Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZFvjGyrx1yElKWkEqkVzXycEOvk.roa
File: ZFvjGyrx1yElKWkEqkVzXycEOvk.roa (raw, json)
Hash identifier: 9J+SHkJaDQhx86guyIeSiBPptzgNV7XpKxOmUrqZhyM=
Subject key identifier: 64:5B:E3:1B:2A:F1:D7:21:25:29:69:04:AA:45:73:5F:27:04:3A:F9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA22D2B73C31357C751443309F2E5CFC2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZFvjGyrx1yElKWkEqkVzXycEOvk.roa
Signing time: Mon 25 Dec 2023 18:11:58 +0000
ROA not before: Mon 25 Dec 2023 18:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a2:2d:2b:73:c3:13:57:c7:51:44:33:09:f2:e5:cf:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 25 18:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645be31b2af1d72125296904aa45735f27043af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:57:e6:cf:93:bd:83:14:35:e4:89:9c:74:
b4:ea:de:4c:44:2d:85:db:a0:23:08:12:db:0b:f7:
a9:6a:e7:21:91:78:86:31:ad:3e:76:16:22:84:e2:
ac:0b:d6:52:98:03:ed:b9:8f:81:15:4d:dc:a1:76:
96:d4:f1:ea:64:16:22:ed:85:d7:a2:be:cc:72:3f:
af:a0:de:87:75:92:56:d9:6e:12:9f:b2:44:ea:fb:
06:27:d1:c9:88:2b:b6:90:e1:bb:fd:74:9f:7c:14:
65:67:6c:2b:cd:af:b2:9e:6c:b0:f9:59:c5:0e:5d:
d3:d1:36:01:e3:9d:2c:14:06:f0:6a:7a:74:42:6f:
e5:e9:42:ed:1d:e0:cc:54:bd:cc:6c:4f:42:b0:63:
d9:85:c5:8a:f3:8f:ed:65:01:6a:82:50:94:c6:35:
fc:79:d9:55:02:7c:ae:16:7b:94:f7:11:56:3d:d7:
df:02:db:0a:09:f2:42:c3:1a:87:24:c1:d4:ff:42:
5c:a5:ad:36:0c:3c:49:5a:24:ab:16:db:4f:6a:27:
71:21:6c:61:07:d6:42:d0:c0:2e:93:19:28:02:5b:
21:62:b5:72:f1:ed:fb:31:96:da:8e:09:71:8b:ad:
70:f9:ce:00:a6:99:de:bc:3d:56:f7:35:05:7f:5f:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5B:E3:1B:2A:F1:D7:21:25:29:69:04:AA:45:73:5F:27:04:3A:F9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZFvjGyrx1yElKWkEqkVzXycEOvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:fe:3a:cf:40:cd:8d:11:ee:e4:13:de:bb:50:6f:ac:25:9d:
40:cf:d8:c0:8a:fa:cd:e7:81:23:fe:99:2b:a5:38:8d:f8:51:
09:32:b7:06:0e:55:7a:7f:e3:a9:9e:05:64:84:06:2a:9e:69:
4a:2f:42:34:0b:53:9d:93:37:8f:12:96:b6:15:c0:10:e6:ac:
80:ba:98:65:e8:20:26:5b:65:d3:17:5b:ea:f8:92:f7:79:53:
bb:14:9c:c5:2c:c2:d2:6c:26:1c:c1:78:75:37:80:5e:50:57:
ee:c4:1e:51:4a:92:b1:34:59:a9:fd:ee:29:47:cb:f0:b7:fe:
4c:cc:3c:ef:ee:d1:cb:7f:b3:bf:eb:ea:f7:dd:ad:ad:63:87:
5d:54:ce:53:3e:dc:d9:02:4a:1d:55:1b:7b:62:fb:f5:b8:b0:
c0:61:05:0b:c5:89:7d:1e:19:c0:a0:7b:6c:82:52:c2:5e:df:
d5:66:cc:a1:e4:ce:89:64:cb:1d:bb:d2:48:76:8d:80:bd:5f:
8c:37:51:24:53:72:8e:29:b1:21:7e:ff:61:b4:5d:db:8b:54:
a3:6c:40:45:d3:d9:d4:c4:57:5b:2b:ce:69:4c:31:23:46:b2:
13:ee:05:a4:37:8c:14:16:1c:05:c2:80:61:c8:df:d0:79:61:
8c:56:32:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org