Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FFSwlH9EgMByvhiog-YBNMxN77g.roa
File: FFSwlH9EgMByvhiog-YBNMxN77g.roa (raw, json)
Hash identifier: ga7JQqwsCd7UEoH4dT1V29rg2bHdkJSMi2/q0x4bKts=
Subject key identifier: 14:54:B0:94:7F:44:80:C0:72:BE:18:A8:83:E6:01:34:CC:4D:EF:B8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C891400164B4321A95693C4D66BA2BBFF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FFSwlH9EgMByvhiog-YBNMxN77g.roa
Signing time: Wed 20 Dec 2023 21:13:58 +0000
ROA not before: Wed 20 Dec 2023 21:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:89:14:00:16:4b:43:21:a9:56:93:c4:d6:6b:a2:bb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 20 21:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1454b0947f4480c072be18a883e60134cc4defb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1f:41:65:b0:93:3d:ca:ae:c3:cf:54:47:12:
49:6d:be:8c:7f:77:39:bf:73:bb:5f:b8:94:6a:b2:
25:b2:b9:49:95:be:fe:59:03:fd:1d:71:fd:20:36:
a6:34:00:af:c8:a2:57:9d:e9:25:81:c7:6f:f2:d7:
16:94:49:e2:5c:47:a3:57:5c:3f:65:31:5f:0b:83:
8a:64:39:02:ab:92:8d:00:1b:06:58:e4:9b:0d:79:
bc:4b:b3:3e:6f:40:9b:e9:cb:74:d5:b2:d8:90:af:
6d:3d:dc:09:87:11:34:53:38:29:c8:42:7c:51:32:
ae:c1:d5:01:32:d8:6c:0f:b6:49:a4:af:e2:e6:2f:
3f:f8:a2:04:22:0f:2a:91:d2:46:da:50:9f:ac:d1:
12:1a:82:93:b3:37:86:ea:28:2f:d4:2a:ed:9a:e2:
9d:be:53:98:69:89:b1:47:df:f6:26:6a:85:eb:7d:
2b:f4:48:1f:c8:f2:d2:8b:77:03:8c:a7:45:28:47:
81:87:14:3d:87:5a:42:46:52:45:7a:4c:39:d2:89:
bb:2c:9e:db:2b:61:27:43:74:44:03:14:f8:f7:ff:
fe:ef:b6:3e:00:70:63:53:30:d4:70:34:a7:06:62:
0c:aa:99:34:64:cc:29:c1:d1:4a:af:d7:53:71:5a:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:54:B0:94:7F:44:80:C0:72:BE:18:A8:83:E6:01:34:CC:4D:EF:B8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FFSwlH9EgMByvhiog-YBNMxN77g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:ff:1c:41:00:b5:91:e6:aa:1e:42:a8:5e:3d:6d:84:fe:53:
c1:74:63:31:c9:09:c1:18:22:b1:a8:f0:db:af:3f:1e:c6:5c:
9a:8d:d3:da:3c:76:6d:31:05:fd:79:0a:6a:e5:51:e9:63:df:
65:7c:71:af:67:fb:a1:7c:4e:52:79:59:7a:97:0a:6c:5c:3f:
ba:4a:a2:03:96:df:6b:f0:14:a7:42:81:79:17:2a:0f:eb:54:
0d:74:32:a4:73:fa:a3:9a:7b:8d:d2:bc:58:c5:ce:d4:d1:47:
f0:a6:13:45:40:5d:90:84:c0:8d:72:0f:88:17:29:c2:d8:fe:
a7:35:84:bd:9a:78:a6:b1:5b:61:9f:29:8d:95:4c:22:ab:cf:
30:66:0b:24:ae:50:71:0b:bf:72:79:f5:01:2c:db:44:f3:4b:
94:d8:dd:25:22:8c:bd:53:56:b3:6f:63:f6:77:3e:84:35:07:
8e:66:68:4b:ab:61:cd:ec:0f:d2:91:e2:29:f1:36:9e:d1:7f:
a9:1f:67:e6:57:48:0f:11:6c:ec:db:5e:c5:f9:1b:1b:79:30:
49:af:1a:26:7a:1b:79:6e:65:e5:90:4f:ea:a9:ef:f8:11:3d:
ed:59:c0:5e:87:af:fa:44:75:98:1e:68:a0:f5:67:83:96:49:
7e:88:ce:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:50 2024 by rpki-client on console-ams.rpki-client.org