Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NHjnOCrJQktdY4c0mFZ-TgZLKY8.roa
File: NHjnOCrJQktdY4c0mFZ-TgZLKY8.roa (raw, json)
Hash identifier: zlDUx0Xvtm3DKs8+F88sMnPr6ddrWjLoh3NuagDWCRI=
Subject key identifier: 34:78:E7:38:2A:C9:42:4B:5D:63:87:34:98:56:7E:4E:06:4B:29:8F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EE3D23083EFB7E0237EAEB6F7A0B3C7BE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NHjnOCrJQktdY4c0mFZ-TgZLKY8.roa
Signing time: Mon 15 Apr 2024 22:13:06 +0000
ROA not before: Mon 15 Apr 2024 22:13:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e3:d2:30:83:ef:b7:e0:23:7e:ae:b6:f7:a0:b3:c7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 15 22:13:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3478e7382ac9424b5d63873498567e4e064b298f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:e4:e5:3f:46:16:4f:10:89:93:88:29:2e:
12:7b:57:1d:d0:ff:ef:f7:1f:93:ae:d3:4d:fb:a4:
72:6b:f5:b7:cd:a9:37:5b:ba:cd:70:66:91:b5:91:
dc:07:f4:72:a2:a4:33:cb:08:95:1f:ee:a0:6a:ac:
5c:b3:b7:07:67:76:21:29:10:12:46:14:c1:d6:76:
7b:a8:23:13:bb:41:ee:95:2f:54:d4:26:f9:08:ae:
7d:cf:60:7a:33:7d:78:82:4d:c7:ca:05:55:e6:6c:
67:bc:5f:f6:03:5e:e2:42:fc:26:48:63:57:fd:24:
8d:f1:eb:64:63:fc:7a:3f:2a:f9:3e:35:1e:0e:0b:
9a:fc:21:c1:b0:53:a5:81:63:9b:fb:95:2f:69:7a:
c7:fc:88:67:cb:db:31:9f:29:21:f9:68:18:5f:62:
c7:c3:78:88:66:74:d1:75:44:e4:41:df:8c:47:f8:
18:0d:fb:0b:c5:4a:e1:ff:ab:e1:c0:20:5a:52:62:
34:01:a7:f4:38:8b:14:a6:3f:5e:59:ac:d6:a3:ef:
3e:3f:f0:ac:0f:37:39:94:7c:6f:8f:5f:16:87:83:
f4:fc:e2:31:cc:fa:6e:90:16:6a:ea:a6:2d:95:93:
c5:78:c0:5b:92:6c:6d:89:85:04:65:7c:e6:da:44:
d0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:78:E7:38:2A:C9:42:4B:5D:63:87:34:98:56:7E:4E:06:4B:29:8F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NHjnOCrJQktdY4c0mFZ-TgZLKY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:4e:40:ce:af:1e:fb:13:dd:33:ad:20:8d:84:f7:fb:b6:91:
8b:3e:41:b3:c5:ff:21:e9:6f:70:98:45:e9:63:5a:d9:30:66:
ff:14:a1:b6:36:4a:cd:ca:21:e9:0e:1c:51:a2:34:27:9b:c9:
45:56:a7:a0:71:b0:12:29:f6:84:a2:b3:c9:a9:07:bb:e4:d8:
4d:89:47:8b:11:af:e8:a3:09:a9:6b:5e:a8:8b:60:fc:76:10:
33:14:5e:60:6d:dc:ec:6e:c3:55:24:d5:d4:d2:56:8c:ec:6b:
98:45:d6:a4:62:cc:20:dc:c7:1b:80:73:6b:7d:c6:f8:3c:f4:
6e:39:a2:b5:68:e1:2b:21:3f:47:cc:f1:d0:90:94:b0:16:98:
93:9e:77:63:ff:27:6b:7c:a7:80:42:0d:6d:84:a4:d8:c5:8d:
35:fc:b0:25:94:a5:bc:3e:b0:37:19:d6:99:e8:4b:ec:c9:16:
2a:ac:e7:f4:74:44:b0:49:37:1e:5e:bc:06:4e:20:76:17:2d:
80:99:83:51:bc:b3:30:70:09:82:b1:b6:b2:ea:47:db:99:2e:
40:ff:96:eb:05:4d:94:ea:ab:cc:b1:9c:27:ba:5d:e8:21:31:
0e:b7:2b:45:49:bc:d3:6e:c9:05:cb:0a:90:02:d3:3c:24:33:
f0:4b:8b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org