Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NE_fxWw5uB2s9srrleGVqvm33F8.roa
File: NE_fxWw5uB2s9srrleGVqvm33F8.roa (raw, json)
Hash identifier: 8n1ysW0HmR+o03zJd/5gGCB2mXr3R9+2pql2UtJZ0mM=
Subject key identifier: 34:4F:DF:C5:6C:39:B8:1D:AC:F6:CA:EB:95:E1:95:AA:F9:B7:DC:5F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CC40DF5C7F343A53386DC59BB6526F495
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NE_fxWw5uB2s9srrleGVqvm33F8.roa
Signing time: Mon 01 Jan 2024 08:04:58 +0000
ROA not before: Mon 01 Jan 2024 08:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:c40d:32f7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:0d:f5:c7:f3:43:a5:33:86:dc:59:bb:65:26:f4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 1 08:04:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=344fdfc56c39b81dacf6caeb95e195aaf9b7dc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:24:31:21:45:38:73:0b:77:a4:f6:55:c8:88:
3f:d0:6a:75:f1:dd:e8:40:8e:bf:3f:cf:f8:53:f8:
5f:4d:91:ae:d4:e4:08:bb:6d:f8:f2:4d:84:2e:95:
10:bf:19:41:2f:ba:d1:5d:05:69:bd:2f:e7:f5:c0:
2f:bd:67:b3:a3:97:ff:c5:f5:c8:14:0d:90:78:12:
54:65:6e:47:ad:0f:68:da:d1:d5:a4:45:85:19:d8:
23:24:d1:df:12:40:2a:6c:a5:bd:10:e2:b9:06:f1:
ff:7a:19:d8:4f:1a:1b:9f:e7:b3:3f:cd:2c:c3:62:
c1:c5:19:97:64:d5:df:a0:4c:01:2b:4d:50:15:5d:
fa:ed:8a:c8:8f:59:59:06:02:71:78:53:02:ec:9a:
5d:84:00:a9:e9:f0:84:3d:89:6d:d6:ab:17:3f:f1:
90:d2:a0:2c:c7:a3:d2:b3:f7:0d:02:0a:f0:5f:cf:
20:76:38:4f:53:39:3b:e1:f1:aa:5f:1d:67:18:d4:
92:06:6c:ca:8d:aa:40:64:25:d5:b5:12:98:22:50:
de:d8:de:0d:11:d3:f3:f2:cd:c3:5d:e5:ae:29:e6:
a1:86:c8:bc:87:cc:0d:0f:ab:7e:ef:8c:91:16:35:
ff:08:3b:65:a1:dd:19:9a:be:27:29:9d:23:24:80:
bf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4F:DF:C5:6C:39:B8:1D:AC:F6:CA:EB:95:E1:95:AA:F9:B7:DC:5F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NE_fxWw5uB2s9srrleGVqvm33F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:a6:67:83:a4:07:b4:43:b6:e2:91:e9:29:43:79:14:02:b5:
55:a6:44:f3:ff:f4:e4:e7:48:9b:65:da:67:03:9b:a6:67:3a:
7c:43:9f:71:9d:66:0d:e7:af:7f:ec:a5:73:76:f3:48:d4:5c:
13:0c:77:0e:34:b7:e5:f5:80:81:fa:aa:b5:79:a3:e6:4f:2b:
2d:ba:f8:22:0d:d1:11:2e:dd:e7:aa:2a:38:83:19:0e:18:e6:
a2:8c:7d:55:3e:fa:d0:81:fc:d9:19:19:20:4a:6a:8a:61:88:
34:f0:42:9b:53:cb:0c:01:a5:2f:87:6d:e5:db:85:67:99:a7:
44:ab:c5:2e:2a:d1:e0:55:4d:e6:44:2a:86:ff:ea:a3:69:20:
c4:ba:1d:e7:39:8b:96:92:ed:03:b6:58:d8:22:de:ee:34:47:
50:b9:2e:7c:6e:a6:52:3d:33:bf:12:93:05:77:d2:c6:c4:f9:
f4:81:20:fe:41:e2:a1:81:02:bd:25:f0:00:30:b8:f0:36:a2:
a6:c5:b4:9c:ae:cb:36:7b:d7:19:e9:23:3d:23:41:bb:13:61:
c4:db:44:a6:9e:08:10:7a:3a:c6:7c:bb:2b:82:49:39:c1:d4:
87:fa:1c:e1:52:20:db:98:8e:0e:7a:24:83:d9:8a:50:3c:63:
3d:77:d9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:50 2024 by rpki-client on console-ams.rpki-client.org