Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/POOoZBepcOCflusKxtD_ItFfxks.roa
File: POOoZBepcOCflusKxtD_ItFfxks.roa (raw, json)
Hash identifier: UxUVbaqfnl1qNHeQV1GSJG19ETLS9rQN+a2Xn174uRc=
Subject key identifier: 3C:E3:A8:64:17:A9:70:E0:9F:96:EB:0A:C6:D0:FF:22:D1:5F:C6:4B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E48406B2AFD6FE3234BE852D5CC719754
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/POOoZBepcOCflusKxtD_ItFfxks.roa
Signing time: Sat 16 Mar 2024 17:12:45 +0000
ROA not before: Sat 16 Mar 2024 17:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:48:40:6b:2a:fd:6f:e3:23:4b:e8:52:d5:cc:71:97:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 16 17:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ce3a86417a970e09f96eb0ac6d0ff22d15fc64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:69:d3:5a:9e:b3:76:cd:64:dc:a1:6a:b6:
3b:eb:72:26:62:46:df:b0:11:62:5e:fa:96:5b:3f:
bb:e6:a8:43:b0:f5:09:98:fe:a5:55:3a:3c:f3:40:
e0:f3:71:0e:5b:53:62:07:ae:0a:16:2d:72:8e:b5:
72:c4:3c:d5:80:80:77:9b:1c:18:ef:d5:b7:a3:36:
48:ba:fd:83:d9:35:e1:22:97:50:47:d7:6e:b7:d8:
a6:03:03:06:82:58:e1:cb:fe:03:a7:3e:95:6f:2d:
bb:c1:f2:4c:53:29:1f:83:64:ed:1a:52:ce:c0:aa:
00:35:9f:92:d5:f4:ba:e6:a9:21:bd:ab:86:cc:5a:
35:38:80:de:cc:ef:e3:61:f5:3f:24:ca:8b:d0:5e:
1e:fe:70:fd:46:14:3c:6e:7e:85:52:e4:27:6a:47:
4b:29:72:33:46:73:ad:14:14:11:3d:4a:8e:f2:c6:
af:8a:66:80:c1:53:aa:b5:ab:7d:63:a7:d6:10:75:
2b:09:06:97:50:d4:3f:b1:c2:c9:7d:e1:d3:a4:b3:
2b:1e:77:8f:27:92:0e:0d:d1:c4:90:9d:56:c7:95:
18:c2:61:0e:3a:e4:18:f3:49:2f:5b:ef:71:3b:50:
5a:8d:e4:8b:43:57:1f:fb:28:5e:bc:04:83:8b:54:
41:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E3:A8:64:17:A9:70:E0:9F:96:EB:0A:C6:D0:FF:22:D1:5F:C6:4B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/POOoZBepcOCflusKxtD_ItFfxks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:dc:0b:2c:d8:7e:57:3c:54:46:b5:ab:9c:77:b3:42:a3:09:
14:aa:d6:34:fb:6c:fc:46:e8:31:1a:28:fb:bd:04:5e:14:70:
05:ad:10:bc:7d:21:2b:ce:17:67:e1:a5:ce:72:cc:41:f4:d0:
81:c0:cc:81:6e:7c:cb:b2:39:5a:6c:88:3b:79:4b:82:48:37:
6a:97:e0:21:a2:31:22:ce:ad:19:2f:48:ce:71:4e:cb:76:3b:
76:72:c9:1c:cd:c1:ec:1f:fa:5d:9c:99:ef:cc:13:44:3f:ea:
01:50:5c:48:24:60:94:a3:fb:10:65:9c:e8:4d:f1:84:57:93:
e0:29:c8:77:77:66:58:bc:91:dc:dc:67:da:ea:8c:d6:05:a1:
ca:ce:61:cc:4d:6d:8b:40:cd:b4:ee:1c:4d:71:47:fb:a5:03:
93:ea:ac:1f:eb:fe:d2:95:72:b7:bc:9f:0f:18:b0:ba:83:4a:
2b:39:6f:d1:88:83:36:e9:46:ef:1f:cc:0d:f3:47:0e:41:7c:
b8:09:30:c4:6a:31:1a:6f:50:33:d6:75:11:ba:71:17:4a:a5:
6b:6c:c0:c1:6f:0e:30:f9:b4:7d:a4:e7:bd:55:7b:03:ee:10:
4e:f7:88:1a:88:cf:9b:87:1a:70:29:27:d3:f8:4a:23:70:fe:
dd:4e:bb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org