Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HDemIrSEP4V9bsGJqrKAjhUy0H4.roa
File: HDemIrSEP4V9bsGJqrKAjhUy0H4.roa (raw, json)
Hash identifier: SNcTehb3bAcL0zs/AHEcfNcJ1IXPgwg4Kd9hs7xyDaE=
Subject key identifier: 1C:37:A6:22:B4:84:3F:85:7D:6E:C1:89:AA:B2:80:8E:15:32:D0:7E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D8A52242106623696D323AEB143B6B967
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HDemIrSEP4V9bsGJqrKAjhUy0H4.roa
Signing time: Thu 08 Feb 2024 20:04:15 +0000
ROA not before: Thu 08 Feb 2024 20:04:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:8a52:158d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8a:52:24:21:06:62:36:96:d3:23:ae:b1:43:b6:b9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 8 20:04:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c37a622b4843f857d6ec189aab2808e1532d07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:82:41:fd:c9:dd:40:31:0c:0a:ed:d8:53:14:
83:e0:30:c0:d7:91:f5:74:7c:c1:79:60:7f:e2:46:
76:d7:97:12:5f:33:05:d8:2a:20:de:a9:67:71:56:
23:55:e6:e6:8b:42:af:1c:bf:02:97:95:74:83:82:
6f:d3:1f:00:53:61:4d:cb:31:25:c1:2b:97:98:b4:
fe:60:1b:56:89:4d:4e:ff:16:6a:be:f4:4c:ce:42:
0c:d0:26:36:2e:c4:44:40:32:ff:7e:27:e7:9d:8e:
b7:c0:84:c9:9b:08:03:55:9e:d4:99:08:fd:82:d7:
51:3b:ab:fb:3b:cc:a2:cb:a5:8f:c7:f3:cc:12:30:
48:f9:3b:04:08:8e:34:f9:2b:9d:09:a2:d7:94:75:
eb:dd:cc:d5:0f:39:aa:f1:fa:d2:52:46:83:7b:bf:
4c:b8:fc:f0:78:39:fe:8e:bc:f8:6a:e2:71:bd:9d:
3d:99:5d:66:60:49:df:e3:a8:b5:53:13:8f:a2:59:
a6:a8:be:59:39:34:28:a7:f0:bc:85:dd:d4:bd:2f:
95:40:8f:66:62:3d:4c:6d:86:ae:49:4f:57:ac:19:
8e:49:af:c9:c0:85:90:f6:e0:23:77:38:f2:21:48:
d7:67:07:c3:89:b8:a5:31:97:b5:bb:3a:33:28:56:
a3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:37:A6:22:B4:84:3F:85:7D:6E:C1:89:AA:B2:80:8E:15:32:D0:7E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HDemIrSEP4V9bsGJqrKAjhUy0H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:c0:bf:b9:59:73:56:f5:9f:dc:81:41:15:5a:57:81:b7:7b:
ee:86:3a:30:54:bf:cb:7f:31:02:db:1f:de:ce:c0:6e:18:0a:
d6:a2:39:ed:78:8a:ad:f9:30:17:0a:2d:f1:ed:d1:e9:ff:bc:
3c:db:2a:db:67:3d:2f:31:70:62:ed:7c:f7:c4:82:b6:7a:a9:
52:bf:5c:d5:03:2a:d9:11:20:eb:4c:88:aa:ff:72:1c:13:ad:
7f:1b:b2:1c:30:b9:d2:2a:37:46:0e:e1:98:50:78:d6:1b:f7:
22:31:7c:f7:8e:89:b6:8f:4f:2e:5b:ca:57:5a:be:b9:f6:8e:
58:87:b7:c1:c3:00:2d:9e:34:f0:33:d4:0c:3e:26:3d:7e:0c:
44:03:c6:d2:d5:98:0f:27:aa:17:63:8d:bf:97:57:f5:ed:cd:
47:8b:db:3c:ec:73:90:00:96:25:d3:22:a1:72:64:ff:be:85:
57:db:53:3d:4d:d9:bb:3c:83:c7:31:28:f2:e0:34:05:cb:77:
9c:db:23:7c:0a:07:bb:d3:a0:58:be:95:15:a2:43:ec:f1:e2:
cd:d1:70:f8:d0:97:92:ad:2a:f4:ff:eb:95:4a:79:fc:d9:ec:
6c:0c:7f:87:55:8c:e9:6e:3c:d8:35:75:c2:1b:39:21:50:aa:
2b:6a:66:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org