Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LjFlzQGtt-ygrTRnobLrB-Lw6q8.roa
File: LjFlzQGtt-ygrTRnobLrB-Lw6q8.roa (raw, json)
Hash identifier: rGB/Gps7/9UMZKTlyxJsc7GYfV69g5ZrEsOOvyMEOUM=
Subject key identifier: 2E:31:65:CD:01:AD:B7:EC:A0:AD:34:67:A1:B2:EB:07:E2:F0:EA:AF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E89AFD2423924C7FE76F89C8CB9C8E3AE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LjFlzQGtt-ygrTRnobLrB-Lw6q8.roa
Signing time: Fri 29 Mar 2024 10:09:44 +0000
ROA not before: Fri 29 Mar 2024 10:09:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:89:af:d2:42:39:24:c7:fe:76:f8:9c:8c:b9:c8:e3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 29 10:09:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e3165cd01adb7eca0ad3467a1b2eb07e2f0eaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1e:54:49:96:92:ad:3e:28:af:98:eb:59:bb:
c9:72:37:a5:0e:f8:d2:70:30:7a:94:95:23:73:04:
de:1b:22:62:ac:be:88:5b:3d:be:b8:40:c4:cb:bf:
42:0f:3e:50:32:51:4d:c7:42:bf:e1:fc:06:44:f2:
41:9e:90:a2:b6:2a:51:8e:7f:de:90:74:26:ce:d6:
bf:7d:45:a3:6e:a7:3a:75:70:b4:5a:57:99:f0:c7:
d8:3d:97:35:56:54:a0:16:b9:39:c0:06:bf:00:c1:
81:f1:45:c1:21:bb:de:24:5d:14:9e:84:8d:44:99:
0c:ce:93:f5:bb:6a:56:e5:22:13:4e:7c:6a:39:c8:
f5:e6:af:6e:5c:f3:22:c5:f0:43:43:45:b7:5a:e5:
08:64:51:dd:35:8f:d3:09:71:09:76:9f:49:a1:c2:
7e:71:40:1d:2f:2f:7e:35:12:04:16:d8:14:ac:c8:
b5:ef:d1:bf:57:29:62:ad:45:46:88:be:10:07:30:
a9:f4:8a:52:57:a1:df:9e:07:1d:94:e4:7d:ae:ad:
3d:5f:65:a2:fb:b4:c8:32:9b:86:1d:97:d9:86:0a:
1e:9c:26:8b:17:cc:fb:2d:01:49:f7:d7:ac:83:a4:
ac:ea:92:70:c9:1e:3e:25:d2:ba:57:f9:1f:66:8e:
7a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:31:65:CD:01:AD:B7:EC:A0:AD:34:67:A1:B2:EB:07:E2:F0:EA:AF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LjFlzQGtt-ygrTRnobLrB-Lw6q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:0c:ae:da:86:56:58:42:8f:0b:53:23:61:70:37:98:37:48:
b4:c7:55:ad:d4:44:e4:b1:eb:1e:15:46:98:05:3b:bb:8f:0d:
6f:12:25:39:fd:af:0b:f5:5a:2a:8c:f2:26:94:65:6b:12:c8:
b9:1e:a7:5e:5b:c8:23:c2:6b:6a:ac:31:38:60:04:1e:56:a4:
6a:55:ea:c1:03:ae:3a:cd:01:21:20:df:8d:bf:47:a8:ad:f6:
89:a9:ee:d0:9b:49:84:e3:23:5e:4b:2a:4f:f4:41:00:a3:b0:
dc:93:b1:07:13:fc:59:f7:84:b5:45:ee:32:7e:4c:f0:ea:ee:
04:eb:b9:89:6b:c2:0f:b1:b2:f4:12:a9:69:13:0a:14:8b:4e:
7c:ff:0f:dd:39:e8:c0:9e:a1:8b:51:ac:0f:3d:98:88:a0:88:
02:f4:fd:97:82:05:e6:a7:8e:9f:24:62:d0:54:09:d3:8b:a4:
06:f7:3f:2a:c3:05:b8:0d:1d:b0:0c:9c:c5:cb:db:46:ff:71:
43:ed:be:85:a0:47:66:be:40:fc:c7:58:77:be:76:d5:00:98:
c6:e9:f0:a2:3a:c9:61:b3:1b:a8:a8:65:7e:cd:cf:21:65:d6:
2a:eb:60:d4:c9:cf:97:ad:00:47:1f:72:3d:5e:99:ac:d5:cd:
cd:42:15:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:50 2024 by rpki-client on console-ams.rpki-client.org