Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SRR7PUkIqtoOKCm2ePqo5n3UieY.roa
File: SRR7PUkIqtoOKCm2ePqo5n3UieY.roa (raw, json)
Hash identifier: b3M6QmrudWxBIHHYZ9rLkj4mnj5h6Pr6/fRFeVXJIHw=
Subject key identifier: 49:14:7B:3D:49:08:AA:DA:0E:28:29:B6:78:FA:A8:E6:7D:D4:89:E6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB0596865958A5A6E93FB712AA1FD576F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SRR7PUkIqtoOKCm2ePqo5n3UieY.roa
Signing time: Thu 28 Dec 2023 12:14:58 +0000
ROA not before: Thu 28 Dec 2023 12:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:59:68:65:95:8a:5a:6e:93:fb:71:2a:a1:fd:57:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 28 12:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49147b3d4908aada0e2829b678faa8e67dd489e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:8d:99:1a:4d:44:20:45:c2:97:77:b1:cc:
e1:b7:4f:a8:76:8f:89:f3:4e:f9:7b:75:62:a6:0f:
f9:c4:6a:9d:18:af:7d:4e:f2:9f:b2:2b:bd:76:7c:
d5:d8:18:83:8b:78:4f:46:ad:6c:7b:1e:5b:8a:67:
d8:d1:7d:b7:29:e2:dc:d9:be:57:32:4a:54:04:e9:
8d:7d:64:58:ee:3f:9d:b3:e3:aa:c8:8e:b5:bd:5f:
0d:0a:4d:10:09:3e:b7:12:35:b9:3b:6a:61:29:0f:
6b:bd:83:aa:2c:2f:77:96:ea:d0:04:73:84:16:7f:
3a:c3:ea:de:45:12:04:c9:f7:c3:b1:5b:38:24:42:
a3:b0:1a:97:0e:95:da:f0:69:7f:ac:ee:34:22:2c:
f4:0b:36:1c:a1:a2:e0:6b:00:b8:67:da:e0:f3:77:
59:9a:db:aa:19:7c:7f:6e:f4:4d:e0:db:1b:7a:e4:
56:3e:b0:cf:46:71:e7:c3:b5:8e:02:90:f2:38:f3:
ce:ea:aa:4c:3a:12:1e:62:41:29:3f:77:0a:93:01:
04:8f:84:f3:3b:a0:4d:8f:74:af:f8:65:9a:d6:14:
ef:87:56:42:6e:38:a4:2e:e3:b6:85:b6:de:6f:ac:
17:10:25:05:28:a3:d6:ce:37:61:d4:ec:11:9c:7e:
df:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:14:7B:3D:49:08:AA:DA:0E:28:29:B6:78:FA:A8:E6:7D:D4:89:E6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SRR7PUkIqtoOKCm2ePqo5n3UieY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:3c:50:71:ea:f1:70:31:a7:40:d2:aa:4a:63:92:1e:2e:50:
b6:f3:42:e3:c1:37:fe:e5:e1:d5:64:50:56:49:ce:08:8e:9e:
80:6d:6d:da:ed:a3:cc:95:96:65:ce:7f:57:5a:0d:04:c4:98:
92:09:20:58:45:d3:d4:6b:0a:68:38:ad:79:1e:aa:59:2b:7d:
1b:c3:ff:b2:8f:bf:c1:bc:a3:c6:24:d2:3e:e9:72:68:9c:66:
d6:aa:07:3c:18:c7:9f:ef:b1:29:8c:2a:23:0e:17:45:3e:ce:
7a:36:e0:64:1f:a7:df:96:e8:d1:ce:a8:cc:90:5f:1a:72:ea:
03:80:1e:7b:3d:da:71:de:d0:27:c9:3a:38:65:22:d9:c0:f9:
f4:19:8d:b8:99:fa:64:7c:eb:da:10:17:46:0a:0c:88:01:34:
ee:9a:20:39:f5:c9:6b:b8:e2:13:9b:22:3e:de:49:7a:ac:4c:
f9:36:d1:ce:e1:18:ad:fb:f1:cf:f7:cd:eb:ad:f6:71:67:c0:
ba:c5:40:26:b1:51:2a:5e:b3:bd:fa:09:a6:af:c3:eb:f7:ff:
0d:3d:46:f7:f3:5d:d4:95:3e:45:28:93:63:b2:f6:71:56:58:
13:6f:da:d2:97:99:cf:b8:80:cd:af:75:66:b9:5b:b4:00:15:
63:4b:63:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org