Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JXJsvli54020PzOJuoVuQVA1XJU.roa
File: JXJsvli54020PzOJuoVuQVA1XJU.roa (raw, json)
Hash identifier: ybFvPdGx5rfqpu5y2sUIYgg1TXeXb8bbIGF2Isur9vQ=
Subject key identifier: 25:72:6C:BE:58:B9:E3:4D:B4:3F:33:89:BA:85:6E:41:50:35:5C:95
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E0D756686F6E891C833555B4D67A0A4D6
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JXJsvli54020PzOJuoVuQVA1XJU.roa
Signing time: Tue 05 Mar 2024 07:13:01 +0000
ROA not before: Tue 05 Mar 2024 07:13:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0d:75:66:86:f6:e8:91:c8:33:55:5b:4d:67:a0:a4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 5 07:13:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25726cbe58b9e34db43f3389ba856e4150355c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:b7:3a:7b:84:ff:8a:3b:25:02:f7:3f:46:
0d:7e:47:ea:cb:74:a9:55:fd:31:ce:c5:30:ce:26:
db:86:45:89:4e:7a:7b:c7:53:4b:59:52:66:9e:85:
24:c0:c1:58:f5:c6:b5:f6:99:73:1e:ee:15:ab:32:
5e:59:58:4d:4a:0a:d2:06:37:ec:4f:db:0c:16:e4:
eb:2d:4e:78:df:76:06:a1:79:09:a5:cf:ef:37:ee:
94:05:e5:d2:4e:5a:01:7c:89:f2:eb:5b:df:a7:74:
0f:ea:76:69:e6:90:4f:3a:55:97:5a:6e:10:0f:e5:
8a:90:85:37:13:7b:a1:37:f2:46:ed:6c:87:9d:fa:
33:8b:68:0d:5c:fa:98:96:e8:92:10:93:4e:ec:98:
cf:a1:5e:c2:35:5b:90:82:a5:0a:54:e3:f9:cc:62:
4c:28:0d:e5:23:c2:b0:dc:ec:6a:06:b3:87:0a:1c:
a8:d7:af:47:bf:ac:4a:31:03:dc:09:2c:3f:41:be:
e7:eb:54:4d:30:95:ee:75:f0:d4:c4:a4:d9:17:83:
36:b3:8e:4f:6b:10:ef:e6:52:7c:d2:df:c5:b0:48:
a9:2b:ff:53:92:e2:64:c8:e3:9c:9b:0a:f1:8f:aa:
6e:70:ae:9c:ad:23:f1:02:57:f9:41:a8:5d:32:3d:
85:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:72:6C:BE:58:B9:E3:4D:B4:3F:33:89:BA:85:6E:41:50:35:5C:95
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JXJsvli54020PzOJuoVuQVA1XJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:99:80:96:92:2c:dd:ee:e4:ac:f8:ed:2e:2a:c2:ff:35:eb:
7c:e1:68:64:cf:21:47:69:6b:38:b2:fb:3a:05:e6:47:78:9b:
68:28:be:d4:69:94:e8:7e:c9:e7:8f:1e:ef:a3:dc:c8:81:b3:
b7:6c:88:76:ae:e7:b5:ba:55:f4:cc:fa:74:63:3c:ca:47:0c:
63:33:f7:6c:b7:4b:1c:c6:72:e1:9a:b2:4d:0d:c6:cb:c5:04:
a0:3f:bb:96:2d:81:06:18:a0:74:cd:5c:0a:48:39:07:1b:af:
b3:f1:de:50:20:68:d9:8c:f5:1f:9e:cb:c9:64:62:eb:92:9f:
af:8f:1d:d6:97:4e:f6:70:44:e7:79:c1:07:71:0b:ff:7d:06:
30:f1:fd:c2:e0:63:e7:a5:f5:f3:66:5a:29:7b:00:5e:1c:bd:
3c:6a:66:e5:ef:8d:30:b3:cf:52:35:0a:ad:d2:2b:4b:9c:11:
16:84:be:a2:57:4c:e0:5a:cb:3e:c2:59:0b:74:16:15:89:d7:
5a:1f:d1:d3:c7:af:fe:0b:fd:07:fd:74:bf:9b:cd:73:ba:51:
08:98:88:77:1f:f7:ca:f4:d3:83:42:b5:08:41:88:21:d0:52:
f0:9e:fc:28:c7:d5:3e:8c:05:f3:da:55:04:ee:1e:3d:40:ae:
79:e7:f9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org