Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Szy4A5uUGcMsWI_FkGbZSDjWajM.roa
File: Szy4A5uUGcMsWI_FkGbZSDjWajM.roa (raw, json)
Hash identifier: P7y4/TCHuFf02+MDWOXZSfSxicbDv8dLhuklMNR5wkI=
Subject key identifier: 4B:3C:B8:03:9B:94:19:C3:2C:58:8F:C5:90:66:D9:48:38:D6:6A:33
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB27CE3325E6219D31618FB7278BB6CEC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Szy4A5uUGcMsWI_FkGbZSDjWajM.roa
Signing time: Thu 28 Dec 2023 22:12:58 +0000
ROA not before: Thu 28 Dec 2023 22:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b2:7c:e3:32:5e:62:19:d3:16:18:fb:72:78:bb:6c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 28 22:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b3cb8039b9419c32c588fc59066d94838d66a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:61:1b:5b:26:60:16:45:b3:30:69:23:61:
5a:6e:99:79:9b:61:87:04:f4:4b:76:1b:15:73:fc:
7d:3f:89:9e:34:5c:8c:16:36:71:67:6b:d5:be:5d:
e2:9a:59:4b:cb:7e:2b:1c:0b:dc:6a:0c:77:4b:c6:
a7:2a:da:e4:34:fc:c1:32:f3:a7:a0:18:16:74:3f:
1a:34:58:0a:9d:5d:4c:d6:3e:02:e7:9d:ea:99:45:
70:11:73:7c:13:6b:4e:1a:1c:f0:54:1a:9d:65:d4:
1c:53:d5:7c:60:a7:df:51:eb:b9:4d:23:43:d0:8a:
e1:84:8c:7d:0a:3a:d3:d3:92:5e:0d:99:52:b6:7e:
61:db:c1:5c:aa:69:5d:8c:17:6e:ad:90:c6:fc:6b:
3f:6e:57:4e:e9:39:98:fa:02:83:9b:92:f5:03:30:
9b:b7:29:83:37:b4:08:be:94:06:92:52:7e:9c:9e:
ec:94:e1:9b:61:6c:07:ee:8f:77:d5:f0:83:ed:81:
84:fa:a7:ed:4e:7b:94:b2:20:c5:1f:5d:e6:be:ae:
56:05:03:bb:25:f4:a1:5e:bb:fc:a8:26:fb:1b:5d:
5f:74:24:97:29:43:1e:7f:d5:dc:95:88:22:46:b5:
04:a3:84:a9:96:71:69:9e:66:50:c7:dd:9c:2e:21:
97:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3C:B8:03:9B:94:19:C3:2C:58:8F:C5:90:66:D9:48:38:D6:6A:33
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Szy4A5uUGcMsWI_FkGbZSDjWajM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:ca:eb:fc:8e:22:de:ca:6e:5b:18:09:00:d9:3e:8b:b5:53:
85:68:ae:58:47:6d:53:7d:78:72:a6:df:b3:17:ec:33:33:ea:
5f:aa:39:07:75:6c:36:60:f0:d5:60:e2:1f:3a:9e:fe:c1:fb:
c0:44:88:ef:49:64:74:36:3e:63:6c:07:e0:a3:75:50:be:ef:
e0:d4:6e:98:f8:4a:4b:b8:1c:bf:c0:db:f9:00:bb:3e:81:90:
cd:1c:59:61:fd:9d:0f:2b:78:f7:ca:e1:7b:d3:98:d3:03:80:
5b:c0:59:6f:c5:e0:ea:58:00:f1:ea:73:d8:d2:20:6d:89:d9:
cc:c9:a1:58:cb:76:b2:e6:bb:e5:4d:f7:88:43:42:50:d2:a8:
d4:e6:a1:7e:96:ab:93:38:40:77:b5:cb:93:98:59:fc:7f:43:
9c:9f:1d:cb:87:c1:88:69:11:18:e2:f7:51:74:81:06:4b:c4:
0e:02:b5:27:16:0b:ab:1d:8f:59:59:e3:f2:e2:6b:4e:a6:70:
af:c3:89:26:c8:29:c6:e0:2c:08:a1:3b:72:92:f1:62:a1:41:
0c:8a:a3:b4:19:52:65:ca:1a:79:60:7c:bd:4a:48:39:1c:2a:
cd:41:d8:e9:42:67:1b:6d:2f:ff:b1:bf:4a:df:28:4f:57:20:
e1:a0:1d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org