Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IsXQ2iM3KCrqFis3TrxTUUGwB0Q.roa
File: IsXQ2iM3KCrqFis3TrxTUUGwB0Q.roa (raw, json)
Hash identifier: qlMX5BJWW5yYsCrV4k73tV7ByB3CJFbSrl3PZrBOFaI=
Subject key identifier: 22:C5:D0:DA:23:37:28:2A:EA:16:2B:37:4E:BC:53:51:41:B0:07:44
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E871E7938F2ECEA2BC6F4E263C2779EDE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IsXQ2iM3KCrqFis3TrxTUUGwB0Q.roa
Signing time: Thu 28 Mar 2024 22:11:45 +0000
ROA not before: Thu 28 Mar 2024 22:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:87:1e:79:38:f2:ec:ea:2b:c6:f4:e2:63:c2:77:9e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 28 22:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22c5d0da2337282aea162b374ebc535141b00744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:74:01:ff:d7:b8:b7:cc:78:d3:93:3b:77:59:
86:b3:7b:cd:36:1e:f5:bc:7e:df:fd:8e:14:53:88:
b3:6c:2a:0d:00:74:90:10:0b:94:86:c3:fc:48:68:
a6:8a:26:ef:93:1a:13:a9:b3:65:79:70:b5:02:58:
88:7e:33:1a:c5:60:c8:7f:c1:70:60:66:80:97:9d:
76:2e:ee:c6:cc:8e:06:34:9f:f6:3f:a2:8a:a9:e5:
47:cf:76:29:2d:2b:df:c7:55:1e:57:df:73:26:e1:
d6:7d:55:97:ca:d9:00:f1:6f:1b:ef:8c:9d:64:a7:
0f:51:26:ac:64:7e:75:3d:c6:6b:67:f9:0e:01:8a:
f8:40:31:d0:ba:89:93:39:4e:c6:4d:99:3f:48:d6:
04:47:e2:ff:e8:de:ba:41:04:08:4e:65:02:bb:b5:
58:ee:06:88:63:1d:63:98:56:a3:93:bf:bc:d9:3a:
ae:d0:0b:7b:b7:22:07:16:42:3d:2a:4a:dc:c6:51:
71:55:81:9c:84:39:1c:25:79:97:91:20:35:59:d7:
19:91:ec:d4:a8:45:35:cb:11:5b:d6:05:5f:8b:9d:
8c:cc:1f:d7:9c:3b:16:ca:d6:80:4e:98:c8:f7:51:
02:76:9c:a3:86:43:a0:fe:ac:65:92:00:3d:42:66:
58:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C5:D0:DA:23:37:28:2A:EA:16:2B:37:4E:BC:53:51:41:B0:07:44
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IsXQ2iM3KCrqFis3TrxTUUGwB0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:71:9f:2b:a5:2d:93:7a:c5:d5:1c:70:83:a9:f3:bf:b0:97:
fa:6c:30:65:33:47:df:72:84:51:07:8c:89:9a:e1:d2:22:c8:
46:a1:66:4f:22:a0:26:3d:52:8b:1e:11:cc:99:74:fa:7e:11:
62:9b:df:2d:0c:42:1f:ce:04:85:ca:ca:f2:02:30:1c:83:cc:
53:12:96:62:37:c6:b3:f7:4e:b3:cf:b7:65:68:97:8f:a7:9c:
78:96:b4:46:e5:c7:36:3b:ba:9c:8b:f0:13:dd:49:fe:a0:92:
64:da:59:63:dc:4e:26:e9:87:86:29:d0:e7:d8:e7:02:6d:9e:
a1:f4:53:fa:43:af:ca:1b:54:09:4b:74:d8:35:59:ce:89:78:
84:13:f6:9b:39:8b:16:e8:87:2b:a4:9b:7b:a1:b9:4d:ee:fc:
64:3b:e0:4e:f5:76:76:9d:fc:2b:0a:56:2b:c9:34:1a:e2:8a:
d2:81:6e:39:e8:45:1a:bf:a1:1e:7e:2c:64:52:be:6c:b5:0d:
f5:03:7b:10:41:54:09:0e:42:2f:d4:0c:76:ce:76:b2:ba:06:
e2:d2:1b:bc:76:ef:5a:60:34:f1:e7:c8:d8:49:9b:ce:50:c9:
50:35:a9:38:cd:4c:f9:97:70:66:9c:9d:4a:34:2f:71:72:50:
f0:5c:01:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:50 2024 by rpki-client on console-ams.rpki-client.org