Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZMqn9stqIi_UYslM1GR_B7V2un0.roa
File: ZMqn9stqIi_UYslM1GR_B7V2un0.roa (raw, json)
Hash identifier: +bsYiPNBtp2Fmh3CE79WeijcqGGZ7OXskVDgqq1NUtI=
Subject key identifier: 64:CA:A7:F6:CB:6A:22:2F:D4:62:C9:4C:D4:64:7F:07:B5:76:BA:7D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DAEA21B5DBACF8D6D79153D83843B29BE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZMqn9stqIi_UYslM1GR_B7V2un0.roa
Signing time: Thu 15 Feb 2024 21:17:55 +0000
ROA not before: Thu 15 Feb 2024 21:17:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ae:a2:1b:5d:ba:cf:8d:6d:79:15:3d:83:84:3b:29:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 15 21:17:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64caa7f6cb6a222fd462c94cd4647f07b576ba7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d6:4f:b3:14:b9:1f:59:79:6a:98:44:29:fd:
2b:12:73:ab:55:97:30:79:02:02:c8:e0:c7:70:29:
21:a9:1e:4c:50:69:34:18:20:93:6c:43:b7:9d:8f:
ba:f5:73:c6:f2:dc:7b:0c:5e:99:c6:57:52:df:ed:
07:f9:73:4c:22:7b:fb:b8:d2:2a:55:64:d4:32:d0:
a9:f3:66:f6:60:a2:c2:5b:a7:8b:9d:48:20:f0:97:
ba:07:a2:69:aa:ed:df:87:31:38:4b:59:73:43:f1:
a5:99:cb:68:5c:93:97:ea:b4:e8:43:cd:e7:7d:12:
48:a5:ab:6c:03:5e:f5:85:c5:5e:fc:7c:95:73:78:
e2:f3:64:d7:4a:df:7e:e2:d0:38:41:c1:77:fd:04:
e2:a8:8e:65:32:de:6f:95:78:9c:f9:c5:91:04:ba:
d7:dc:f9:69:16:b5:e4:f4:dc:52:29:04:62:03:81:
9f:97:fb:b2:b5:95:bd:8a:b8:24:43:87:5f:ed:2b:
02:a8:67:55:4a:d7:db:fb:ee:39:6f:9d:12:33:ba:
74:d4:80:76:07:4c:a6:d7:39:47:7b:d1:4d:a1:62:
d7:94:9f:b8:79:8f:d1:56:51:68:6a:f4:d6:76:a3:
19:0a:be:2a:0f:e8:99:bd:0d:0e:56:08:8d:a2:63:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CA:A7:F6:CB:6A:22:2F:D4:62:C9:4C:D4:64:7F:07:B5:76:BA:7D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZMqn9stqIi_UYslM1GR_B7V2un0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:e3:b9:d9:45:a4:aa:88:8f:05:1a:6d:16:36:ff:a9:e9:5f:
8b:10:3e:9e:a4:7c:27:58:25:16:6f:16:8e:52:1c:90:bf:df:
78:c0:da:9b:28:4f:44:f7:3b:85:3b:d6:34:33:5e:ae:0a:32:
f0:f5:0a:b0:d9:8c:3c:71:91:0b:c1:40:84:41:60:c0:bf:6a:
25:1c:95:72:b6:5d:94:6b:41:5f:dd:99:3b:c7:ce:9b:15:e4:
89:21:81:04:c2:9f:d5:51:3f:38:fd:e0:3a:be:dc:d5:41:26:
d1:a1:d8:ae:e5:48:88:74:11:38:fb:d6:60:66:1c:a9:4a:f9:
2b:21:a3:45:a2:c5:38:7d:9b:f9:c8:19:72:ce:9f:d6:d5:f9:
93:78:ab:f6:ce:40:0c:5d:60:5b:a6:95:1b:42:1d:24:90:9c:
70:52:e3:77:6d:77:83:03:36:75:fa:b4:01:d9:c4:ce:4b:a6:
d3:d9:2e:66:fa:d7:31:9b:88:d3:c3:ab:ed:e2:15:ae:ac:0a:
2d:dd:53:e3:18:0b:51:86:9c:e1:67:b0:82:86:2d:14:23:3b:
a4:24:75:e9:53:32:ff:74:26:0e:68:f3:af:b4:2b:40:a3:e8:
68:0b:9d:d3:6c:d0:19:a1:a3:d6:21:79:46:24:90:47:87:61:
6a:d7:df:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:51 2024 by rpki-client on console-ams.rpki-client.org