Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Q5SRdTusA_scyKe_K7rTpe1US68.roa
File: Q5SRdTusA_scyKe_K7rTpe1US68.roa (raw, json)
Hash identifier: 3Nea7BUVXwW1FNhHOLIAR2gJd1j6sLZ0ZWb9jI/yxyA=
Subject key identifier: 43:94:91:75:3B:AC:03:FB:1C:C8:A7:BF:2B:BA:D3:A5:ED:54:4B:AF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DE36698F2758F2E89B39D4D182B5222BA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Q5SRdTusA_scyKe_K7rTpe1US68.roa
Signing time: Mon 26 Feb 2024 03:12:48 +0000
ROA not before: Mon 26 Feb 2024 03:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e3:66:98:f2:75:8f:2e:89:b3:9d:4d:18:2b:52:22:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 26 03:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=439491753bac03fb1cc8a7bf2bbad3a5ed544baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:14:1b:b7:54:5c:b8:f3:ac:fe:3a:53:f0:
c3:e1:ee:28:73:b4:3d:46:de:f1:8d:26:67:29:7e:
48:37:03:09:c8:5e:cd:fe:c8:c8:05:5e:f5:0c:7c:
57:d3:c7:63:5f:ad:a4:9e:8a:48:40:77:79:7f:fe:
88:9a:04:32:90:bf:15:54:6f:bd:de:a3:ea:d4:59:
4d:f6:16:7e:3d:2f:5d:45:fe:db:75:cc:00:6a:f8:
da:95:68:8a:31:13:71:b8:d4:20:78:bc:82:b6:92:
c2:33:6e:67:5e:b1:46:5a:b6:ac:78:84:31:e4:80:
a6:fb:a9:d4:cb:c1:06:67:10:a8:7a:3f:1f:af:c3:
cd:77:9e:a4:92:48:f1:ec:63:fb:b8:f7:a2:41:20:
83:93:51:69:67:e3:12:95:17:4d:0c:9e:fa:72:61:
c6:f8:e2:51:02:65:49:43:33:a3:7a:54:e5:3c:37:
09:6d:ae:85:e8:9f:bb:5f:1b:a9:f3:16:c9:b3:91:
36:50:62:ea:52:19:1b:70:9b:f7:e9:0a:57:3e:e4:
5e:2a:bd:6a:7c:9f:15:4c:bd:ac:19:39:ae:5e:aa:
7b:96:41:28:3b:e4:5b:4e:2d:fa:d8:db:f7:30:bb:
60:1d:ee:73:3e:45:84:e2:eb:89:88:00:e1:57:41:
c9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:94:91:75:3B:AC:03:FB:1C:C8:A7:BF:2B:BA:D3:A5:ED:54:4B:AF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Q5SRdTusA_scyKe_K7rTpe1US68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:d4:95:94:71:f1:5c:87:ea:20:ce:22:14:9c:fd:c1:8b:5f:
4d:72:19:6f:2c:54:49:85:95:7c:5e:0f:69:bf:e4:8d:fd:3e:
ab:74:c0:60:6a:d2:01:9c:74:ec:a9:6c:ef:02:7b:52:c2:89:
dc:28:00:ef:4f:7d:f3:63:3e:07:02:4b:f7:e4:4f:46:5e:7f:
9e:86:25:21:5d:e8:30:6f:14:72:68:9b:ef:d8:f2:b8:a8:aa:
91:7f:85:40:ee:b2:ca:59:fd:f1:b1:a3:b9:19:0f:54:b0:b5:
0d:a7:1d:e9:93:1e:26:1d:aa:3b:e3:6c:87:a9:10:7e:50:a8:
1a:77:48:4b:ae:b8:f8:33:15:75:43:b1:16:69:8e:03:00:9e:
18:d4:d9:68:66:45:1f:99:1b:86:05:35:d4:cd:ef:88:7c:8b:
50:32:64:18:c8:29:f4:af:3b:65:53:df:7c:d2:c2:e7:d4:5e:
82:3c:5d:5e:fb:14:f0:65:6b:b1:af:b7:dd:35:3e:e3:ab:04:
e0:e1:04:84:f5:b6:80:8c:49:0e:a4:b8:bf:90:4c:ee:9f:18:
b2:bd:e4:6f:ea:77:cb:e9:a3:da:6c:98:20:64:78:12:07:a0:
27:84:c7:40:f9:98:21:e4:ba:28:5c:ee:4e:d6:85:91:91:5c:
17:05:14:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org