Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HRIsJHOAsutEuPNYR4QeIU8vmq0.roa
File: HRIsJHOAsutEuPNYR4QeIU8vmq0.roa (raw, json)
Hash identifier: X9oe4ZmFyxDFwYzQutg4pUeXv2rVGnEUc9E3VHkHwow=
Subject key identifier: 1D:12:2C:24:73:80:B2:EB:44:B8:F3:58:47:84:1E:21:4F:2F:9A:AD
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D1A91AF1A6332916E88AF1CD66ABF2BE8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HRIsJHOAsutEuPNYR4QeIU8vmq0.roa
Signing time: Thu 18 Jan 2024 03:16:11 +0000
ROA not before: Thu 18 Jan 2024 03:16:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1a:91:af:1a:63:32:91:6e:88:af:1c:d6:6a:bf:2b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 18 03:16:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d122c247380b2eb44b8f35847841e214f2f9aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:8e:52:03:75:b1:04:d5:8f:eb:71:bb:2a:
bb:95:1d:d5:57:26:a6:1f:72:8e:04:e2:28:a9:90:
7b:a3:c9:28:f8:f9:d3:6e:42:59:72:cd:5d:ff:58:
09:db:24:0e:b6:97:30:27:48:ac:f8:75:42:ec:a3:
8f:e7:d6:c1:f7:12:54:74:39:92:a3:44:67:e7:a4:
04:13:be:1d:cc:9e:72:f7:0a:9e:d4:c1:be:34:ce:
a8:bf:d7:7a:69:81:29:be:48:ce:1a:f3:18:a7:2b:
0f:91:82:40:a3:9e:f5:84:ce:4f:8e:d7:96:41:1a:
9f:26:d0:24:ca:83:18:d1:fc:c7:ba:15:04:c7:77:
76:4d:29:c8:09:01:72:77:7b:45:bf:17:76:2e:9f:
bc:ee:79:16:d5:28:ff:3a:fe:cb:20:b0:ad:5e:1a:
6e:79:61:27:41:93:31:1c:71:f6:1c:c3:72:3c:90:
ef:01:a0:0c:85:77:46:ef:c7:6c:35:8d:54:44:77:
d6:65:23:12:83:8d:54:3b:05:56:93:97:e0:b1:aa:
ba:26:cf:38:31:19:4f:93:77:ad:77:f2:82:7b:92:
97:a7:b9:5c:68:f5:62:ce:41:6c:48:c7:4d:2b:c1:
f3:ff:31:34:cc:24:fa:23:b8:63:1d:1e:aa:db:83:
a8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:12:2C:24:73:80:B2:EB:44:B8:F3:58:47:84:1E:21:4F:2F:9A:AD
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HRIsJHOAsutEuPNYR4QeIU8vmq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:ac:cc:2c:26:ce:c4:d5:d7:a5:77:7f:68:65:41:67:35:54:
5c:fe:6a:06:de:85:92:f3:65:15:ee:5a:1e:52:c7:94:86:6c:
c9:6c:33:5c:88:3c:2d:be:60:c1:db:f3:ba:dc:cb:fb:c4:53:
8a:1b:ca:22:2f:db:90:79:df:bd:2e:98:85:57:8b:c0:d9:8a:
2d:1f:22:1b:e6:43:e2:ea:10:db:60:31:20:17:f8:78:30:55:
eb:45:b9:fc:a3:c2:73:cd:3e:05:96:a8:7c:d9:5a:3f:22:f5:
ae:6d:e7:df:d9:b6:c4:7a:d8:96:81:f4:92:12:ae:02:cf:1e:
ee:cc:20:ca:ef:c0:78:b6:89:a1:0f:a1:0b:c3:15:57:20:78:
5b:83:8e:9a:96:9b:31:32:bf:a1:53:e2:af:14:17:28:38:48:
c1:8c:8a:83:50:ec:67:3a:c1:34:1f:41:65:10:f3:c6:93:d4:
32:61:00:6d:42:94:a3:12:43:2f:b2:2a:06:1d:af:1f:e2:cb:
87:60:c3:7d:17:b4:d9:f8:f8:a6:62:68:8c:f8:fc:4d:40:57:
cc:6d:cc:e1:07:f7:36:8f:e6:06:66:10:c5:2f:a9:b1:c9:c6:
4e:25:95:2b:a7:05:28:28:34:1a:c9:70:93:b2:8a:44:5a:0e:
45:20:0a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org