Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GVCSn3vZ0EdCtUN9idMtQtenxzY.roa
File: GVCSn3vZ0EdCtUN9idMtQtenxzY.roa (raw, json)
Hash identifier: sieTQ7DvcR6x1GrSgE9oefyLFh2I7KBv/7Kco9/FpI8=
Subject key identifier: 19:50:92:9F:7B:D9:D0:47:42:B5:43:7D:89:D3:2D:42:D7:A7:C7:36
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D3A88DD81DC631BEAC8C7AB9DC461764C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GVCSn3vZ0EdCtUN9idMtQtenxzY.roa
Signing time: Wed 24 Jan 2024 08:14:24 +0000
ROA not before: Wed 24 Jan 2024 08:14:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3a:88:dd:81:dc:63:1b:ea:c8:c7:ab:9d:c4:61:76:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 24 08:14:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1950929f7bd9d04742b5437d89d32d42d7a7c736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:d3:ed:d0:13:4c:1b:aa:d7:a7:1b:14:cc:
b6:9a:24:d8:da:94:64:3a:02:d5:c6:de:f7:a9:c5:
d5:15:ca:06:52:72:e7:b7:a7:68:5e:35:e3:e4:ea:
4e:85:3f:0a:31:26:46:06:5f:8d:4c:a7:0e:52:5e:
66:ed:bb:a6:e8:29:f1:f0:31:0a:37:2a:10:4a:ed:
2f:a1:d0:cb:2a:df:e3:60:e1:0e:0e:16:f7:f0:64:
10:b7:33:f2:d0:f0:da:34:d3:91:6b:49:3d:d4:6d:
e5:c9:5b:5d:46:90:36:9f:a8:6a:69:d7:df:2d:6d:
92:1b:04:7a:7c:0b:c1:15:fc:29:f3:2d:0d:bb:43:
4b:5f:3b:4f:a5:b1:51:e2:8d:94:b0:f1:3e:39:64:
b5:02:5c:a5:8a:f6:ca:5c:60:95:cd:2c:58:b1:d7:
57:28:6d:d1:40:8c:9d:5e:f2:b7:d2:64:06:bd:47:
5a:e4:ea:1d:95:32:c6:b4:c0:12:c6:4b:6f:61:02:
a1:57:c5:73:88:a2:00:b2:c4:81:b3:52:e8:b9:18:
64:4f:1a:1d:b3:26:4b:27:c9:02:c6:15:d9:04:a8:
fb:aa:c8:1b:bb:30:61:23:ef:e7:fc:c2:76:0a:58:
a5:ae:3a:bd:ec:57:94:08:7f:3b:a3:92:11:45:3f:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:50:92:9F:7B:D9:D0:47:42:B5:43:7D:89:D3:2D:42:D7:A7:C7:36
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GVCSn3vZ0EdCtUN9idMtQtenxzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:ca:da:b1:89:59:a2:b1:0e:d0:28:5e:6a:ee:12:0e:14:d3:
84:51:57:bf:2c:9a:ed:6f:b9:28:26:3e:27:b8:8d:de:5b:9c:
e8:68:72:85:17:18:97:56:20:38:db:ca:40:62:e0:81:83:e4:
ee:9e:ea:03:93:94:c4:82:60:a5:f9:ce:25:f1:a8:4c:48:4b:
8e:86:68:69:37:90:9b:47:ac:69:06:46:35:9c:5c:d5:7f:c6:
2f:af:18:c3:6e:16:cb:c2:ba:6b:08:b7:d5:45:e4:14:f0:13:
bc:63:4d:c3:83:42:e2:b4:de:68:34:2b:8c:30:28:f0:82:92:
b9:45:8e:4c:f5:98:ab:b1:a1:15:43:58:f2:4a:6f:21:6f:87:
e8:80:97:c4:ab:e6:03:34:cc:c1:54:50:2a:11:66:11:81:ea:
80:27:ab:cc:7e:d5:14:4e:94:25:d0:ec:f2:61:e9:80:4b:34:
d1:97:96:1a:cb:bd:8b:d9:d1:1c:27:82:4a:7f:ee:8f:49:94:
89:ea:1b:f6:a3:bb:42:58:ff:b7:4b:96:2a:68:6f:fa:0c:c0:
12:89:c7:53:8a:0f:6b:d9:9f:11:8e:10:a2:f7:08:b3:29:7e:
8a:b5:6c:d2:52:fc:37:1d:6c:44:6b:6c:0f:b4:99:3e:42:10:
92:99:b5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org