Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JdJ_sVGnWaYylTGeOIoMJH3fCUI.roa
File: JdJ_sVGnWaYylTGeOIoMJH3fCUI.roa (raw, json)
Hash identifier: YoZkWKNWIiVzybGdRGvtoCKM7MQtOGDYBEscL0RvHjs=
Subject key identifier: 25:D2:7F:B1:51:A7:59:A6:32:95:31:9E:38:8A:0C:24:7D:DF:09:42
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DE39C9D7FDCCCC25CA484D29CAC757187
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JdJ_sVGnWaYylTGeOIoMJH3fCUI.roa
Signing time: Mon 26 Feb 2024 04:11:48 +0000
ROA not before: Mon 26 Feb 2024 04:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e3:9c:9d:7f:dc:cc:c2:5c:a4:84:d2:9c:ac:75:71:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 26 04:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25d27fb151a759a63295319e388a0c247ddf0942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a2:8c:52:18:da:23:c5:47:1f:9d:bd:d6:60:
8d:fa:6e:75:ca:a9:4a:f5:0c:ac:c2:50:7f:5c:a6:
73:c6:64:cc:a9:71:fc:79:6c:4d:c9:4c:23:c2:8b:
e9:fc:29:af:cf:bf:c2:ae:55:13:95:2c:77:7f:1b:
af:f9:a0:4b:15:4c:07:e0:24:9d:52:6b:48:8d:85:
2a:8a:6e:bb:f7:53:dd:fe:e8:c8:8a:b8:b8:14:29:
9e:47:26:df:7a:31:48:af:24:7d:1c:fb:79:d5:8a:
8a:8c:2b:5f:2b:af:2d:12:d6:d5:a5:78:d2:1f:24:
9d:ae:21:b9:94:b4:a1:0b:9c:da:37:28:73:54:3c:
4d:c0:93:9d:75:d2:ff:68:da:e3:01:27:b4:12:75:
e8:bb:84:25:d8:7b:59:6e:69:8b:4f:63:b2:09:c2:
0d:6f:cc:19:ae:ae:e3:94:dd:75:09:87:34:e9:39:
90:fe:03:72:53:61:11:77:5f:51:a7:ea:71:88:1d:
6e:66:47:1e:bf:f7:af:b4:77:26:e5:e0:00:ad:5f:
d1:bc:36:4a:d2:35:7d:db:c7:66:34:42:21:6d:af:
28:ec:2b:75:08:2c:d2:72:b6:ed:d2:04:e6:e1:cf:
a3:82:47:ec:4b:69:e4:4c:64:3d:01:59:01:50:0d:
6b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D2:7F:B1:51:A7:59:A6:32:95:31:9E:38:8A:0C:24:7D:DF:09:42
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JdJ_sVGnWaYylTGeOIoMJH3fCUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:0b:16:81:0c:e8:5e:a2:d9:21:98:1f:b7:fd:68:b9:66:4f:
61:39:69:9a:27:b4:8b:85:fc:b9:f5:42:17:2b:e0:dd:b5:a0:
38:fb:1a:42:89:17:fc:70:89:7a:e7:ac:26:a0:71:89:60:0f:
61:ec:91:67:47:f3:97:b8:65:b9:29:54:6b:9e:f1:4b:9e:74:
8c:a2:be:54:82:67:50:a6:be:0b:eb:b7:40:c4:a3:a9:d7:68:
ef:23:f4:6a:a5:47:d4:dc:d9:79:32:38:8f:4d:8f:0d:7a:cc:
40:a0:81:45:3c:2d:bf:8e:07:7d:de:57:71:e1:be:d3:3e:12:
75:c8:d0:0a:d3:4c:74:ac:b4:9c:ac:62:f2:d5:dd:56:92:7a:
30:46:e9:ed:29:cf:08:e3:62:1b:f1:ff:a6:e9:b8:6d:10:01:
b6:8c:24:d5:83:a7:c7:c7:41:32:f0:be:20:23:3b:c2:30:b4:
23:9c:22:12:a8:41:59:c4:d9:c4:38:bd:28:da:56:91:01:7c:
1d:00:9d:07:c6:a2:64:1b:ed:fc:e6:f8:cb:87:b8:89:fe:61:
46:ab:20:b6:94:d9:1a:c2:9f:2f:8b:eb:92:25:da:4d:c6:61:
66:44:30:97:ea:5f:f3:75:aa:aa:87:ec:21:bd:ec:4a:ac:76:
54:d4:0e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org