Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LsD2TLTISajmE-ZVST7PUchM8fA.roa
File: LsD2TLTISajmE-ZVST7PUchM8fA.roa (raw, json)
Hash identifier: /tgBogvYf4SRE4ESiTp5K1QeCpkuUMRSJyBUnC0Jgr0=
Subject key identifier: 2E:C0:F6:4C:B4:C8:49:A8:E6:13:E6:55:49:3E:CF:51:C8:4C:F1:F0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DB469FEE43AB897501D52D6D09C9891F9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LsD2TLTISajmE-ZVST7PUchM8fA.roa
Signing time: Sat 17 Feb 2024 00:14:21 +0000
ROA not before: Sat 17 Feb 2024 00:14:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b4:69:fe:e4:3a:b8:97:50:1d:52:d6:d0:9c:98:91:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 17 00:14:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ec0f64cb4c849a8e613e655493ecf51c84cf1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:19:eb:67:b1:f6:9a:fa:82:b7:4f:ae:15:
38:2e:be:c8:8d:56:1c:85:fa:d4:58:69:49:fc:24:
b7:42:e9:ab:37:1e:d4:f3:26:1c:0a:68:c7:fd:f2:
65:07:2b:4e:f3:f6:4f:82:83:9c:77:fd:bd:69:0c:
23:49:46:c9:64:c9:40:32:93:0b:aa:26:ea:0d:1d:
e2:e7:68:6f:39:6b:48:cc:e7:a5:b0:73:52:b2:55:
46:90:cd:91:d6:71:6f:c6:79:00:78:34:80:4c:46:
77:7a:7b:b7:e9:2a:4a:d0:2b:4a:e9:20:be:df:52:
5d:0d:d0:2c:86:0d:4f:82:82:48:01:56:82:3f:10:
7a:8a:d1:28:5c:87:5f:f1:81:39:20:6c:83:fa:94:
9b:fa:2d:7f:a5:f6:af:5b:35:8b:87:d8:d5:ad:67:
31:5d:cb:b4:64:4d:e7:49:d1:4e:40:5f:d7:d1:cb:
11:0f:e5:8f:46:18:66:21:70:31:69:50:61:85:d3:
73:20:c2:50:b3:89:e4:6c:b9:a6:37:eb:e1:f3:98:
95:32:e4:be:2c:99:32:78:12:d5:5c:27:f5:4a:07:
c3:dc:b6:65:8c:f9:ed:14:73:54:02:14:09:1e:e9:
50:22:87:bb:78:41:ed:58:ab:e6:24:2b:a4:33:e8:
15:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C0:F6:4C:B4:C8:49:A8:E6:13:E6:55:49:3E:CF:51:C8:4C:F1:F0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LsD2TLTISajmE-ZVST7PUchM8fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:a6:d7:51:f6:f5:cd:fb:64:b6:fd:36:0f:40:30:a6:fd:7f:
38:e1:98:48:e2:59:5d:a2:47:51:65:0f:d3:f7:df:25:9b:6a:
3a:20:99:f0:6d:80:9e:ea:6b:4e:ca:70:c8:79:3b:7a:3d:1d:
b1:a4:b9:01:ad:f7:41:bf:2d:55:df:6d:db:13:65:54:c6:8e:
c7:e0:e3:ef:83:d4:99:e8:2c:c4:d0:9a:16:73:a5:1f:53:99:
4d:ba:a3:43:31:a9:c6:1a:81:ff:c4:d9:1a:03:1e:34:dc:65:
e9:32:1d:12:2e:ad:dd:8b:a9:2d:37:78:0c:c9:86:23:d7:dd:
99:fe:1c:6c:76:74:55:30:f6:89:6e:f3:7d:c3:ab:90:e0:d3:
ac:b3:3f:18:4e:32:a9:35:98:08:2c:b0:e6:c7:f0:4f:ea:e7:
f4:9d:16:04:5d:1f:eb:51:f1:13:86:49:08:c2:86:7d:b3:44:
92:34:b4:48:09:4a:10:b7:f7:79:d0:54:3f:26:6c:db:fb:5b:
31:01:b1:41:d5:92:41:77:2b:6d:b7:8c:2d:4b:01:1a:db:0b:
f7:75:d6:85:74:8f:79:40:65:58:a4:48:67:20:68:fc:86:40:
d0:67:ea:15:06:a1:f5:13:36:f5:76:f7:a7:b0:d7:72:3e:43:
5f:00:4e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org