Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RRYmwc-r6vFxh1MKaX3558msBqM.roa
File: RRYmwc-r6vFxh1MKaX3558msBqM.roa (raw, json)
Hash identifier: Pngi2wOwTiGm4HPMZjW0f5CTg5JU9GQKe9+tA0KWN7U=
Subject key identifier: 45:16:26:C1:CF:AB:EA:F1:71:87:53:0A:69:7D:F9:E7:C9:AC:06:A3
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9BC0E20BFC5185DC31931E10A97C6F0F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RRYmwc-r6vFxh1MKaX3558msBqM.roa
Signing time: Sun 24 Dec 2023 12:15:58 +0000
ROA not before: Sun 24 Dec 2023 12:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9b:c0:e2:0b:fc:51:85:dc:31:93:1e:10:a9:7c:6f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 24 12:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=451626c1cfabeaf17187530a697df9e7c9ac06a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:27:34:6a:a5:83:d3:b0:d3:7c:d9:a3:a8:
e4:ae:fb:03:4a:9b:97:16:be:2d:97:9c:3e:f6:49:
b8:de:fb:c8:d8:92:24:e1:8d:70:05:be:55:44:55:
00:53:60:41:ec:72:da:24:0a:5b:c5:df:c9:23:22:
bd:e3:ba:34:38:80:a1:f3:40:a6:35:4f:7e:4f:28:
be:f4:09:f6:38:01:cd:4c:ac:40:5b:e2:4d:3c:85:
5f:6e:f3:01:44:50:60:1a:99:5f:14:7d:2e:1a:81:
f5:a1:31:c6:67:62:83:d9:f3:29:ea:56:89:c1:77:
ee:c5:66:81:98:37:cf:26:43:7c:54:58:01:50:40:
ac:c6:32:dd:ea:fa:8d:9d:52:c0:a6:d4:da:2e:6c:
79:cf:10:cb:f3:a7:7f:c0:4e:0c:00:bd:de:f6:4f:
69:ff:aa:d5:e5:ee:08:c9:d6:83:d8:06:2e:b1:19:
bd:48:bf:c9:29:3f:9f:b2:69:47:cb:2f:72:46:b7:
e3:4c:9f:ce:0d:b3:25:21:98:2e:66:62:d2:6c:71:
ae:43:c5:b2:90:16:72:9b:f9:be:38:9a:7b:4e:86:
c6:3b:fb:5f:76:6a:1e:c4:e6:c1:ba:61:08:a5:54:
b1:58:ad:f9:1d:5f:3e:20:25:9b:4b:1a:d5:86:e9:
0b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:16:26:C1:CF:AB:EA:F1:71:87:53:0A:69:7D:F9:E7:C9:AC:06:A3
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RRYmwc-r6vFxh1MKaX3558msBqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:1e:88:4c:5b:3e:d4:33:b7:59:f3:20:fd:18:a3:42:38:b1:
02:da:5c:8c:b3:76:1c:3a:09:c0:af:63:80:a9:5a:d8:da:0b:
31:d4:a1:13:56:21:2a:b5:3a:58:4c:64:ef:b2:63:d8:dc:54:
06:7e:24:6f:1f:74:59:d2:ee:82:e5:78:c3:15:0f:f8:75:cd:
10:cb:da:86:0c:d9:62:60:7d:f6:aa:e2:ab:4e:37:15:41:78:
35:03:a4:71:93:82:91:e4:54:9b:b6:33:3f:f6:dd:f2:3f:f7:
92:82:77:0a:c8:54:be:97:5e:dc:bc:09:c4:0f:91:7f:c8:ff:
30:91:ee:bf:b2:db:f3:af:e0:38:d4:6d:10:07:91:3a:9b:5d:
ad:16:11:c9:d4:f8:cd:8f:3b:15:62:dd:c7:4a:9a:69:5b:17:
ad:64:ea:c4:74:85:19:9b:f0:a5:98:49:d7:ac:ac:98:bc:aa:
e9:d9:3e:f3:8f:77:6c:06:7c:4a:6d:9b:94:21:4f:f8:ea:32:
52:b2:91:73:61:e2:df:9d:3a:0a:f6:71:ec:f6:2a:73:13:0a:
82:a0:55:f0:e2:9b:fb:ba:e7:86:32:e9:38:ea:54:0b:07:c5:
ee:60:22:16:5e:b8:3d:5c:8e:cf:bf:e1:bb:5f:49:c5:7d:bf:
32:db:41:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org