Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FUKIXIWDChnx_8aInBF6lQpHTxk.roa
File: FUKIXIWDChnx_8aInBF6lQpHTxk.roa (raw, json)
Hash identifier: 7eVHnsVpEffeHR+vRkl44tqddRjlGgTjLUOYVFmDqMU=
Subject key identifier: 15:42:88:5C:85:83:0A:19:F1:FF:C6:88:9C:11:7A:95:0A:47:4F:19
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DC0004E0EB13905720C671F894A08A35D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FUKIXIWDChnx_8aInBF6lQpHTxk.roa
Signing time: Mon 19 Feb 2024 06:14:21 +0000
ROA not before: Mon 19 Feb 2024 06:14:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:00:4e:0e:b1:39:05:72:0c:67:1f:89:4a:08:a3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 19 06:14:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1542885c85830a19f1ffc6889c117a950a474f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0a:b8:70:89:83:23:21:b4:0a:62:e3:d6:63:
85:57:ac:74:89:52:51:63:d7:c2:a2:6c:12:74:83:
f0:62:1b:29:ff:b0:44:1b:1a:2c:03:fa:4e:2d:20:
b3:d1:99:b4:77:ca:bb:3c:bc:a3:0b:d3:f3:93:44:
d0:5c:8c:06:d6:92:d5:98:cf:2b:36:eb:8a:48:94:
58:f5:01:b2:bf:3a:10:d0:81:d8:58:78:11:c2:31:
85:a5:98:36:5a:ce:4d:e5:00:f6:85:d3:00:c7:72:
47:b0:23:0f:8a:a3:94:98:d4:5c:0a:fa:19:a8:eb:
d0:2b:36:3b:84:85:7c:f5:1d:43:b5:12:26:a8:a2:
6b:1b:d4:a4:ab:49:12:48:79:f7:52:40:d0:c1:c1:
75:9e:b0:5e:63:7d:f7:22:b8:f9:3c:38:56:4f:63:
64:d7:36:32:f1:32:e0:d8:bf:05:22:b5:16:20:26:
a4:45:55:2d:35:15:77:3f:d0:4b:1b:55:e8:41:30:
e1:71:0b:d9:29:d3:4f:b1:c2:d1:7b:76:14:77:48:
86:fc:3a:c0:26:fc:52:f5:3f:4b:23:f5:db:6e:da:
02:d6:9b:4c:84:27:b8:4d:cb:fa:11:95:4b:33:e8:
4c:13:88:e1:1f:83:ea:03:ac:9a:01:69:0c:89:f5:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:42:88:5C:85:83:0A:19:F1:FF:C6:88:9C:11:7A:95:0A:47:4F:19
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FUKIXIWDChnx_8aInBF6lQpHTxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:93:18:a4:3f:0f:b4:89:d1:dc:b4:56:16:51:c2:ce:ea:6c:
fc:9a:f0:15:f0:8b:e5:c1:ab:b3:37:1b:44:2e:d8:da:94:cd:
42:3b:fc:a9:0a:dd:92:6f:cd:33:9c:1d:6f:bd:44:df:62:06:
ed:2c:4f:89:b5:96:b1:4b:71:7a:38:61:61:13:72:8d:61:78:
67:05:4a:8f:da:a7:c3:29:d1:15:bf:04:fc:c0:bd:72:e5:6d:
dd:89:9e:b8:91:44:2a:54:bb:9a:d3:00:63:e7:dc:38:02:c7:
e9:ca:e9:52:6c:de:aa:e5:93:e7:83:c3:55:30:67:c2:1a:da:
bb:3a:5d:2e:54:06:72:64:61:6b:09:5d:e4:f3:80:39:5a:4f:
ab:9c:73:f7:ae:bc:15:8e:48:fb:21:45:24:a4:3a:28:04:60:
ee:3e:57:dd:4c:b2:f1:a3:5d:c5:83:5f:d9:ac:6c:58:1f:5c:
21:80:34:0a:35:69:56:69:55:a8:b5:48:60:32:25:66:2d:6e:
bc:ba:5c:b5:63:0f:ed:0e:c1:e7:af:45:66:e0:df:13:2e:30:
71:ea:44:67:cb:55:80:39:d3:55:8c:e1:32:6f:10:98:31:22:
b2:f2:fc:d8:6b:7c:1e:99:20:e5:66:dc:22:2a:24:d8:cf:dd:
5b:93:38:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org