Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RV5WHX2VZwmrFHztWdB4jHYOEm8.roa
File: RV5WHX2VZwmrFHztWdB4jHYOEm8.roa (raw, json)
Hash identifier: jwWUfIrzlPzRquWoKUI8BUU6jF3lndQQqHBE+bz1PHY=
Subject key identifier: 45:5E:56:1D:7D:95:67:09:AB:14:7C:ED:59:D0:78:8C:76:0E:12:6F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E09CF8E6A855DFEBEA330A4333A478D20
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RV5WHX2VZwmrFHztWdB4jHYOEm8.roa
Signing time: Mon 04 Mar 2024 14:13:01 +0000
ROA not before: Mon 04 Mar 2024 14:13:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:09:cf:8e:6a:85:5d:fe:be:a3:30:a4:33:3a:47:8d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 4 14:13:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=455e561d7d956709ab147ced59d0788c760e126f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:10:4f:1b:8b:d6:a2:54:ce:ef:f5:bd:64:77:
91:e4:e2:bc:94:f2:4d:87:8f:1e:98:f7:f5:d7:10:
3f:72:0e:73:bc:16:ce:89:45:a4:9b:9c:44:94:a3:
80:00:5d:89:6d:7d:0f:f1:cc:98:c6:2c:bf:39:3b:
e7:ae:73:00:ed:09:29:a3:28:c7:27:5a:0f:a1:3f:
95:8f:41:06:db:db:3e:2b:1b:09:0a:cf:3d:af:e0:
b8:21:d6:14:95:b0:33:0b:a9:b5:10:81:18:58:c3:
94:5a:69:d6:4a:eb:3d:0a:aa:9d:ed:32:f3:4d:5a:
db:7f:de:00:0a:47:42:fe:a8:b4:c1:4f:9f:cc:97:
31:14:22:91:1e:b7:39:1a:ad:43:d1:b1:f9:1c:e8:
63:fc:2c:1a:86:50:ad:09:53:43:ed:dc:68:a2:db:
59:6e:e0:12:0b:18:42:91:21:1f:c0:b2:44:e1:a3:
93:7a:08:3e:9d:51:f5:61:e9:f8:eb:ce:3f:84:ca:
72:37:c6:cb:14:aa:14:d6:ce:c6:47:68:e3:59:d8:
ee:96:dc:18:39:e6:e1:e3:72:47:a1:cb:e6:5d:23:
ce:11:d4:12:c4:77:3e:3b:b3:45:31:63:59:51:35:
c7:db:9e:32:e4:68:52:a0:0d:4b:46:09:f9:b0:67:
02:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5E:56:1D:7D:95:67:09:AB:14:7C:ED:59:D0:78:8C:76:0E:12:6F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RV5WHX2VZwmrFHztWdB4jHYOEm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:78:94:a3:b2:d8:fe:9b:d7:88:bf:cf:2e:63:25:a8:5a:d6:
7e:8f:93:90:4f:68:c2:a6:6a:69:44:34:3b:23:8c:46:7e:93:
1e:22:8b:d9:2a:12:16:90:e1:36:14:ae:4c:d6:5c:ce:ce:59:
0d:70:8f:de:de:7f:5f:0c:48:17:70:a7:62:ac:51:dc:d0:68:
41:09:11:94:7d:24:d0:9c:24:94:78:a6:eb:d2:81:7e:c9:2d:
f4:9e:a8:e9:12:97:2f:ca:9f:a6:d0:73:c4:e8:dc:8f:f4:91:
0f:d2:92:44:f9:90:0b:f4:1b:22:03:af:df:10:41:ac:3d:c4:
bb:fa:fb:92:8c:9a:ba:bd:92:00:d3:0d:27:65:df:f1:8a:a0:
88:dc:90:67:3d:0f:c2:69:b4:5d:58:1a:47:76:bc:78:dc:42:
83:ff:5c:d1:99:e5:b1:93:cd:e4:e0:4d:a7:9d:bc:18:c6:3a:
19:11:d9:ce:9e:6c:f1:58:c6:3b:ed:dd:35:ec:48:55:9f:3a:
72:62:8e:18:e7:28:17:47:e9:25:9d:03:64:94:33:8f:fd:a7:
31:7d:dd:a0:fd:b7:91:64:36:59:ec:cd:d5:ef:d6:c5:ec:ef:
2c:b0:a4:6e:8f:7b:fa:bd:ec:41:27:96:fe:1a:56:46:ff:0d:
4c:f0:2a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org