Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FS7Qm3Rw82CU1SuoOsAa_vYftdI.roa
File: FS7Qm3Rw82CU1SuoOsAa_vYftdI.roa (raw, json)
Hash identifier: HQRjUHF+Dsw3zz5fhHjX49/oum/nAgXHvo1/mNwAapk=
Subject key identifier: 15:2E:D0:9B:74:70:F3:60:94:D5:2B:A8:3A:C0:1A:FE:F6:1F:B5:D2
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E461B1A77BC43B837727419C677909B76
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FS7Qm3Rw82CU1SuoOsAa_vYftdI.roa
Signing time: Sat 16 Mar 2024 07:12:45 +0000
ROA not before: Sat 16 Mar 2024 07:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:46:1b:1a:77:bc:43:b8:37:72:74:19:c6:77:90:9b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 16 07:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=152ed09b7470f36094d52ba83ac01afef61fb5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3f:2d:0b:9f:2e:2c:db:c5:6e:0f:47:6a:79:
35:e6:f7:0f:dd:64:d5:87:80:59:6e:a1:4a:49:29:
d5:20:2b:56:5e:2e:a0:23:69:cb:28:c8:ba:6b:b9:
7c:8b:c7:1d:00:6f:bc:cc:34:19:87:f8:dd:e9:40:
b1:e2:f8:79:48:9c:88:fb:5d:b3:fa:fc:95:51:7b:
c0:8a:f8:c8:b1:89:02:a4:f9:7e:f6:93:76:13:08:
30:1d:f0:48:6b:ea:73:bc:46:10:62:c0:78:74:f3:
13:7d:32:2f:5b:bd:0d:47:fb:9e:27:80:3c:5d:29:
89:33:e9:c0:af:4b:65:81:3e:b7:7a:07:4e:3e:0b:
cb:c0:5b:1f:89:5f:74:9f:2d:fe:b6:9b:fc:17:47:
9e:76:3d:fd:32:db:47:54:1a:da:e3:a2:f7:d1:14:
51:07:cf:6d:3f:99:4f:f1:b0:78:db:88:40:8f:cb:
b9:87:a1:cf:ff:42:06:78:bd:09:4e:6d:22:04:27:
a0:16:4d:39:6e:74:2e:21:ba:32:7d:fc:dd:3c:b3:
62:91:6d:ab:0f:e2:92:a0:97:ba:a4:57:ec:81:4f:
78:13:4f:bc:51:e6:12:a8:24:7a:0e:ec:a4:46:f7:
5a:c2:0f:3c:9d:2d:06:9a:26:fe:db:e4:39:f0:d0:
22:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2E:D0:9B:74:70:F3:60:94:D5:2B:A8:3A:C0:1A:FE:F6:1F:B5:D2
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FS7Qm3Rw82CU1SuoOsAa_vYftdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:82:e4:cf:d4:fc:d2:43:dd:8a:81:6e:16:38:af:2c:0a:86:
e0:1c:48:ce:ac:a1:ea:49:04:23:6f:45:91:23:41:71:40:3f:
a6:71:c9:63:d4:ec:81:40:c6:37:6b:56:d3:2e:31:35:dc:fe:
65:c4:28:17:f8:f8:39:50:bc:de:2e:e0:0b:5f:b8:8f:5b:fe:
b4:fc:61:b3:c1:28:d1:11:84:89:97:d0:1d:63:17:92:44:5f:
41:bd:ba:ea:6a:78:72:a3:7e:44:00:9b:71:94:f7:be:8d:fe:
ad:a3:31:47:25:8c:24:93:ab:fa:a0:1c:14:e2:48:01:70:a7:
68:35:bb:43:fc:2d:99:49:bd:ac:fc:bc:d8:ad:e6:6b:a8:33:
07:05:d0:ab:34:36:ca:a0:cb:f1:56:29:b6:f4:d0:f8:3f:37:
b3:bb:7e:08:2d:57:cb:4d:85:86:ff:17:86:5a:59:7d:2c:2c:
dc:08:c0:ab:f0:71:3c:1e:42:1e:cd:6f:1b:1d:78:81:6c:90:
a0:9c:96:3c:57:21:c9:98:da:93:cd:6e:e8:8e:28:26:63:1c:
a3:0b:c6:77:a5:79:96:65:dd:9a:81:6e:97:41:28:98:0d:bb:
6a:04:d7:e1:e2:94:46:72:80:ee:c9:c0:c3:16:af:37:ab:cc:
6f:81:8a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:50 2024 by rpki-client on console-ams.rpki-client.org