Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FrEQ4vxCz9L7I1hLgR1N09jE57o.roa
File: FrEQ4vxCz9L7I1hLgR1N09jE57o.roa (raw, json)
Hash identifier: D4U0AHqCbWKU/pyORsjVfofNE5mwRHK6J5a3AXvWvdc=
Subject key identifier: 16:B1:10:E2:FC:42:CF:D2:FB:23:58:4B:81:1D:4D:D3:D8:C4:E7:BA
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E276FEBE722E2D5F47E23BC89A1787C0A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FrEQ4vxCz9L7I1hLgR1N09jE57o.roa
Signing time: Sun 10 Mar 2024 08:17:10 +0000
ROA not before: Sun 10 Mar 2024 08:17:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:27:6f:eb:e7:22:e2:d5:f4:7e:23:bc:89:a1:78:7c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 10 08:17:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16b110e2fc42cfd2fb23584b811d4dd3d8c4e7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f4:6f:c2:7e:a0:ca:52:ad:77:6c:b3:f8:b7:
1e:bc:90:48:b5:a0:00:94:32:a0:43:22:dd:8e:87:
47:ba:b1:11:23:cc:cf:ee:c0:30:00:c6:fe:c4:83:
f5:98:35:41:64:5d:08:92:d2:89:76:a1:55:1a:61:
74:2c:85:1e:ac:26:37:a8:bb:0c:25:53:27:0e:39:
81:2f:1a:4a:fb:c0:86:57:90:2f:11:f3:8c:96:7e:
fc:35:4c:e8:0b:99:a2:06:65:9f:d9:01:06:f5:e3:
e0:47:9c:85:00:04:b6:4c:b2:4e:c1:db:23:66:d7:
3c:3e:51:ad:7f:4c:23:12:58:64:fc:8e:c2:63:d4:
46:b6:48:c2:cb:db:77:b3:b7:b9:a1:db:05:bb:ef:
80:02:08:c0:a2:26:a7:67:fa:a2:0c:1b:a6:c4:cc:
8f:9f:23:ec:b8:51:92:11:9a:06:16:12:68:3e:66:
7c:23:bc:41:5f:e8:0c:be:df:c3:e5:68:77:2d:e2:
9c:00:76:03:7e:d6:71:9d:5e:48:83:19:ac:29:ef:
63:db:40:d6:ff:5e:d1:b2:29:e7:03:8e:31:da:84:
1b:d4:f3:3f:38:f4:5e:bd:d3:3c:cf:ed:64:bf:fc:
c3:2e:a7:29:50:b9:f3:82:c5:fc:16:87:20:73:a7:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B1:10:E2:FC:42:CF:D2:FB:23:58:4B:81:1D:4D:D3:D8:C4:E7:BA
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FrEQ4vxCz9L7I1hLgR1N09jE57o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:88:9b:fb:89:df:84:94:0e:32:64:f3:4b:4f:1c:15:f6:48:
41:92:05:5b:a5:c6:56:03:ca:b4:45:11:49:c4:23:55:3c:4b:
54:4f:7a:66:d7:8b:8d:a7:91:b0:19:1d:0f:9d:31:6f:87:26:
85:90:0f:bb:a6:48:bd:e1:03:ae:62:9a:b1:62:07:08:3a:3c:
fe:e5:ea:cc:f3:eb:22:e0:6a:21:f1:22:19:13:9a:ff:47:1d:
cc:3c:13:33:98:63:4f:96:c8:cb:fa:68:60:5d:f9:35:c5:74:
74:19:57:13:7e:d4:e0:aa:93:d8:ad:22:7d:d0:fa:c2:ee:29:
ab:30:4d:d7:d1:0d:25:26:48:a9:62:dc:fb:2b:66:92:c1:45:
9d:11:ad:24:b5:1f:76:f2:1f:c5:6d:0e:7c:27:e9:07:5e:58:
37:47:6c:62:b9:e2:b8:77:7f:70:9a:63:f8:43:ee:d7:34:21:
2c:d7:93:05:85:0e:16:b6:ac:6f:8c:13:c3:a2:55:3d:27:26:
90:02:d8:91:df:72:33:ca:35:95:54:96:44:8a:99:27:f3:6d:
d3:42:34:07:fc:dc:9c:13:bd:11:73:20:ff:b8:1b:62:5f:58:
e1:0b:1c:58:79:4b:9e:01:99:10:f6:a6:83:c0:cb:f0:7a:82:
4a:84:26:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:50 2024 by rpki-client on console-ams.rpki-client.org