Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TyuNKuee3_rhZwMsbnXgU8WgrB0.roa
File: TyuNKuee3_rhZwMsbnXgU8WgrB0.roa (raw, json)
Hash identifier: c/xuHLlR/1EGA0JaI/lDJe9Q4ODFI4TmhM6j3bn+bfM=
Subject key identifier: 4F:2B:8D:2A:E7:9E:DF:FA:E1:67:03:2C:6E:75:E0:53:C5:A0:AC:1D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA29BF2BDE7EEFAC11F9C8FA66DF6A23B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TyuNKuee3_rhZwMsbnXgU8WgrB0.roa
Signing time: Mon 25 Dec 2023 20:12:58 +0000
ROA not before: Mon 25 Dec 2023 20:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a2:9b:f2:bd:e7:ee:fa:c1:1f:9c:8f:a6:6d:f6:a2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 25 20:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f2b8d2ae79edffae167032c6e75e053c5a0ac1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7c:d1:0e:1b:08:41:14:64:c7:55:ca:27:b0:
04:f1:3a:5a:df:ce:06:01:4e:46:68:1d:c7:1a:fe:
0f:e7:7d:cf:54:0b:97:8a:d8:36:27:36:64:02:92:
54:30:5d:2d:00:51:ec:a6:bc:12:3d:59:d9:0b:1a:
05:79:bf:97:df:71:31:bb:27:40:df:c2:c3:c9:c2:
52:ff:51:44:9a:69:ad:cf:f3:e2:a7:a9:ad:71:8b:
57:03:79:39:38:96:17:b7:e7:ae:05:0d:92:c0:a6:
fd:70:e8:54:42:84:a4:1c:62:e4:82:9d:23:72:dc:
2c:ac:4e:95:6c:f2:41:47:87:21:70:a0:8a:77:ff:
8b:33:64:c7:16:ce:18:60:d6:08:d3:4d:97:94:27:
46:00:c8:e8:23:42:b9:be:3a:c5:2f:d1:a7:3d:6a:
06:ac:b8:a8:4a:5e:1e:0f:e0:71:88:06:87:a3:84:
aa:65:e4:33:60:08:9e:23:9b:09:ce:ff:5a:85:1a:
3f:77:fb:7c:6f:ff:d4:04:f9:d0:ba:45:e2:d8:2d:
92:fd:19:b8:ba:8d:0c:9a:6d:d1:1a:e6:36:da:58:
90:c3:b5:92:d6:0a:80:bb:98:31:46:42:ed:04:b4:
be:87:31:56:3b:44:fc:c9:90:aa:cf:e8:be:70:50:
fe:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2B:8D:2A:E7:9E:DF:FA:E1:67:03:2C:6E:75:E0:53:C5:A0:AC:1D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TyuNKuee3_rhZwMsbnXgU8WgrB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:23:10:63:23:fc:fc:70:f7:02:a3:29:d1:13:78:50:2d:17:
3b:fa:2d:ad:29:48:4f:62:17:02:a4:62:c5:fe:01:b0:a8:1a:
1e:df:e9:cb:db:60:c9:d2:52:fe:ea:63:e4:5d:87:f5:5b:d3:
50:5a:23:5c:7d:e1:35:6d:c4:75:b0:f4:85:26:aa:94:d8:0c:
24:95:81:66:ec:52:75:00:ef:8b:10:e8:b2:74:0e:0b:fa:b5:
79:d1:f9:17:91:6d:05:ac:64:55:af:59:dc:7b:15:b7:10:d6:
0e:a4:73:a5:0d:e0:19:87:be:5e:1a:6c:d1:06:44:75:e2:ae:
22:0c:7b:ea:b9:a1:ff:95:90:82:11:fc:c3:ea:5a:db:37:8f:
c2:fc:0a:de:34:64:98:0f:62:55:ad:a2:fd:a4:35:89:74:6c:
92:80:1c:51:75:fa:9b:39:60:54:74:67:cc:99:f2:96:17:9c:
22:97:09:de:d3:61:c5:af:56:a8:e4:d1:0d:d8:50:df:be:7f:
f9:42:c6:8c:56:5e:60:c4:0f:65:80:26:6c:b3:74:2b:bb:5a:
fc:d5:08:f3:74:32:f2:76:34:02:96:e4:d9:c5:50:4d:c9:52:
b0:9b:24:4e:cb:a2:77:b9:db:34:e7:2b:0b:18:d0:38:52:83:
28:c1:2b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org