Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZqyVs8JgozRld2EJElzStaF8vUM.roa
File: ZqyVs8JgozRld2EJElzStaF8vUM.roa (raw, json)
Hash identifier: ipjb1/utYiJ+TrLX5ShE5WImlBDipGC1g5nEeWm0ZIg=
Subject key identifier: 66:AC:95:B3:C2:60:A3:34:65:77:61:09:12:5C:D2:B5:A1:7C:BD:43
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C94718ABD57EA036ED40A01764BC62CE6
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZqyVs8JgozRld2EJElzStaF8vUM.roa
Signing time: Sat 23 Dec 2023 02:11:58 +0000
ROA not before: Sat 23 Dec 2023 02:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:94:71:8a:bd:57:ea:03:6e:d4:0a:01:76:4b:c6:2c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 23 02:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66ac95b3c260a33465776109125cd2b5a17cbd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ec:27:12:02:c5:cf:80:89:36:82:af:91:85:
e8:09:65:b5:bb:50:9b:e5:06:b3:e8:27:fa:5d:a0:
85:51:83:e5:71:36:b5:7b:6e:46:1f:ce:21:83:12:
7d:59:f2:79:f6:20:cc:38:e4:da:d9:74:3d:9a:8a:
9b:05:8c:00:63:d0:c4:b1:13:28:f9:3f:86:a8:0a:
78:f5:e5:45:e4:46:31:88:34:b8:cc:82:2a:c8:5a:
ac:2c:31:b1:0a:8b:cf:df:06:67:91:99:8f:39:ab:
fd:4d:d3:45:7e:89:27:59:a7:88:ce:36:d7:21:d3:
86:24:a8:2d:f0:17:4c:ca:18:82:43:26:31:d6:cc:
4d:2e:78:2f:eb:dc:7f:29:7e:2e:10:3c:21:2e:94:
c2:cd:5b:39:aa:67:7f:8b:c6:5b:7f:b2:e1:0e:b5:
db:80:a0:2a:4a:86:bb:9c:f6:d2:81:cc:e1:c5:42:
00:bd:be:bd:f4:94:2d:8e:06:c7:b0:2b:27:75:92:
44:87:b0:41:87:76:fa:b4:0c:45:0e:18:d5:93:ed:
77:95:66:a4:f5:9c:8a:41:ca:98:48:8c:3b:b6:7c:
ee:32:e5:28:94:1c:6e:04:95:40:b9:d2:b2:ea:17:
42:a9:10:6d:bd:54:6d:51:27:87:1e:94:62:84:91:
d0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AC:95:B3:C2:60:A3:34:65:77:61:09:12:5C:D2:B5:A1:7C:BD:43
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZqyVs8JgozRld2EJElzStaF8vUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:d8:a6:98:11:48:fb:f0:68:6c:75:a7:1c:56:d2:bb:fc:ef:
c2:f7:00:c2:bd:3c:14:ef:7d:a8:03:d7:1f:69:e8:e5:8a:2f:
12:27:19:88:11:ff:09:9a:19:20:66:e8:68:e3:c3:89:c5:1d:
52:9c:99:c1:3f:65:49:9e:92:fe:a8:d2:72:b4:b5:c2:06:93:
5f:3e:4a:c6:6d:9e:77:6a:72:59:e3:4f:0e:a0:77:ce:2d:8c:
a8:f4:d2:ff:55:dd:45:49:f1:18:04:de:05:ee:32:71:44:bb:
45:61:4f:2c:d0:42:6c:d7:f9:fe:08:aa:d5:a8:92:fa:22:62:
ce:25:24:ba:bf:79:7a:d2:17:db:aa:a5:1b:d2:8b:81:9c:94:
ed:2d:15:0c:c9:c4:54:ff:7f:70:34:a8:f8:ba:9e:63:79:45:
60:9d:b0:ef:9f:7b:95:25:3c:f3:af:07:5e:5f:39:23:82:85:
50:f1:68:ec:75:b7:09:9e:d0:41:91:df:36:f0:e9:55:b8:e7:
3d:78:41:65:8c:35:84:6a:2b:d6:03:98:8e:aa:15:ca:c3:75:
9d:5a:3c:d8:f5:1c:8a:46:fc:49:0f:bb:ba:02:79:59:d5:41:
bc:60:b3:27:e9:7e:b7:a6:bb:cb:17:7f:fc:ba:97:97:56:44:
4c:bc:2d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org