Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GQE3kSFseRwwB_uEXA3BC0aZkuo.roa
File: GQE3kSFseRwwB_uEXA3BC0aZkuo.roa (raw, json)
Hash identifier: 545B2tKXKACjsNZabgdj9poqIW8I3oNj6rMr2pwfHc0=
Subject key identifier: 19:01:37:91:21:6C:79:1C:30:07:FB:84:5C:0D:C1:0B:46:99:92:EA
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D1231DC1A26EB917F968697DF7F41E785
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GQE3kSFseRwwB_uEXA3BC0aZkuo.roa
Signing time: Tue 16 Jan 2024 12:14:33 +0000
ROA not before: Tue 16 Jan 2024 12:14:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:31:dc:1a:26:eb:91:7f:96:86:97:df:7f:41:e7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 16 12:14:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19013791216c791c3007fb845c0dc10b469992ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:53:fd:86:77:2a:2d:55:80:6a:91:5e:cf:81:
10:33:30:d6:a4:f3:b7:c1:0c:b1:3a:80:be:16:a2:
79:99:37:6c:7c:2c:4f:3c:1a:7e:85:f5:f8:2c:fd:
4a:ee:ac:ff:8d:bf:83:ff:66:66:e5:77:16:58:92:
3e:5a:ad:b7:25:eb:de:2b:e2:71:0e:7b:28:d8:75:
fa:c2:fc:29:f5:a6:27:73:f8:de:aa:c2:77:54:2f:
19:63:8a:82:35:da:94:43:5e:d2:cf:f3:b4:32:7d:
81:9b:68:4c:85:2d:10:12:d7:5c:24:a1:e9:b8:01:
53:34:4e:21:1f:8f:12:0e:16:0a:61:b1:fb:6c:53:
92:e6:de:6b:c9:78:13:0e:c6:9f:b0:1c:6a:21:88:
c5:83:5b:38:9b:32:b6:8c:49:27:45:e5:a3:5b:15:
c2:de:53:67:02:19:1e:8c:36:42:cb:8b:ac:bb:43:
15:01:f6:b2:b3:da:ac:59:9e:a7:ec:0e:a4:f8:8e:
75:d8:f3:cf:a6:bf:e3:53:f6:c8:bc:d3:65:97:25:
1b:21:1b:84:37:ee:19:9e:92:4d:e8:36:dd:c6:4e:
b8:10:48:15:9d:2e:4c:c9:bc:f0:82:9f:12:d5:8b:
07:27:c6:f3:df:86:f9:85:10:e6:42:07:b5:d0:de:
f7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:01:37:91:21:6C:79:1C:30:07:FB:84:5C:0D:C1:0B:46:99:92:EA
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GQE3kSFseRwwB_uEXA3BC0aZkuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:dc:51:e1:72:d9:16:79:8c:e5:26:0a:27:eb:6c:c2:67:54:
5a:f6:b5:93:cb:a5:22:25:dc:25:0a:f0:95:1a:21:54:80:d7:
7a:63:da:17:4d:93:89:22:83:e6:b2:23:20:3b:1b:e9:f0:46:
a0:3e:99:c7:77:70:50:fc:c7:89:ea:3d:7d:b0:84:14:d3:c3:
11:d0:2c:dc:cf:ea:e5:59:29:51:f9:9e:5b:00:d0:66:be:18:
13:42:56:89:37:f6:22:39:0b:3e:93:bd:1a:41:20:93:51:9f:
2e:73:69:fb:72:fa:b5:2b:3a:9f:78:3d:77:f2:27:43:8f:76:
4b:12:de:c3:72:d6:74:d6:88:87:6d:83:fd:0f:6c:1f:72:4e:
31:d6:36:27:e1:41:12:69:95:e5:97:5c:20:9b:79:a8:9b:91:
49:82:2a:af:67:aa:73:d9:ec:1b:82:e1:82:86:bc:cb:e6:3e:
2d:e7:e1:17:1d:96:b0:13:ef:2f:23:07:6a:d8:9e:ca:29:40:
07:9a:9e:ad:8c:60:c4:99:a5:68:61:c5:cd:fe:55:b8:23:20:
86:49:a9:f6:e1:4e:df:0c:38:d6:dd:02:34:9d:8f:bd:f1:2f:
c2:93:bc:0d:5c:14:6e:cc:72:fe:4f:48:73:83:4a:a1:c7:17:
19:c8:a1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:50 2024 by rpki-client on console-ams.rpki-client.org