Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UUIxx-hf6c7QDbKN6oHOb9SPiiQ.roa
File: UUIxx-hf6c7QDbKN6oHOb9SPiiQ.roa (raw, json)
Hash identifier: uoxOxJHv0Ru5EgPkgMd9vKDPOUHMQx+GqpDkQMMpAgY=
Subject key identifier: 51:42:31:C7:E8:5F:E9:CE:D0:0D:B2:8D:EA:81:CE:6F:D4:8F:8A:24
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DF910DCE354D07A57F6530A4389E84343
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UUIxx-hf6c7QDbKN6oHOb9SPiiQ.roa
Signing time: Fri 01 Mar 2024 08:10:48 +0000
ROA not before: Fri 01 Mar 2024 08:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f9:10:dc:e3:54:d0:7a:57:f6:53:0a:43:89:e8:43:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 1 08:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=514231c7e85fe9ced00db28dea81ce6fd48f8a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9e:35:d2:e1:2a:a8:04:3a:00:eb:db:ec:9a:
31:ff:55:5b:70:6e:bf:f1:f1:9a:e7:bb:22:2d:2f:
0b:41:56:f5:7a:ce:a7:3e:63:56:5d:a0:87:e5:42:
a5:b9:44:6e:d1:03:90:32:08:ef:89:78:66:4e:7e:
eb:66:7e:a5:3a:53:8c:78:e5:7e:57:c4:57:11:f4:
96:9d:39:e6:f2:79:a2:52:02:aa:ad:bd:ee:65:cc:
49:39:c7:81:21:af:a8:54:53:9d:42:50:3f:26:49:
fe:3a:7d:c3:6f:c2:24:07:a2:bd:cb:ad:7d:0e:9e:
5f:b1:6c:e1:3c:4c:d7:91:f8:18:b0:10:aa:87:b4:
b0:75:84:06:4c:e2:5c:c1:a0:cc:bd:f6:dc:74:f7:
77:2b:be:d8:57:d0:8a:c7:3a:75:a8:7f:66:f2:ad:
2d:50:e3:92:6d:68:e7:2a:2e:1e:6b:a8:45:6e:87:
5f:8d:8a:7a:0d:86:bc:06:8b:43:ee:8b:ea:f7:a9:
f1:c0:f7:3e:61:14:26:0d:e9:c0:c9:b9:1e:0b:93:
12:6f:e4:84:c1:7e:8c:88:77:9f:7e:44:5e:de:45:
7f:aa:6e:11:d8:2e:90:f5:9e:2c:9f:fc:5c:5c:70:
9d:ef:05:48:dd:ec:fb:32:78:7d:94:e8:8b:91:fa:
21:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:42:31:C7:E8:5F:E9:CE:D0:0D:B2:8D:EA:81:CE:6F:D4:8F:8A:24
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UUIxx-hf6c7QDbKN6oHOb9SPiiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:f3:0e:46:33:5d:78:d9:f6:f7:c7:52:9a:30:60:8a:a3:58:
fe:e9:d8:58:57:61:b9:a0:35:45:26:a3:a9:3f:98:52:05:c8:
cc:8d:d3:a9:e0:9e:fc:b5:e5:d4:51:94:3e:51:80:02:95:f4:
70:86:fd:b0:84:44:41:ee:88:e7:72:f0:1b:a7:cd:c2:08:58:
78:7d:84:1f:a6:0a:1f:2e:28:93:c7:29:90:c4:0d:34:c9:52:
00:a7:ef:9c:82:1f:b4:99:12:cf:3b:df:8c:5b:9e:da:f4:e6:
7c:6f:9b:75:2d:14:cc:17:44:ba:de:3a:6e:cf:98:dc:15:b3:
7e:ba:75:ea:09:37:33:29:14:02:af:79:2e:66:22:26:fa:93:
0c:00:6c:9e:a7:59:fd:e7:20:0b:19:28:1b:36:9d:d0:02:7a:
17:a6:06:94:5f:d5:18:47:96:66:43:a0:13:ae:19:43:23:12:
b3:ab:d6:7a:cf:ac:b3:48:4a:61:ba:d8:2e:bc:e4:93:d3:c2:
d3:d4:6d:08:28:87:85:92:35:9b:4f:1a:c5:e9:ee:7b:d2:5f:
8b:ec:df:81:57:b2:4d:b6:ae:e9:ad:18:ad:63:22:75:1e:92:
0e:fe:b8:57:4c:a6:5d:78:3f:d9:a0:d5:a1:d9:f0:c2:19:6d:
0a:d7:f6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org