Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/X5_ZIj54t6r9oi0BJB8LmPeeW2c.roa
File: X5_ZIj54t6r9oi0BJB8LmPeeW2c.roa (raw, json)
Hash identifier: 0+358TrYEQxcCEa2wV4euTnv+GE71ZOPokDm+ctYYL8=
Subject key identifier: 5F:9F:D9:22:3E:78:B7:AA:FD:A2:2D:01:24:1F:0B:98:F7:9E:5B:67
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB8ECD670F8DE0834913FB41A72F58B69
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/X5_ZIj54t6r9oi0BJB8LmPeeW2c.roa
Signing time: Sat 30 Dec 2023 04:12:58 +0000
ROA not before: Sat 30 Dec 2023 04:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b8:ec:d6:70:f8:de:08:34:91:3f:b4:1a:72:f5:8b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 30 04:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f9fd9223e78b7aafda22d01241f0b98f79e5b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fb:47:f4:f3:c5:38:0c:95:62:cf:68:81:d2:
be:70:3b:3a:2e:54:1d:67:46:3a:b1:4e:79:b7:48:
39:4d:ed:e7:d6:18:7c:83:77:fa:0e:70:11:ef:c1:
af:79:7e:1a:41:3e:fc:ba:8d:a5:91:87:79:65:63:
bd:97:9b:c3:70:b0:e1:23:a6:0b:6c:1d:14:15:b1:
1e:83:90:73:9f:57:8a:f9:07:65:dd:eb:3c:e1:a7:
8a:bd:46:e5:08:21:53:64:99:ea:cb:e5:3a:99:60:
32:a9:56:f0:8f:7a:d3:f3:ea:80:f4:d8:c0:4f:5d:
c6:71:df:03:eb:1f:8c:b6:6e:3d:ef:ef:80:bc:2e:
63:33:41:60:aa:f1:dd:5b:6c:ab:48:88:29:35:3f:
14:15:72:d6:d9:fe:a2:cf:7f:83:b6:6a:50:a5:c0:
8a:0e:aa:cb:a3:cb:fb:c1:fb:58:4d:1d:df:57:46:
09:a0:3f:ab:12:f7:df:ac:b2:9f:3e:c6:1c:82:16:
8c:88:6c:40:03:89:53:be:37:6c:49:79:ef:86:de:
cf:db:42:3c:4c:09:21:42:f5:4c:d6:76:fb:6f:98:
c6:2d:3e:03:ea:99:23:31:4a:a3:1b:a8:0b:d0:c9:
ab:e7:61:04:1b:9d:ac:2f:0c:a5:77:44:3c:99:70:
47:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9F:D9:22:3E:78:B7:AA:FD:A2:2D:01:24:1F:0B:98:F7:9E:5B:67
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/X5_ZIj54t6r9oi0BJB8LmPeeW2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:b3:01:90:3f:f3:c5:ea:76:a1:b5:f6:5c:b1:c1:41:da:31:
da:a4:07:36:1c:fb:6c:c1:84:91:5f:db:1c:55:67:65:d3:5b:
69:ed:01:4c:32:90:20:81:a6:eb:f0:de:97:4c:15:41:77:16:
04:43:d7:4c:cb:0c:35:70:6b:97:6d:9a:69:72:ec:8b:27:f4:
04:f3:7f:a2:38:a1:3a:9c:e0:6f:a2:da:09:93:b7:95:3e:0b:
6e:89:5f:0f:86:99:ac:d2:61:7b:52:ca:c8:ef:cd:27:fc:e4:
3d:32:c0:e8:6b:43:46:a1:d4:c8:03:85:51:f8:ec:64:d6:24:
f3:25:9b:3a:a7:04:0e:38:28:1c:b0:b6:c1:e2:d8:55:0d:9c:
e8:c7:08:e9:75:f4:67:2b:28:e7:4b:85:24:cb:d7:8c:05:4c:
80:a6:1a:7c:9b:85:ab:9c:2b:9d:42:a2:26:4c:3e:ee:27:0b:
70:51:85:8f:40:43:9b:b7:44:e4:ef:1c:ec:24:53:81:3e:f9:
74:ea:56:2e:24:fe:c0:bc:4b:c1:65:c7:e6:46:38:d0:42:0a:
0b:80:bf:b8:f1:2c:52:81:4f:56:fd:1c:f8:7a:12:0d:60:5a:
c2:3c:1b:6d:54:4c:f2:25:ea:5c:ee:7e:2f:0c:7d:1e:e6:b1:
68:c8:09:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org