Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/N6ABo4UVgY4G7HCjRlvrn5piHr0.roa
File: N6ABo4UVgY4G7HCjRlvrn5piHr0.roa (raw, json)
Hash identifier: HJbI1UlQFT3yzTPdGjmtJ8D68OECCnAcF8FBdK997g4=
Subject key identifier: 37:A0:01:A3:85:15:81:8E:06:EC:70:A3:46:5B:EB:9F:9A:62:1E:BD
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DB88135BAAC4ADB69D04E42E936944A91
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/N6ABo4UVgY4G7HCjRlvrn5piHr0.roa
Signing time: Sat 17 Feb 2024 19:18:11 +0000
ROA not before: Sat 17 Feb 2024 19:18:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b8:81:35:ba:ac:4a:db:69:d0:4e:42:e9:36:94:4a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 17 19:18:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37a001a38515818e06ec70a3465beb9f9a621ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:48:a6:30:cd:6f:6b:16:cc:79:25:c6:84:
11:dd:a7:0f:b5:b7:4a:ac:e3:92:9f:e2:c1:b5:1b:
4d:62:8f:e5:b3:10:58:f6:b6:0a:77:cf:19:19:0b:
8e:02:8b:b1:7c:07:32:0d:d6:f4:3e:b3:d2:25:ee:
cd:3f:a5:7e:e4:6b:2e:58:09:40:49:32:4e:78:10:
7f:5e:15:f4:52:fa:cf:29:2e:a5:8f:a3:e1:db:19:
d8:62:71:b5:28:a6:1f:1a:f1:76:0e:54:3e:7a:b5:
cd:86:32:b5:5d:0a:a7:33:ca:f3:73:93:23:ab:90:
35:35:68:4c:c5:30:c3:fc:6e:b0:41:9b:4f:e4:e3:
4e:93:f3:72:ed:e3:25:cc:90:e2:de:90:e5:e3:03:
17:ed:a4:07:47:33:e1:49:18:b5:63:32:6c:1e:f7:
75:32:66:92:a1:c6:c6:79:1d:5c:90:4d:b5:d8:8f:
6b:55:cb:81:02:a3:e0:ad:f5:b9:00:53:bc:ec:32:
b5:dd:b2:7c:ea:6f:ba:06:5c:3e:af:9e:21:3e:9c:
66:d8:dd:b3:d9:e1:6f:e0:43:eb:52:a7:8e:20:32:
8a:e6:39:3d:84:68:69:fd:1b:d8:de:08:ec:33:e0:
7f:1f:cc:db:5c:ff:08:bb:56:54:21:e0:84:41:09:
22:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A0:01:A3:85:15:81:8E:06:EC:70:A3:46:5B:EB:9F:9A:62:1E:BD
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/N6ABo4UVgY4G7HCjRlvrn5piHr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:70:ba:17:8f:68:c5:a2:49:3c:95:57:f5:8f:6f:1a:ba:c8:
ea:70:e3:c2:37:a3:59:ed:21:20:2b:38:17:83:8c:df:34:0c:
1f:00:73:ed:f3:43:d9:fc:25:d2:ed:ea:92:11:00:47:5c:77:
d2:3c:d0:41:e9:95:db:bf:a0:b5:8e:a3:05:80:eb:01:c7:e6:
17:79:56:e9:6a:e7:02:0d:25:82:e4:43:06:b2:ca:bf:7f:93:
21:47:77:c2:4f:d8:7e:6b:21:a5:83:a2:73:ee:0b:9b:c8:a8:
3d:02:d6:d6:ef:bf:88:08:89:fb:d8:2f:fb:2e:31:d1:64:44:
52:9b:4d:d1:8c:c6:ba:e5:69:c9:b2:ca:a6:ef:36:a6:ce:ac:
79:1d:28:de:88:92:fa:5a:1f:af:59:4c:0c:47:ca:2d:56:85:
6f:9e:da:72:5c:06:05:68:57:56:99:50:0d:cc:b3:36:b8:b1:
42:fe:7d:21:0e:92:bc:f6:fb:35:cf:cc:e0:03:20:17:ba:d0:
4e:74:9c:03:94:64:dd:91:a9:b7:bb:6b:6c:df:7f:e2:0c:bd:
4d:27:d8:4a:9d:cd:4c:92:9f:02:4b:8c:6f:9a:16:0d:d5:61:
7a:fb:d2:8a:0e:8c:52:f2:de:0e:da:7c:99:ef:d0:ff:67:36:
50:a7:dd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org