Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UGke5GqdE3DTHlpx_vbnJJVN56Y.roa
File: UGke5GqdE3DTHlpx_vbnJJVN56Y.roa (raw, json)
Hash identifier: zNqYyOH7Ie9WDMBUz1aA29I2wr84jOgVXXA7jYzdWhs=
Subject key identifier: 50:69:1E:E4:6A:9D:13:70:D3:1E:5A:71:FE:F6:E7:24:95:4D:E7:A6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D9BF2C6C7DAFF6C2F61506624A65C40F7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UGke5GqdE3DTHlpx_vbnJJVN56Y.roa
Signing time: Mon 12 Feb 2024 06:13:15 +0000
ROA not before: Mon 12 Feb 2024 06:13:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9b:f2:c6:c7:da:ff:6c:2f:61:50:66:24:a6:5c:40:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 12 06:13:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50691ee46a9d1370d31e5a71fef6e724954de7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c0:80:5d:cf:cd:64:7c:fb:84:84:76:54:a9:
e1:fa:d8:d3:63:14:59:81:a8:af:f6:44:1e:77:b9:
4d:92:0a:60:67:75:6f:e7:7f:d6:39:d5:95:6f:ef:
0c:19:73:b8:22:27:f4:84:cf:71:b9:f6:ea:7f:96:
39:14:8a:bb:ec:da:19:8d:c1:4a:c1:73:4a:0e:6b:
e3:e2:8d:64:d5:3b:12:19:c4:c1:90:6f:01:9f:5d:
91:a7:8f:56:d6:dc:92:24:61:7a:22:dd:01:e3:9b:
c8:5d:96:47:32:e4:fa:06:ce:62:c7:7c:2f:96:88:
51:c2:e9:22:85:c5:30:09:0d:80:f8:02:87:e2:90:
a6:3f:58:f7:7e:aa:e9:53:44:b8:f4:58:ce:08:dc:
62:b1:5d:59:a9:f6:08:3e:11:cd:7c:fb:1d:08:32:
ad:4a:38:2e:7e:22:fb:19:ec:3d:14:bf:8d:8c:0b:
65:4a:a8:c1:a3:bb:c5:a9:e1:1a:f2:72:39:45:2a:
5c:dd:2f:99:28:68:f5:a7:93:6b:ab:1f:05:e8:f3:
4b:fc:58:c4:c0:c8:af:5e:f0:a5:ad:72:0e:bb:81:
31:c7:a1:59:e6:ec:94:30:9e:05:20:ba:3c:fb:93:
23:ce:bb:61:41:a8:bc:68:ca:16:37:f5:27:04:95:
46:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:69:1E:E4:6A:9D:13:70:D3:1E:5A:71:FE:F6:E7:24:95:4D:E7:A6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UGke5GqdE3DTHlpx_vbnJJVN56Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:d7:11:aa:fd:7a:b6:7c:ec:74:0c:c9:10:05:f3:03:4f:eb:
5c:9d:a4:b8:e5:10:85:02:9e:08:1d:45:9d:d4:4e:f9:12:7c:
18:ac:29:e8:f4:4f:b4:dc:9b:05:f4:27:ba:4d:8b:fe:2b:41:
d3:5a:a2:28:81:93:62:92:c0:a0:06:1d:ef:95:62:78:fd:6b:
03:ef:c2:52:7b:a3:e4:c0:dd:68:b9:ed:7b:0e:95:7a:cc:44:
a4:30:1a:c6:e8:e6:bc:31:a1:7d:61:4f:a5:ff:5d:03:c2:f2:
e9:9d:92:6d:9e:cf:7c:4e:80:d8:d9:f0:c3:0f:e4:1b:2e:83:
bb:91:0f:36:34:fe:d5:e2:5e:6d:ad:78:41:42:77:f5:d5:39:
48:36:8d:a3:4a:5a:92:c1:1c:8a:c0:16:f3:7d:44:e6:92:69:
8a:b9:1e:d2:85:59:7a:7d:d6:73:2c:05:58:64:55:77:9d:b6:
f0:02:f3:a2:22:6a:d9:3f:f5:47:07:01:55:fe:b7:30:3f:7a:
80:1b:06:79:a0:b8:42:70:95:96:e7:9e:8a:2a:23:f4:7b:73:
37:79:7d:67:db:c1:8b:9c:02:9b:df:44:d4:7e:0d:5c:27:cf:
52:23:89:f8:21:2f:9c:73:eb:5e:7d:4c:83:70:61:66:fb:1d:
15:fd:dd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:50 2024 by rpki-client on console-ams.rpki-client.org