a4:a1:0d:41:48:55:a0:fc:2b:41:61:c4:2e:66:5e:2d:92:
62:32:17:32:67:27:76:db:c3:d7:cb:24:60:5f:76:52:e7:e0:
f5:4f:01:d4:94:65:96:c4:5a:09:1b:46:9e:4f:aa:25:c2:ad:
61:01:b5:88:19:b6:30:d7:89:79:90:ed:65:2f:49:4b:80:bc:
3e:89:7d:46:46:83:e7:89:c2:90:77:07:7a:b9:65:8f:b9:13:
e9:10:13:30:89:b2:aa:81:d1:dc:bc:af:77:c6:a4:5d:e6:4b:
00:c0:d7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org