Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FZNkBhytpZ_WQPyTahmf3ikxHAk.roa
File: FZNkBhytpZ_WQPyTahmf3ikxHAk.roa (raw, json)
Hash identifier: PgEwJBKxADt3yfXvhtU5gylr5OaMBFoDDiGFS2xfTyQ=
Subject key identifier: 15:93:64:06:1C:AD:A5:9F:D6:40:FC:93:6A:19:9F:DE:29:31:1C:09
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB2B4BBF0DDD17D2CB317ABD543587EC5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FZNkBhytpZ_WQPyTahmf3ikxHAk.roa
Signing time: Thu 28 Dec 2023 23:13:58 +0000
ROA not before: Thu 28 Dec 2023 23:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b2:b4:bb:f0:dd:d1:7d:2c:b3:17:ab:d5:43:58:7e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 28 23:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=159364061cada59fd640fc936a199fde29311c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:7d:8d:c1:c3:03:ef:a5:22:e5:e1:d6:63:
c1:6d:cf:de:b0:6c:27:ca:5d:ef:f9:39:41:1b:86:
03:79:e1:81:c4:96:35:82:9a:e3:4f:e5:1e:6f:97:
2b:50:9d:0c:60:40:6d:ab:fe:a0:22:34:ee:95:35:
06:94:b1:e4:3d:7f:88:bd:ce:b3:b4:83:c3:89:f8:
b6:1c:b9:0d:3a:e6:51:27:7d:bd:ed:fc:c4:7c:bb:
7e:d8:6a:ac:b5:b2:7a:1d:7a:19:c4:47:1f:02:87:
90:d5:51:d8:d0:34:94:01:ec:82:15:e1:fb:da:53:
15:98:7c:f7:ee:73:18:be:40:60:17:cd:1a:a1:51:
85:84:fb:b4:59:bd:75:74:a8:a6:1e:8d:0c:87:ad:
3e:55:5f:17:bd:a7:c4:4a:57:2a:7a:cb:4d:fe:a4:
0b:f2:87:e5:fe:2d:7e:b0:ff:e9:34:a7:45:c2:83:
83:b5:dc:07:0a:1a:8b:34:9d:4a:7c:c4:fd:d3:06:
b8:38:a9:c6:86:59:8c:d1:3f:9f:e5:67:ed:d6:50:
46:4a:fe:cf:b7:2e:48:07:e6:7c:27:4e:59:c1:50:
92:65:c2:21:57:7e:d2:c6:34:57:98:c6:75:3e:76:
11:2f:6f:91:b3:de:8f:3b:cd:d8:9d:25:0e:d0:31:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:93:64:06:1C:AD:A5:9F:D6:40:FC:93:6A:19:9F:DE:29:31:1C:09
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FZNkBhytpZ_WQPyTahmf3ikxHAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:83:2e:04:d0:83:83:1a:e8:16:5c:bd:98:bf:50:80:38:17:
4a:d5:2e:4b:3d:60:71:f6:01:ec:00:b0:f1:fc:ae:96:52:9f:
4b:99:a2:21:52:96:c5:44:b3:99:40:d2:f0:35:7e:21:81:9b:
74:d9:66:c1:71:60:01:af:bf:0f:64:3b:c8:69:9c:26:e3:54:
86:6b:2f:ee:ba:f2:88:43:e1:c1:61:28:fd:6d:77:c7:a8:70:
2b:7f:23:51:67:f5:94:a8:92:06:a9:1b:d9:ef:d5:02:a5:b1:
03:8f:4f:08:7b:61:47:2a:0e:d1:6b:fb:04:73:4a:17:a9:91:
f2:84:01:a5:1c:57:a0:c7:6a:8d:41:5f:be:6c:42:5e:79:8d:
39:98:ad:ad:0e:06:65:d0:95:63:87:98:61:91:59:a0:02:60:
a3:86:dd:8e:7a:f8:a2:27:07:3e:56:55:24:a6:81:7e:11:41:
9d:af:8b:c1:73:ef:bd:4d:64:bc:ca:c8:9b:6a:79:33:7f:ef:
3e:55:44:4b:a2:1c:cb:02:1f:f5:52:a9:bf:99:d0:92:05:03:
9f:02:55:1b:f8:76:99:84:f5:f2:60:46:ae:28:9e:1c:0f:40:
5c:f6:cc:af:a9:4d:12:43:3f:a0:cf:4b:3d:4d:d3:0d:d1:ff:
80:dd:c7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:50 2024 by rpki-client on console-ams.rpki-client.org