Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Fae4ZBkeGJdaFchBBLeme_PfLgk.roa
File: Fae4ZBkeGJdaFchBBLeme_PfLgk.roa (raw, json)
Hash identifier: gFg0oosDA6Rly6CtvtIuHObg1eHc6ElZXTq51YmcqAs=
Subject key identifier: 15:A7:B8:64:19:1E:18:97:5A:15:C8:41:04:B7:A6:7B:F3:DF:2E:09
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DE51FE20DA5873BB2DB32953E27EA35DA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Fae4ZBkeGJdaFchBBLeme_PfLgk.roa
Signing time: Mon 26 Feb 2024 11:14:48 +0000
ROA not before: Mon 26 Feb 2024 11:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:1f:e2:0d:a5:87:3b:b2:db:32:95:3e:27:ea:35:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 26 11:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15a7b864191e18975a15c84104b7a67bf3df2e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0c:44:ba:cc:1a:55:57:d2:9e:f6:9f:ea:6f:
7f:0f:14:82:52:d0:fd:d9:87:0d:54:bf:10:92:25:
2c:d7:4b:5f:2e:43:26:d9:2c:79:3c:50:93:a4:da:
46:0e:d1:da:39:c4:b3:81:55:eb:0b:76:3e:9c:13:
2a:49:fa:7c:1f:b8:71:77:65:8e:cd:a2:bf:de:ed:
19:5d:d5:1e:00:46:a3:c8:fe:a4:b1:ec:ab:e7:56:
8e:fd:bb:20:58:ea:fb:82:fe:d2:10:9b:8b:33:82:
59:ae:09:fa:9c:2c:f9:db:75:57:7f:88:08:84:3a:
61:ed:9f:16:c2:31:51:cb:6b:48:0d:bd:47:5b:27:
94:88:cb:92:47:57:e5:0f:4f:7a:be:28:46:26:d4:
86:0c:de:8a:94:dc:fa:5d:3d:e4:1a:8d:34:a7:69:
e2:7c:2b:44:e7:9f:4d:63:5e:33:0e:66:82:ad:6c:
ef:5e:12:af:2d:d1:f2:37:ac:c3:8e:7e:85:f8:4c:
14:50:1a:52:4b:72:91:40:38:f8:f2:9b:0d:78:70:
cd:76:c2:6b:ef:1e:06:93:2b:40:43:ae:87:35:20:
36:cc:1d:d9:a4:99:d2:2a:43:04:31:ec:22:0e:32:
17:e2:ab:21:b5:0c:dc:e1:5a:cd:44:d6:7a:57:d1:
d9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A7:B8:64:19:1E:18:97:5A:15:C8:41:04:B7:A6:7B:F3:DF:2E:09
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Fae4ZBkeGJdaFchBBLeme_PfLgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:38:63:eb:da:b0:7e:e1:65:a7:58:2d:e4:26:92:a9:21:1c:
bb:1c:b6:1b:7f:29:84:88:cd:a6:da:c9:ee:4a:1a:06:f3:5b:
d3:fd:04:0c:3b:b6:45:99:98:4c:87:b0:6d:f9:cb:45:21:06:
90:c5:d2:2c:62:aa:bf:14:b6:b4:16:ad:88:9f:ec:e0:01:73:
bf:a7:70:7c:7f:5a:ae:77:e9:64:71:ab:97:ea:48:d6:a7:0a:
62:81:f9:d2:39:ed:ff:a7:12:fa:4c:37:47:e4:63:35:8a:67:
3e:a1:5f:04:13:10:5d:fb:f7:3c:c0:f2:63:cb:bd:62:6e:ee:
90:e4:2d:b5:55:a3:4b:30:56:56:63:95:0c:c4:01:65:95:05:
f6:ff:09:4e:e5:2a:1d:a3:6e:f3:7d:0b:7f:43:ee:ac:74:25:
d6:bc:eb:50:4f:47:2f:55:c6:4d:a1:5e:41:fb:2b:aa:43:16:
60:a7:2c:0c:94:46:47:01:9f:b9:dc:2c:e6:fb:ca:ab:46:f7:
04:51:fa:97:b6:3b:7c:60:4e:83:cf:f3:10:a6:1e:45:22:f6:
0f:eb:1f:64:84:19:cd:40:67:e2:2c:6c:17:44:b6:04:1c:0f:
52:9d:95:99:3f:45:7d:25:d3:08:c5:22:d7:88:f4:97:29:15:
77:31:5f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org