Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XJdRvRpzs5EiOO1pBtFYzTBNtwk.roa
File: XJdRvRpzs5EiOO1pBtFYzTBNtwk.roa (raw, json)
Hash identifier: 0MsexgMb4WY2a1qJw6KkyEDKphlQ4cdOM/AOTFDvsQA=
Subject key identifier: 5C:97:51:BD:1A:73:B3:91:22:38:ED:69:06:D1:58:CD:30:4D:B7:09
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DA2304ED307F65844ABDABE3764FD1805
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XJdRvRpzs5EiOO1pBtFYzTBNtwk.roa
Signing time: Tue 13 Feb 2024 11:18:11 +0000
ROA not before: Tue 13 Feb 2024 11:18:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:30:4e:d3:07:f6:58:44:ab:da:be:37:64:fd:18:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 13 11:18:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c9751bd1a73b3912238ed6906d158cd304db709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4c:fc:ef:23:45:87:a3:8e:d5:d2:64:a6:cd:
d1:c8:1c:ac:37:29:b7:1f:7e:95:9f:60:12:e3:04:
ad:1b:fb:ae:9a:ab:12:bb:90:0f:b5:3f:41:c9:eb:
46:d8:fd:88:f7:31:bc:de:3a:8b:77:6b:b5:29:ca:
3a:2a:cf:23:0d:d1:04:18:f4:8e:06:96:2f:12:43:
67:b5:00:f5:d1:63:10:6d:66:d2:ec:34:af:de:9e:
b6:7b:dc:2d:b6:16:8d:88:14:13:0a:f3:73:f0:25:
eb:a2:5a:38:7e:3c:a2:8a:a1:4e:08:7e:33:da:54:
00:14:bc:f2:dd:3a:c8:d1:70:c8:11:87:bb:b4:a7:
af:0b:7e:9f:ec:97:b5:e2:97:44:13:0f:14:30:11:
ea:04:ab:14:c6:2c:74:c5:a5:13:f3:c4:8d:a9:fa:
a4:96:0f:47:e3:43:11:99:39:2e:48:08:cb:a0:69:
63:a2:32:41:5e:09:53:0d:6e:7e:7b:91:67:4c:05:
83:cb:79:e7:71:52:4b:33:b3:85:07:5f:5c:64:37:
60:c2:74:e5:20:0e:9b:09:43:2c:e3:78:5a:e1:a9:
19:24:44:07:fd:f4:35:64:e7:30:6f:da:7e:be:40:
35:a0:6d:be:49:9a:34:1b:51:93:e3:c4:39:b8:c1:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:97:51:BD:1A:73:B3:91:22:38:ED:69:06:D1:58:CD:30:4D:B7:09
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XJdRvRpzs5EiOO1pBtFYzTBNtwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:dc:59:b3:5e:12:70:40:4e:25:9d:73:62:c1:b9:7b:f5:e8:
44:e3:ad:58:be:3e:40:2b:20:e8:84:bf:a8:4c:d4:41:36:13:
3f:7a:68:21:ac:b5:e4:83:cd:cc:43:4c:99:c2:3d:0a:cc:60:
65:bd:7f:08:1c:0b:aa:39:ef:23:d6:8f:30:11:db:f5:14:48:
0a:1d:d6:e4:da:1e:db:91:ee:0d:d9:a8:e0:0e:62:b8:66:b8:
53:75:34:89:1e:c9:45:84:f3:2d:e0:ae:c0:99:f1:f6:8e:19:
3e:3e:a6:1a:79:e0:1a:4a:49:5a:b4:eb:f8:da:c4:11:6f:f4:
5b:85:46:56:4e:74:d6:01:c2:7b:36:4a:7c:0f:63:6c:93:8a:
86:05:19:5f:7d:b1:8e:3c:72:75:00:b8:a4:ca:4a:3e:aa:dc:
7f:54:93:de:9d:cb:d0:4f:3c:4f:3d:4f:82:fb:e0:12:0c:e2:
ea:f3:ab:f6:0d:20:0a:af:d9:d3:17:38:ce:b3:0a:73:42:1e:
d8:c9:b8:7b:77:a6:ca:a0:8f:ff:c9:f5:21:29:56:d0:a1:a8:
76:83:ff:07:ad:41:3d:32:ad:20:11:5f:91:77:46:df:67:3a:
08:8d:70:c7:1d:af:8c:d3:ee:30:79:4a:e7:ed:ff:a7:6b:8c:
bb:0f:6b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org