Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LkySooDuFNhzCNC4_jJ9GF1gVZA.roa
File: LkySooDuFNhzCNC4_jJ9GF1gVZA.roa (raw, json)
Hash identifier: pA8wyNfG9AAi2GhWpToUzPQJ+n50doknVxjOmwJmFoE=
Subject key identifier: 2E:4C:92:A2:80:EE:14:D8:73:08:D0:B8:FE:32:7D:18:5D:60:55:90
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D1F48596E9F94B7565B83D31727A3D066
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LkySooDuFNhzCNC4_jJ9GF1gVZA.roa
Signing time: Fri 19 Jan 2024 01:14:11 +0000
ROA not before: Fri 19 Jan 2024 01:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1f:48:59:6e:9f:94:b7:56:5b:83:d3:17:27:a3:d0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 19 01:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e4c92a280ee14d87308d0b8fe327d185d605590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:01:be:2e:a5:c4:1a:e9:8c:09:7d:16:db:
ab:8b:53:1e:e9:11:ac:16:31:b0:f0:2b:18:ad:9d:
44:13:d2:67:17:b3:72:ed:c1:94:0b:9c:3d:e2:e3:
ae:06:21:de:80:64:4e:69:a8:56:ce:3d:e2:e2:29:
b6:7f:5b:04:9f:b2:b8:6b:85:6d:4a:cc:3d:a7:bb:
23:94:fe:76:97:cc:1e:5b:25:1d:12:20:c9:53:cc:
e9:20:5c:84:97:8b:35:05:d0:62:59:dd:6f:67:fb:
19:cb:1a:78:c0:42:eb:36:25:06:1e:03:e1:18:49:
83:67:e9:c1:fc:6e:99:2f:af:d8:d8:24:72:b3:77:
79:4e:79:36:48:24:c6:a0:2c:31:88:0b:a8:dd:0f:
06:c1:f7:68:44:c0:7f:c7:14:e5:29:1a:3a:5e:e0:
ce:dc:71:e8:12:c3:05:ac:33:6f:17:5b:72:17:c0:
1f:5a:11:85:6b:f7:5c:23:3c:cc:60:76:ba:63:0c:
99:30:51:b7:92:10:73:b5:0b:10:db:66:47:28:9f:
95:5f:91:9a:1e:cd:22:f1:df:59:9d:b7:c9:f7:62:
42:5b:26:a0:d0:a1:da:64:bf:1f:dd:ad:d8:23:93:
89:1d:f6:48:36:01:93:20:b1:01:04:bd:b0:89:96:
c9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4C:92:A2:80:EE:14:D8:73:08:D0:B8:FE:32:7D:18:5D:60:55:90
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LkySooDuFNhzCNC4_jJ9GF1gVZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:b6:10:71:44:c2:0c:c2:cb:35:52:f2:ca:9c:cb:a3:00:ab:
dc:bb:4c:20:f4:2a:0f:8b:bd:04:ed:b9:38:b8:b4:cc:fc:82:
5c:1c:18:1a:44:7f:d4:0f:e3:1a:ca:18:25:51:7b:06:d9:bb:
7a:c1:a7:3c:20:42:6e:50:f5:fe:be:cb:7d:0a:e3:0f:f6:56:
94:1b:50:eb:d0:51:7f:1c:7c:e4:62:4c:cf:12:b7:75:9a:14:
a8:fa:72:22:ff:cc:10:98:71:f0:1b:11:41:8b:e1:ad:49:dc:
fd:1a:f1:0b:44:26:61:a1:f8:81:04:a4:fd:23:e4:0d:01:2f:
07:76:19:6a:28:e8:ce:77:2a:37:f3:75:f9:7d:b3:64:9f:d9:
51:70:55:4a:a9:c7:c9:4f:a4:ad:b2:0a:a6:55:9d:cd:f0:2a:
02:a8:dc:f0:8d:48:e7:6a:cd:9e:80:2b:73:76:25:e4:10:6a:
27:a2:fd:b1:56:4a:ea:8a:eb:d4:e3:99:d7:31:2a:d3:a7:32:
bf:b6:c6:3c:50:7c:20:eb:02:1b:4d:e6:00:15:b7:19:35:12:
60:d1:43:7a:e3:1e:5d:38:20:2a:47:a8:73:8c:02:1a:2e:d1:
c1:99:85:ad:6f:3e:3c:c9:11:30:dc:0a:4e:5f:f9:13:38:78:
d1:dc:af:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:50 2024 by rpki-client on console-ams.rpki-client.org