Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IurMEjkUOnPTLSZ0Nf058GTZ8DA.roa
File: IurMEjkUOnPTLSZ0Nf058GTZ8DA.roa (raw, json)
Hash identifier: j3cOtOVOfbpkPFZfxTqmiU1Wxm430AqrvVCsrBcj/K4=
Subject key identifier: 22:EA:CC:12:39:14:3A:73:D3:2D:26:74:35:FD:39:F0:64:D9:F0:30
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8EE0FB0C4968F706EC1201D3E280DECB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IurMEjkUOnPTLSZ0Nf058GTZ8DA.roa
Signing time: Fri 22 Dec 2023 00:15:58 +0000
ROA not before: Fri 22 Dec 2023 00:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8e:e0:fb:0c:49:68:f7:06:ec:12:01:d3:e2:80:de:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 22 00:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22eacc1239143a73d32d267435fd39f064d9f030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8e:10:31:88:80:00:0d:fd:14:5b:40:1c:c3:
25:8f:b0:d4:ac:45:b8:a2:9d:46:6a:90:e8:59:e9:
66:58:5d:49:62:0f:48:7f:3e:26:79:90:c2:a9:32:
8f:7c:21:34:93:34:6f:1e:fe:06:7c:c7:f7:58:b7:
08:a2:e3:b9:e3:c6:07:8b:7f:f6:b4:d2:b5:db:76:
b8:e0:74:61:6c:6c:f0:1a:43:c1:b9:41:cd:74:be:
fa:7e:4a:92:e2:f0:8c:6c:87:85:2e:40:2b:24:86:
a6:8f:c6:6e:9f:c9:42:91:db:26:6b:77:1f:1c:be:
65:fb:eb:78:fd:02:d3:92:7f:0f:cb:47:39:57:e1:
3d:b1:95:66:28:3a:cf:22:d2:34:3b:7e:17:bc:d6:
d7:fa:d2:f0:6c:78:9c:2e:1d:1b:32:6e:7a:91:45:
6b:5d:b2:6d:79:ba:dd:da:8e:a6:fa:d1:1d:f4:cd:
4f:f6:c5:89:b3:70:fb:6b:d9:98:0c:c4:d1:71:e9:
1a:6d:af:97:4b:d3:4a:6f:4a:6b:b7:50:78:9c:8e:
00:da:55:dc:21:99:09:70:03:21:4b:3c:ee:ac:69:
0c:ad:1a:b0:b7:a8:18:b3:ab:2b:05:c4:73:45:f7:
2e:82:90:9e:c7:b5:52:54:24:2a:60:87:94:a3:49:
43:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EA:CC:12:39:14:3A:73:D3:2D:26:74:35:FD:39:F0:64:D9:F0:30
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/IurMEjkUOnPTLSZ0Nf058GTZ8DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:0e:57:5d:7c:f9:bc:5e:57:bd:bf:d3:49:af:b1:60:06:2c:
5c:2c:c1:b0:f5:18:98:67:55:1e:aa:bf:2b:95:17:98:97:f4:
18:af:de:82:78:88:b8:2c:19:33:c1:c5:c5:67:b2:74:f9:cf:
53:58:76:a5:7c:3e:c1:d6:43:b4:e9:3b:cd:26:2c:0b:0d:9c:
aa:14:68:e8:89:08:c2:be:05:c4:c6:99:f0:78:c1:96:ef:8b:
bd:c6:af:85:03:bf:6d:12:18:06:45:3a:bd:ff:22:f0:2d:81:
31:47:26:48:56:56:c7:dd:fd:f5:13:8e:b2:4a:c8:c2:35:1b:
35:e7:16:d0:20:3c:ea:e5:1e:4d:5b:9b:07:b8:1f:3c:9e:16:
a5:34:9f:78:54:20:48:96:da:fb:49:2c:e8:c8:ce:46:34:3a:
b8:ca:c5:c9:74:3a:4c:46:9a:2d:5d:25:b7:22:13:e3:0c:2c:
e9:7c:6b:61:77:d7:5c:9a:af:52:5d:1c:74:57:f7:55:5d:a8:
79:47:27:93:d4:78:62:34:20:d4:2b:53:b6:44:cb:60:47:9b:
d3:63:e7:34:9a:9d:b0:79:e7:e7:cc:d6:f7:40:70:ec:0a:9e:
74:55:d5:e4:f7:74:1e:8b:d7:52:1a:72:a0:94:bf:69:7d:05:
35:31:da:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org