Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/R1a1InMlfBsg2tCGSvNFuuPmDm0.roa
File: R1a1InMlfBsg2tCGSvNFuuPmDm0.roa (raw, json)
Hash identifier: HS9HyNZiXx0x7LpQc6SzaQZgA//4HyV5ztRUjR/YjfM=
Subject key identifier: 47:56:B5:22:73:25:7C:1B:20:DA:D0:86:4A:F3:45:BA:E3:E6:0E:6D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EC9A48777F8C44B69EADB6DF81EA3E90B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/R1a1InMlfBsg2tCGSvNFuuPmDm0.roa
Signing time: Wed 10 Apr 2024 20:13:06 +0000
ROA not before: Wed 10 Apr 2024 20:13:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c9:a4:87:77:f8:c4:4b:69:ea:db:6d:f8:1e:a3:e9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 10 20:13:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4756b52273257c1b20dad0864af345bae3e60e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:39:a1:4a:3f:e5:d9:b2:24:29:eb:70:a2:
da:db:4c:33:fa:d9:a3:80:f4:14:b5:23:92:f6:4c:
37:f3:46:63:fa:94:4e:e2:5a:2d:c9:6a:b2:db:80:
3b:f9:89:7f:f7:c0:81:ba:cd:73:55:ca:ff:51:2b:
1f:86:08:82:0d:68:f0:3e:b4:fc:1c:c9:95:4a:dd:
1f:62:b1:76:39:2c:0a:19:34:29:e6:88:c1:4e:47:
5e:c6:da:79:65:fc:e4:29:4b:ff:ce:51:83:3a:f2:
b6:cd:cd:83:b0:d5:8e:88:e5:89:b9:ba:09:98:10:
17:bf:e4:1e:e0:5c:fc:6b:f6:a5:3e:85:6d:c4:90:
6b:01:e2:4f:df:c4:1e:f7:da:d9:45:88:be:f8:79:
e6:96:71:93:1c:71:4c:24:c5:c1:95:91:f2:74:99:
52:99:2f:77:50:3e:66:2f:e4:5d:30:82:22:40:90:
58:a5:88:02:cd:db:af:bb:d8:65:61:41:e9:4c:28:
b2:23:53:19:73:e9:07:82:f9:2d:9b:ad:4c:d9:21:
6c:c0:9f:1f:47:29:d2:d2:14:62:57:2e:1d:0c:32:
fd:94:71:b8:73:6a:f8:60:ff:16:0b:5a:cd:18:c2:
98:7e:5b:8e:e6:ce:4b:8b:7f:ad:cd:e4:4e:5e:66:
25:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:56:B5:22:73:25:7C:1B:20:DA:D0:86:4A:F3:45:BA:E3:E6:0E:6D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/R1a1InMlfBsg2tCGSvNFuuPmDm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:b7:71:88:7a:8c:ff:8f:e1:8b:87:a2:5e:01:8b:7d:8e:9a:
8a:fc:05:65:ed:76:49:26:0f:ac:5c:ba:66:2e:a8:58:e6:53:
31:4e:ed:a1:c1:3b:d5:ea:2c:39:ad:37:b4:80:75:8f:46:a8:
f8:57:35:52:b2:82:06:86:ee:c9:8a:1e:67:f8:f8:4f:3a:17:
3e:eb:c8:c6:be:1f:70:8b:0c:71:bf:a9:5b:f7:e5:81:b0:5d:
55:cc:e4:67:a0:09:42:5b:87:96:01:c4:83:7a:14:37:7e:93:
c3:a1:99:30:6e:14:99:b7:af:19:c1:7a:e1:09:8a:32:62:50:
6e:ca:13:c7:f0:24:9b:1f:8b:0c:40:76:30:4e:36:79:c7:58:
94:70:83:80:98:23:83:fc:9e:ca:28:e6:80:00:d3:66:42:6f:
71:5f:13:1c:ff:43:97:88:ef:5d:e6:c6:e2:d1:89:02:f9:ed:
9d:48:b4:48:a2:94:73:a5:2b:90:54:6d:db:e0:7d:e3:db:cd:
33:cb:6a:51:cd:90:f7:c7:1c:0a:32:e5:c2:7e:5a:32:58:1d:
cc:a4:67:ee:10:39:d3:5a:19:7c:95:46:5e:c7:be:9b:a3:ac:
d0:73:cf:21:83:32:c4:86:00:52:b2:b4:27:af:64:c6:b9:7b:
16:b3:ee:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:50 2024 by rpki-client on console-ams.rpki-client.org