Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TElzEYSLyQI110NcbNabV5iRoqU.roa
File: TElzEYSLyQI110NcbNabV5iRoqU.roa (raw, json)
Hash identifier: QEZbtkBIP/YL1cn7d8rc4ORhN67V9Jf3wRAOaRaGctQ=
Subject key identifier: 4C:49:73:11:84:8B:C9:02:35:D7:43:5C:6C:D6:9B:57:98:91:A2:A5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB4D30D35E04204966A1D317D86D4EB90
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TElzEYSLyQI110NcbNabV5iRoqU.roa
Signing time: Sat 06 Apr 2024 19:11:54 +0000
ROA not before: Sat 06 Apr 2024 19:11:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b4:d3:0d:35:e0:42:04:96:6a:1d:31:7d:86:d4:eb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 6 19:11:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c497311848bc90235d7435c6cd69b579891a2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:aa:bc:a7:3d:b1:8b:44:95:54:77:f7:af:
56:f6:21:0d:73:0e:39:d0:91:b7:56:cc:f6:f6:6a:
03:bc:ca:45:45:a5:14:55:65:00:04:72:8b:d0:c3:
0f:9c:2e:2e:71:b1:92:97:20:ec:0e:04:ae:94:70:
7d:f6:6e:fa:86:0a:52:1b:57:b4:a7:99:8e:02:6d:
5f:02:e6:c6:35:77:6e:02:3a:9b:bf:2f:e5:6a:ec:
f2:a5:3a:7d:a1:7d:cb:a4:5b:3f:2b:57:98:6b:d2:
11:85:91:80:03:38:ae:d8:38:38:e8:89:15:07:bf:
d8:83:d1:7a:5a:38:35:03:3a:a9:3b:de:78:04:04:
09:04:7e:cd:81:3a:7c:da:14:ce:14:d6:98:38:f1:
78:a7:99:23:a7:f1:77:d7:47:6b:7f:88:d0:a3:0c:
09:f8:d4:39:17:65:29:5f:8f:94:d2:3a:b4:58:7d:
39:12:5c:35:7a:09:4e:3a:f5:4c:ac:23:2e:7b:c0:
a4:0d:86:69:b8:89:a4:29:b8:b0:8f:c9:1c:a7:a9:
ba:b8:75:0f:cb:a3:21:52:22:6c:f2:6a:91:0d:f3:
c0:9c:0e:97:5b:d1:93:0e:3b:73:be:99:d9:70:84:
4c:63:02:fa:6c:f5:81:59:0a:4b:53:69:94:44:5e:
6d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:49:73:11:84:8B:C9:02:35:D7:43:5C:6C:D6:9B:57:98:91:A2:A5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TElzEYSLyQI110NcbNabV5iRoqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:fd:f7:fe:e4:ab:41:f9:4c:c4:13:99:b2:f9:84:56:c3:79:
4c:04:b3:20:ea:23:10:73:25:d1:e2:fe:83:6f:43:4c:af:92:
6f:72:01:9e:e8:5f:8d:8c:7d:60:bb:b0:53:71:8d:3f:c6:71:
a9:78:74:a9:39:e5:1e:e3:26:eb:e6:58:b0:09:c4:8c:0a:b3:
2f:42:64:59:93:b0:c9:37:1a:22:08:90:52:36:7b:00:ea:51:
f7:7f:eb:cc:87:60:09:7d:fd:7c:8b:83:f2:44:01:f2:f2:78:
1a:f8:10:bc:0e:38:6e:6d:74:e5:cb:d9:c8:0e:9f:92:bb:60:
40:de:8b:75:36:ad:69:ce:b3:7f:de:97:44:b9:17:ac:c0:17:
07:99:33:7e:57:cf:c8:4f:6b:a2:12:1f:41:79:1e:88:4b:ae:
8e:e7:d2:86:c6:e3:dd:9e:b0:09:7e:10:6f:e6:41:ef:e9:fd:
a0:60:cf:82:ad:8d:e9:fe:49:93:18:ce:39:4c:f3:6d:eb:64:
60:28:5d:bc:05:d8:53:eb:b8:d6:36:03:e8:82:7e:47:69:c6:
38:0a:46:ae:20:8b:7a:42:15:2e:d3:ca:11:9e:4a:e4:b8:ff:
04:26:af:da:b7:2d:4d:be:1a:86:b0:ba:d7:cb:7a:b2:aa:66:
40:6d:46:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org