Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IIDwSLJC8L77DFvQfJ7cxHEl7m0.roa
File: IIDwSLJC8L77DFvQfJ7cxHEl7m0.roa (raw, json)
Hash identifier: z0V3Qk3ZmQz/bc42OMWfi4ybyyGnztA0e8HvtEOLi84=
Subject key identifier: 20:80:F0:48:B2:42:F0:BE:FB:0C:5B:D0:7C:9E:DC:C4:71:25:EE:6D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E9B14080F1738E7DF27BA3640024D0123
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IIDwSLJC8L77DFvQfJ7cxHEl7m0.roa
Signing time: Mon 01 Apr 2024 19:12:44 +0000
ROA not before: Mon 01 Apr 2024 19:12:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9b:14:08:0f:17:38:e7:df:27:ba:36:40:02:4d:01:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 1 19:12:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2080f048b242f0befb0c5bd07c9edcc47125ee6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:3b:c1:1b:cb:0c:af:85:30:95:b2:5f:3b:
6f:60:b6:e5:43:99:62:44:83:c2:d8:2b:1e:d6:42:
ef:9b:8a:77:56:56:8c:0f:9c:62:93:fb:a3:7f:89:
f6:ac:1e:ac:2b:0e:d4:9b:fe:0b:e7:c1:ae:6e:66:
47:29:8d:3f:7b:93:b3:e6:e9:92:cb:66:a1:e1:62:
22:7a:6c:31:f3:37:7b:0f:98:aa:03:8d:00:07:38:
70:35:8a:5e:aa:86:f6:bc:1b:b1:d3:5c:b5:00:81:
ee:1a:ef:ce:a0:e2:12:f7:a3:ed:29:75:6d:06:ce:
72:70:6d:95:d8:66:1f:c7:5a:84:d3:7f:d6:00:18:
ab:39:8f:b5:39:99:c9:9f:a6:d3:e8:09:80:04:15:
64:3e:3f:18:a5:1c:27:63:f0:0c:43:c5:2d:74:7c:
cb:c5:cf:45:21:dc:c9:6f:71:cb:b6:b1:42:64:a1:
e1:e7:a4:08:90:fd:d1:41:2a:a3:d9:5b:f8:ed:13:
c9:32:1f:4f:66:bf:6e:67:ec:7b:7c:9d:f1:f6:cb:
54:a2:fd:d2:f1:22:5f:04:d3:90:de:fa:ee:b8:e6:
66:a0:33:cc:f2:1e:c0:a1:5a:6d:33:11:d0:32:62:
23:5e:64:44:9a:02:59:c9:9d:b8:d7:9d:79:43:25:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:80:F0:48:B2:42:F0:BE:FB:0C:5B:D0:7C:9E:DC:C4:71:25:EE:6D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IIDwSLJC8L77DFvQfJ7cxHEl7m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:80:2c:3a:76:ae:65:2a:e7:24:46:8e:5d:a0:03:b0:20:90:
1d:68:fd:6b:51:d7:92:57:07:89:7b:62:16:5c:96:f1:0b:e4:
03:78:c8:91:98:dc:45:93:9f:22:ab:9a:3a:ed:63:bb:3b:ac:
5a:76:98:31:34:11:52:5f:da:23:4c:28:17:11:6c:f4:62:4e:
d7:31:83:61:4e:5d:19:fb:6f:b0:df:87:24:c2:bf:c3:b5:49:
05:d0:4d:82:a0:df:b9:86:79:43:ab:c2:98:84:0c:9d:df:d6:
5f:a2:15:60:81:56:4b:ca:f1:50:10:17:04:48:fe:fc:b7:cb:
ac:8e:bc:07:a6:6b:51:44:b9:9a:0c:a9:f9:36:26:67:2d:7a:
e7:4b:0a:41:65:a6:73:ec:75:02:b3:eb:9c:f8:f2:82:4c:69:
ff:d0:86:43:b8:15:a7:d5:76:b9:a2:d5:5a:64:26:7f:33:bd:
39:40:c9:7f:7a:2d:d8:d6:a5:45:a4:08:f8:94:a8:b8:49:6d:
72:e9:c0:bb:30:1b:75:55:31:af:83:49:e4:43:fd:35:af:f6:
96:93:23:b7:f0:b6:5c:99:f6:cb:4b:77:01:79:6c:af:76:4f:
22:03:3f:67:51:c7:ab:18:72:41:c4:b9:79:63:d3:66:ad:17:
65:57:7b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:50 2024 by rpki-client on console-ams.rpki-client.org