Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/R2J--uRcctR9hwLUdgK7JddF2oo.roa
File: R2J--uRcctR9hwLUdgK7JddF2oo.roa (raw, json)
Hash identifier: mk9ZjgiJ2mn6Apoki/g3Qgmle6xFo2CEVA1I9NRL0Ts=
Subject key identifier: 47:62:7E:FA:E4:5C:72:D4:7D:87:02:D4:76:02:BB:25:D7:45:DA:8A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D799EA0ADF2A4B8C24DCFC5156A8E5CF3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/R2J--uRcctR9hwLUdgK7JddF2oo.roa
Signing time: Mon 05 Feb 2024 14:14:15 +0000
ROA not before: Mon 05 Feb 2024 14:14:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:9e:a0:ad:f2:a4:b8:c2:4d:cf:c5:15:6a:8e:5c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 5 14:14:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47627efae45c72d47d8702d47602bb25d745da8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:de:93:e7:17:85:e8:15:db:35:1e:64:e1:
68:16:79:2e:1e:6d:cc:24:6b:9d:82:dd:44:25:64:
d3:4b:40:4f:27:79:60:4a:d4:fd:6b:d3:1d:5f:42:
b7:28:7c:35:6f:8e:fa:1d:9b:04:30:0f:1a:61:f7:
6f:c1:46:63:45:d4:2b:a8:18:a3:d5:2b:84:80:0e:
2e:d4:33:c3:75:ee:a6:ca:bd:9e:50:4d:9d:c7:ad:
db:87:d3:f4:ff:b7:2f:ae:94:d6:d4:a3:3e:55:73:
8c:74:18:7e:ba:2f:f5:0b:5a:5c:d2:fa:a4:a8:2c:
a6:80:95:f0:57:a6:e1:9b:38:f5:63:a2:cc:8c:6f:
12:f9:50:29:7a:fe:85:83:cc:4a:34:1a:eb:70:6f:
6b:ed:a4:aa:1c:ef:b9:67:2e:b7:2b:f2:72:5a:fb:
92:26:a2:3f:54:3a:fe:83:5b:e7:20:ed:b5:df:c6:
18:ac:37:2c:a0:52:7e:c3:b5:02:66:d5:5d:4e:97:
fa:68:fd:d5:57:84:e4:63:70:27:a3:47:08:37:1c:
62:14:b9:51:2a:a8:da:eb:e8:26:d0:f2:e8:1d:d6:
62:24:5b:04:9d:40:bf:16:b0:73:25:ff:c2:f6:bc:
5d:85:13:bb:95:cb:51:2d:cb:ac:6f:42:0a:24:8e:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:62:7E:FA:E4:5C:72:D4:7D:87:02:D4:76:02:BB:25:D7:45:DA:8A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/R2J--uRcctR9hwLUdgK7JddF2oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:5d:df:85:1f:51:27:b4:28:93:0f:04:7c:bb:b4:11:99:87:
e0:4f:9a:45:cc:6e:be:72:17:f2:be:dd:92:1e:93:13:3d:52:
f2:9d:2f:be:f4:a4:d7:da:32:c0:ee:ec:8d:bb:67:bf:98:68:
21:64:b0:b9:ee:b7:67:7a:2a:2a:f0:c1:85:cf:93:d6:fd:fc:
ec:5e:3d:92:f3:ed:96:06:2d:24:8d:70:b6:e2:7f:e3:8e:b4:
d9:8c:92:a3:f1:07:be:de:6e:f9:b6:c8:a5:9e:5d:21:d6:1f:
d1:dc:0f:c8:ae:a3:b3:17:5b:47:54:95:a6:14:ba:c0:2d:ba:
fd:1c:cd:4e:2d:62:71:f1:67:69:05:b8:99:cc:93:7b:a0:4d:
2d:0f:f9:b0:20:7f:48:4f:28:e2:a4:28:ec:3c:1b:de:1e:2d:
c1:7b:87:6d:be:55:d4:5b:1c:5b:e2:91:63:5d:6f:49:75:cb:
1c:4e:6c:68:01:77:79:d7:31:6f:1d:92:3a:84:22:8f:e8:c4:
d3:30:77:26:7e:c8:7c:76:dd:ca:b8:53:92:89:18:14:b1:1e:
2b:6e:8b:af:4c:fa:40:1e:c5:64:31:96:bd:72:82:dc:5e:d4:
65:a6:4d:b4:72:4d:6c:14:65:5d:b9:92:64:41:03:74:3c:6e:
08:d2:61:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org