Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V8eKijPjZOWOtqXFRYrQ1PGWd7U.roa
File: V8eKijPjZOWOtqXFRYrQ1PGWd7U.roa (raw, json)
Hash identifier: VMWP4X0fu4R6nO4Huuwv6e85miVCsgxSC4l5oBEg5YQ=
Subject key identifier: 57:C7:8A:8A:33:E3:64:E5:8E:B6:A5:C5:45:8A:D0:D4:F1:96:77:B5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E9B80FABFEC4A57AD4DEB9E9048687315
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V8eKijPjZOWOtqXFRYrQ1PGWd7U.roa
Signing time: Mon 01 Apr 2024 21:11:45 +0000
ROA not before: Mon 01 Apr 2024 21:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9b:80:fa:bf:ec:4a:57:ad:4d:eb:9e:90:48:68:73:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 1 21:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57c78a8a33e364e58eb6a5c5458ad0d4f19677b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3d:3a:a3:1f:2a:8e:03:bb:f0:2b:93:66:8c:
4f:43:67:5a:5b:54:58:2a:dd:2a:9e:fc:5e:b1:64:
ee:83:26:66:69:34:dd:52:fb:b2:68:83:fc:8b:2b:
b0:93:42:27:f3:5f:5e:d5:8a:0b:e6:74:5c:64:0b:
83:51:f7:26:bb:a0:54:b7:71:45:34:fa:07:7a:5a:
25:16:2f:4f:9b:4b:9f:c6:28:b8:37:ac:32:4c:2a:
1f:70:52:8d:7f:c1:4b:75:2f:8d:74:a0:ee:9c:81:
a7:fc:01:23:4c:a3:8f:00:90:75:f3:9c:cf:70:67:
03:f7:2b:b6:42:64:38:50:df:11:19:fb:b3:24:72:
16:09:85:03:a3:cc:de:5f:d1:84:24:bc:3e:1b:6a:
c0:38:e8:ec:7b:96:7e:34:83:1f:25:c6:31:e3:9f:
a8:72:f6:39:50:21:41:fe:00:af:7b:19:03:11:7b:
98:ed:93:bd:50:4f:9e:bd:6a:8c:89:65:dd:47:aa:
d3:6a:72:e9:0d:ff:17:a6:ef:f4:15:4c:af:72:45:
81:8b:53:59:8a:b9:f7:7d:69:e8:f8:78:e9:dc:1e:
a1:10:ff:f2:8c:55:57:26:2c:ff:4e:97:8d:75:a2:
13:f9:26:a7:db:4f:f7:94:b6:02:ec:f5:29:a6:fd:
03:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C7:8A:8A:33:E3:64:E5:8E:B6:A5:C5:45:8A:D0:D4:F1:96:77:B5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/V8eKijPjZOWOtqXFRYrQ1PGWd7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:c6:a2:57:11:df:ac:c6:8e:38:66:12:60:fa:3b:5c:07:4c:
0f:b0:04:42:5b:94:0b:b0:ce:b1:15:58:c2:73:9e:20:b2:0f:
44:48:13:58:52:1c:01:e5:b6:41:94:d1:85:fa:27:18:9c:51:
78:69:82:d1:8c:02:d3:c4:b4:11:7f:87:9d:41:d8:14:b3:72:
dd:2a:bf:20:ec:1b:a5:67:7d:a0:cd:12:18:33:65:d3:18:ca:
e8:db:d1:f2:40:8d:86:c2:e0:fc:f2:f2:9c:6e:a1:80:66:42:
5c:68:2a:b7:39:94:45:a1:66:6f:24:6e:2d:a6:12:46:89:ec:
77:59:df:a6:96:93:ce:08:f6:a2:76:d4:ea:27:62:f7:d7:44:
7e:37:9b:8f:58:4f:10:f2:21:25:c2:da:12:5c:8a:07:aa:d2:
09:4d:3f:8b:a0:96:c2:14:dd:72:fd:cf:2a:5b:f5:d9:4a:4b:
c0:0c:3e:6b:7b:8a:cc:54:87:26:c1:9f:ce:78:25:e6:2e:3b:
d5:f3:81:f1:ec:ee:b1:81:af:f2:6a:61:64:c3:3e:5f:6b:e5:
a7:ff:de:ed:ca:12:a9:59:53:b3:e5:d5:e2:78:8c:c9:c5:0b:
af:f7:9c:48:05:ad:a8:5e:be:92:d2:c9:f8:a7:61:ab:ea:1e:
29:91:a2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org