Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OB4fhbolwoElRFeWnWyBiAhZv9Y.roa
File: OB4fhbolwoElRFeWnWyBiAhZv9Y.roa (raw, json)
Hash identifier: r7z//MZhSBUWpYDqh9gywbWefsteIGZcwseQpBA4P+o=
Subject key identifier: 38:1E:1F:85:BA:25:C2:81:25:44:57:96:9D:6C:81:88:08:59:BF:D6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DBAA689AAF8B8C110026F5F2AA72F6CA5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OB4fhbolwoElRFeWnWyBiAhZv9Y.roa
Signing time: Sun 18 Feb 2024 05:18:12 +0000
ROA not before: Sun 18 Feb 2024 05:18:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ba:a6:89:aa:f8:b8:c1:10:02:6f:5f:2a:a7:2f:6c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 18 05:18:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=381e1f85ba25c281254457969d6c81880859bfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:e1:8b:45:bd:09:78:db:b9:7c:81:74:1b:
5f:d9:68:77:64:7e:e7:ea:19:1f:83:cd:4e:44:75:
93:39:2a:d8:b0:4e:d9:2a:f4:3c:98:0b:f0:80:64:
88:de:2b:63:97:6a:8b:34:4c:15:a4:9e:21:8f:21:
10:20:7d:7a:3d:19:42:fe:cd:69:e6:1a:ac:20:a6:
cf:20:19:40:ce:a1:94:32:db:87:8e:25:36:d1:ef:
e8:e8:fb:09:e4:cb:18:78:ab:55:0f:73:f1:ab:a4:
6c:40:67:93:b1:81:84:d5:65:11:31:3c:18:5f:7b:
65:54:5d:36:49:14:60:8b:97:54:45:ff:ec:49:34:
24:f6:ee:19:34:77:c0:71:27:71:c2:c0:a6:a1:52:
81:b9:12:b7:5f:92:a7:7d:33:fe:a3:a1:12:8b:cd:
b2:04:89:9f:7f:22:8b:d8:a9:83:b3:78:77:19:40:
43:0f:7f:29:6d:3b:23:8f:19:76:c8:72:f7:f0:52:
66:5b:f2:96:f6:bf:b2:04:79:19:c2:08:6b:d4:b2:
a8:85:1c:7c:0a:9f:86:c5:d2:07:24:b2:b5:f5:9a:
13:18:67:e3:61:e2:c0:ba:af:20:d0:2a:94:af:91:
a0:36:11:41:06:07:04:52:e5:24:57:92:13:cb:23:
89:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1E:1F:85:BA:25:C2:81:25:44:57:96:9D:6C:81:88:08:59:BF:D6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/OB4fhbolwoElRFeWnWyBiAhZv9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:63:92:46:62:46:76:9e:7a:e5:34:d2:33:ab:03:b6:9b:82:
2d:4e:b7:56:a1:79:e9:17:d5:71:51:8c:ae:d4:f7:f5:6d:80:
72:38:46:a2:2e:86:49:c5:1d:b6:83:0f:de:b7:5a:0c:40:ed:
1a:1c:a3:62:57:c2:a6:f6:77:c5:2b:f6:6a:55:ba:85:00:04:
db:ac:75:ae:a7:85:5b:93:12:fa:b2:20:b7:2e:0e:00:d5:7e:
05:46:e5:93:9e:ce:50:b5:da:e3:b4:c0:8f:22:4e:24:b4:56:
38:67:9d:25:ef:e1:07:07:51:a0:2b:14:99:51:88:5c:d1:3b:
2a:25:83:70:98:a2:fc:1c:ef:66:da:60:7e:2f:89:5c:0b:57:
ca:dc:0a:be:a2:ee:16:f5:02:f9:6a:28:01:2d:3f:7a:6f:39:
54:41:b6:31:c9:69:f8:04:12:62:32:a8:d4:82:ac:93:33:ab:
4e:23:0a:0a:ce:b7:de:0a:e3:f0:fe:ab:ee:45:7a:dd:e1:62:
ed:41:53:48:ff:95:ee:93:fe:d3:bf:23:41:f6:d2:03:e4:b3:
31:e8:0d:9a:e0:e3:33:37:14:9b:4e:2d:3c:86:31:90:c5:a6:
0a:e6:c8:b4:f0:d4:f8:f4:0f:cf:d3:ee:0d:3e:7c:b7:25:3a:
45:2b:83:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org