Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KUrN3lhukiHNQFBoavmyjls1LV4.roa
File: KUrN3lhukiHNQFBoavmyjls1LV4.roa (raw, json)
Hash identifier: /+N/nC/SUpaAuXbV4sayopsLREFdqbXFQ8QYcnu1V7s=
Subject key identifier: 29:4A:CD:DE:58:6E:92:21:CD:40:50:68:6A:F9:B2:8E:5B:35:2D:5E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C87C97D88C50A2F9BA998EECA12772B6D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KUrN3lhukiHNQFBoavmyjls1LV4.roa
Signing time: Wed 20 Dec 2023 15:12:58 +0000
ROA not before: Wed 20 Dec 2023 15:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:c9:7d:88:c5:0a:2f:9b:a9:98:ee:ca:12:77:2b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 20 15:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=294acdde586e9221cd4050686af9b28e5b352d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:c8:3c:96:0b:2a:e0:f7:21:2d:39:96:62:
1b:ec:7d:bd:05:63:7b:2f:e8:f5:d1:9c:5b:9b:49:
ac:2e:e1:97:1e:41:0d:7f:0d:c4:2d:de:4c:47:8a:
f7:37:a0:28:63:a2:b7:d8:6c:a6:39:fd:77:f3:1d:
4d:6c:e9:21:bd:38:15:29:fc:4f:6f:2c:79:e0:37:
55:59:03:ad:d3:5d:61:d9:fd:2d:4b:55:91:48:de:
d5:ac:61:1e:81:1f:6d:f0:53:e3:78:87:b0:67:23:
20:ea:0a:05:40:48:d4:2c:11:55:2c:b6:c2:47:11:
56:5e:00:d2:c8:e8:10:b3:15:a7:f8:0a:19:4f:e6:
9c:c0:05:1b:f6:6d:4e:aa:ee:98:e5:76:1e:db:e8:
67:d2:03:de:f1:79:3c:1c:ec:bc:29:f8:94:af:61:
c6:be:9b:50:b0:84:74:57:14:02:7a:56:8c:2a:cb:
14:40:23:e9:d6:a9:39:68:0c:08:44:be:6a:de:52:
34:a9:ed:3c:fd:34:49:29:ae:47:6a:22:85:15:1e:
9d:ca:a5:7d:5d:3a:4e:61:79:bd:82:07:49:18:d9:
12:e8:e1:12:9d:83:6c:49:8c:86:81:1f:1d:7f:16:
37:21:e8:12:cb:ca:54:60:fd:ad:89:67:bf:d7:ee:
26:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4A:CD:DE:58:6E:92:21:CD:40:50:68:6A:F9:B2:8E:5B:35:2D:5E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KUrN3lhukiHNQFBoavmyjls1LV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:9c:73:a8:ad:19:b8:12:cc:b5:d9:5a:5a:a2:f9:ea:b9:d8:
7d:a0:f3:8e:0b:e5:be:73:f4:69:05:42:89:21:34:17:3a:5e:
75:a8:71:68:b8:a2:04:73:6e:5f:df:fa:83:4a:ee:9c:a4:9c:
4c:8f:ff:01:14:77:9f:e3:dd:28:4a:cb:94:49:3c:f8:20:cf:
46:1f:ed:17:34:85:f3:f1:7b:7d:76:31:87:49:c9:ef:53:3c:
2e:83:5f:2c:7a:f3:9c:bc:98:34:c8:55:5c:36:46:30:e7:55:
21:47:b3:6f:35:6e:55:4e:64:63:86:7b:72:ab:03:3f:04:a1:
7b:da:8e:cb:01:58:e7:d1:a1:0d:26:c9:96:2d:12:8a:75:04:
7a:b0:fb:87:dd:41:75:b2:c7:95:08:1d:2d:77:06:b6:c0:5c:
c3:9d:88:94:c6:3e:64:17:f9:b4:6e:66:c4:79:71:b6:90:9b:
73:42:8d:4c:34:59:e0:d9:ea:a3:e1:52:e1:9e:a1:6a:50:49:
30:21:dc:99:0a:9f:1e:30:7e:99:5b:b6:e2:29:3f:dd:7b:96:
80:c2:e2:ad:b3:05:90:05:3d:9a:33:b1:d9:b8:42:67:b5:87:
46:35:0a:55:a0:ab:9d:0a:fb:b4:f2:22:d8:fa:8e:a5:7a:b2:
13:d2:a6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org