Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RMFTnyRW4yH1UI5JgFsA55jOKgA.roa
File: RMFTnyRW4yH1UI5JgFsA55jOKgA.roa (raw, json)
Hash identifier: m3nxMSdFfAfWrTBPnvh6umKXtNTBsc1rb5klaDiu3j0=
Subject key identifier: 44:C1:53:9F:24:56:E3:21:F5:50:8E:49:80:5B:00:E7:98:CE:2A:00
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CAA1E8E08A7789FADC18F5DF1C5D010E0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RMFTnyRW4yH1UI5JgFsA55jOKgA.roa
Signing time: Wed 27 Dec 2023 07:12:58 +0000
ROA not before: Wed 27 Dec 2023 07:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:aa:1e:8e:08:a7:78:9f:ad:c1:8f:5d:f1:c5:d0:10:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 27 07:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44c1539f2456e321f5508e49805b00e798ce2a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:53:5f:04:0c:d0:25:01:ea:92:41:b5:a6:
5e:45:b5:7a:2b:27:de:c0:7b:3b:2e:0a:b7:11:6e:
61:44:98:9c:b7:9a:9d:0c:d7:18:cb:67:10:ee:56:
4a:f2:38:cf:c4:41:dd:87:25:65:40:b6:7c:de:51:
6f:d4:07:52:a9:12:4b:5c:34:0a:cf:b5:ce:e9:21:
61:cd:f5:c2:3e:9b:99:ac:e3:d0:56:ed:c1:41:db:
d3:f7:68:74:46:1b:27:c7:e5:28:f1:a3:3a:35:5b:
3f:55:ac:f4:fe:88:65:ec:28:d3:41:ee:7a:3c:9a:
4d:a1:f4:bd:4c:4b:73:ad:99:eb:f3:36:0a:17:ff:
e7:58:ea:72:c6:a5:f3:bc:b6:ef:87:21:c2:a8:2b:
c4:a9:04:60:40:26:de:59:ce:77:ef:0f:49:51:6a:
4c:b0:fd:40:81:ce:59:59:4b:8b:7a:e7:d9:76:f2:
8b:00:19:ab:ed:06:6b:e1:46:8e:c5:29:07:8b:15:
42:c4:13:26:67:3e:86:ed:aa:e1:41:a2:45:05:65:
c9:29:79:82:d6:af:a3:dc:b1:42:f0:db:7c:21:d4:
75:db:b0:ab:06:22:cd:50:16:51:e9:6b:ce:46:19:
84:86:3b:6d:2c:7f:4b:85:70:2e:9a:e1:7a:9b:fa:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C1:53:9F:24:56:E3:21:F5:50:8E:49:80:5B:00:E7:98:CE:2A:00
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RMFTnyRW4yH1UI5JgFsA55jOKgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:21:c2:3a:e3:eb:6b:88:eb:e6:2d:79:db:10:ac:aa:ad:3d:
57:63:32:37:31:77:23:a4:bf:59:5a:64:76:13:88:cd:92:70:
c1:20:9f:31:9d:5f:9d:d7:cb:a4:c0:db:2a:02:07:9e:4f:de:
16:b0:82:d4:2d:b8:4c:09:2e:31:16:75:61:4c:ea:1c:7b:bf:
c8:6e:fb:4b:c0:c0:de:5a:67:6a:71:26:be:4e:9b:e4:02:8e:
0f:fe:39:b8:7d:26:5f:97:57:87:e3:63:79:2f:75:be:0e:74:
c5:b7:a0:19:8b:4a:d7:13:db:d4:6d:a4:1b:37:ea:cd:aa:d2:
ae:1e:b6:4d:da:3b:7c:23:a8:10:49:50:59:35:93:dc:47:04:
e7:01:ba:45:f4:c5:e0:15:76:80:b7:bd:40:f0:db:46:72:cb:
b7:63:e1:8d:5c:ed:c5:38:c9:fb:03:44:8a:73:0e:c1:00:9f:
fe:13:84:8e:8f:4f:45:4f:58:34:a4:d8:e9:36:d6:dc:f7:6b:
4b:da:88:c1:3a:f1:23:94:db:7d:5d:a7:f1:ad:08:29:b0:2d:
d4:a4:31:81:a2:5d:06:02:ba:1e:92:86:cc:af:04:2d:8a:61:
fe:c4:f3:4c:66:90:83:e8:14:04:eb:b8:8b:f6:26:05:b5:03:
aa:5f:c5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org