Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UB2FqgLqcwmSZBdEjlAZL0DaH7Q.roa
File: UB2FqgLqcwmSZBdEjlAZL0DaH7Q.roa (raw, json)
Hash identifier: +5IzPFKjpSnl5WBBY4LzYQtw06hAyjCF5tDN8hDcZx4=
Subject key identifier: 50:1D:85:AA:02:EA:73:09:92:64:17:44:8E:50:19:2F:40:DA:1F:B4
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB7A514B94AEA0A0E511DC61D766BA36D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UB2FqgLqcwmSZBdEjlAZL0DaH7Q.roa
Signing time: Fri 29 Dec 2023 22:14:58 +0000
ROA not before: Fri 29 Dec 2023 22:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b7:a5:14:b9:4a:ea:0a:0e:51:1d:c6:1d:76:6b:a3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 29 22:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=501d85aa02ea7309926417448e50192f40da1fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:c0:6d:2a:0b:c4:c8:b8:aa:56:8c:84:4e:
13:5b:04:d4:21:81:bb:cc:6f:ad:9b:0a:e2:b1:f1:
60:df:0f:90:9b:de:b7:87:25:69:ea:f9:eb:e3:48:
43:7e:1a:d3:86:df:52:d4:3a:3a:88:5b:0c:22:e3:
07:9f:29:52:3a:22:94:41:77:62:73:0e:9f:54:d1:
06:2c:a9:da:a1:00:5f:d4:37:ef:aa:5d:f0:cb:d3:
9a:bb:91:01:06:be:66:1c:d6:1e:cd:c0:2c:2c:ac:
72:82:dc:af:1e:89:43:1b:f0:0f:fe:de:76:d4:2f:
92:29:c5:36:40:d6:2a:b4:1f:fc:f8:f3:e6:de:c1:
ac:ec:fa:54:7a:65:a9:eb:64:1c:4e:1b:40:08:7e:
78:94:9b:99:fb:90:b7:d7:4c:66:87:bc:8c:91:1e:
24:9b:99:25:02:65:83:8d:c2:4b:3b:dc:f8:2b:87:
df:0e:66:5b:30:b7:09:aa:1f:4e:7d:bc:5e:87:81:
47:cf:7e:d5:be:20:d4:47:77:d1:02:77:1c:00:c4:
66:e5:2e:02:85:bf:20:1d:f5:a8:db:73:59:eb:69:
9e:18:18:eb:f6:85:14:69:78:39:8c:76:76:59:6e:
fc:7b:b3:a2:b4:e1:60:3f:03:73:ca:d8:db:7b:98:
0c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1D:85:AA:02:EA:73:09:92:64:17:44:8E:50:19:2F:40:DA:1F:B4
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UB2FqgLqcwmSZBdEjlAZL0DaH7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:c2:23:f7:0d:41:8a:80:3f:ec:a9:45:53:f7:90:b7:b8:fb:
d7:b0:78:d7:78:3f:5d:27:db:32:0c:49:9c:4d:d6:ff:8f:ce:
48:00:1c:40:8d:22:b8:87:67:2e:2d:48:0f:b7:89:b8:e6:34:
bd:b0:25:fc:e1:92:b2:4e:4e:13:87:65:78:f3:6d:4a:23:cc:
78:fe:56:e7:63:9a:fd:df:63:b6:e9:be:f1:34:66:38:f1:f5:
ae:28:ad:a4:0d:50:ce:0d:29:05:94:d1:6f:ff:d8:c5:37:0c:
55:a5:22:d4:ca:27:e0:81:c5:f6:1c:55:3c:2f:25:68:7e:a0:
43:7b:a5:c8:96:49:28:b9:b6:59:92:cc:ae:dc:54:46:a5:0d:
b2:96:18:4e:07:53:76:14:2c:64:59:a3:e8:2f:7c:4b:a2:83:
01:12:a9:4e:4a:a4:72:bb:a7:17:a6:f3:24:d8:6a:9a:41:fc:
cb:da:c2:16:7e:44:90:92:d3:14:6a:08:60:c2:47:6c:0b:50:
0a:c8:9c:0b:34:d3:ae:06:fe:d5:ea:cb:40:ad:90:16:f8:c1:
13:65:d3:dd:9a:df:9f:43:5c:ae:f8:ba:0f:33:c1:9f:92:b1:
93:ac:1a:28:59:eb:08:3e:e7:bd:f9:1a:77:fd:26:23:90:cf:
0c:5e:e8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org