Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SYZN39yH-5d2lgHGE5F5JmZy5Qw.roa
File: SYZN39yH-5d2lgHGE5F5JmZy5Qw.roa (raw, json)
Hash identifier: ww99t8GkHzo/q2P4nmcnx3qvRwmPKP/lXUjW4TV4nS0=
Subject key identifier: 49:86:4D:DF:DC:87:FB:97:76:96:01:C6:13:91:79:26:66:72:E5:0C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E02BC72771DBF427804F2E370887BC227
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SYZN39yH-5d2lgHGE5F5JmZy5Qw.roa
Signing time: Sun 03 Mar 2024 05:14:48 +0000
ROA not before: Sun 03 Mar 2024 05:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:02:bc:72:77:1d:bf:42:78:04:f2:e3:70:88:7b:c2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 3 05:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49864ddfdc87fb97769601c6139179266672e50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:91:81:8b:ab:e8:db:f0:da:d4:f2:18:58:
3f:90:65:6c:06:b6:d4:5f:77:de:79:9f:32:09:4b:
88:36:6b:bc:4e:2c:22:6c:84:93:7e:8c:9a:52:5c:
e5:8d:97:49:71:04:cb:00:b0:42:4a:1d:07:d7:2c:
ad:ab:df:80:14:07:b9:1c:bc:e2:ab:2c:2f:8c:15:
6b:9a:a6:64:77:3a:4b:d2:20:7f:86:44:c2:33:c7:
3b:1d:29:46:45:06:15:c2:fb:af:f1:17:8a:43:1e:
42:7c:f7:61:e5:34:dc:e4:01:5e:82:5d:8e:3c:65:
7d:20:a2:7e:ea:6e:dc:35:8f:27:8a:4e:04:01:80:
55:43:8b:64:29:0c:cc:c5:39:63:e4:08:62:b4:de:
a8:c0:d6:96:94:ea:23:6c:43:87:67:84:ed:a1:3c:
39:07:35:6c:88:5a:0e:e7:17:33:4b:8b:11:2e:de:
f3:3e:d9:6c:a4:01:cd:13:30:75:82:cc:a9:08:4c:
d2:e6:d9:c3:59:24:24:e2:d2:52:dc:be:81:db:68:
cc:f9:14:f3:d9:0a:b5:e0:7a:fb:ed:64:31:94:ec:
a3:35:5a:b0:bb:1d:92:a1:3a:00:9e:04:fc:4c:fa:
4f:53:4b:c0:0c:2e:50:d0:e5:f4:be:0a:b4:e4:85:
07:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:86:4D:DF:DC:87:FB:97:76:96:01:C6:13:91:79:26:66:72:E5:0C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SYZN39yH-5d2lgHGE5F5JmZy5Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:95:8e:8a:68:e6:4c:c3:1b:eb:2c:3d:47:e1:c6:df:c4:56:
60:f0:38:7d:9c:b9:39:c0:f7:c0:67:f9:45:27:21:a7:ab:32:
b4:d6:88:64:50:bd:44:1d:85:30:92:78:88:fd:32:64:d9:52:
25:6a:7b:6a:fe:63:44:96:30:a1:45:c5:51:50:f5:36:b0:91:
34:a7:8a:a9:80:cb:28:d8:d5:77:c3:b9:42:98:43:57:41:f2:
5a:f1:4b:76:71:6b:1c:c3:0c:c9:1c:35:cd:3a:a8:5b:06:11:
b0:8d:10:2e:a4:b3:81:df:ea:76:0d:76:82:92:87:77:60:0c:
89:d5:4c:51:a4:68:d7:96:41:42:ad:cc:bd:86:74:00:76:e2:
60:60:b0:42:74:71:4b:be:b4:7c:6d:d0:77:52:75:1c:64:00:
ed:e6:c2:41:01:69:3a:56:50:6c:43:73:76:21:35:1e:69:f6:
cb:84:46:19:03:ae:ef:38:d4:97:f5:b6:bb:b3:b9:e3:bf:ee:
fd:09:6e:54:7b:78:02:78:5f:18:5d:bd:b5:b4:e7:f9:4e:c3:
3c:8e:5e:c0:f6:ee:d2:80:82:22:91:cf:67:84:1d:22:ec:82:
02:75:5f:2e:3b:dc:c0:c2:67:e8:d8:29:61:65:12:ae:c8:6e:
5d:83:92:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org