Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_-qL2KQDKOt-kRWX2w_k6zNIkrA.roa
File: _-qL2KQDKOt-kRWX2w_k6zNIkrA.roa (raw, json)
Hash identifier: YI1Ir316VDVFAoIZanPMH6doJCDsUOWgCAXB8kAWNsI=
Subject key identifier: FF:EA:8B:D8:A4:03:28:EB:7E:91:15:97:DB:0F:E4:EB:33:48:92:B0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D4C8D860C60BA648081B71F4FF1A2EE75
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_-qL2KQDKOt-kRWX2w_k6zNIkrA.roa
Signing time: Sat 27 Jan 2024 20:12:39 +0000
ROA not before: Sat 27 Jan 2024 20:12:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4c:8d:86:0c:60:ba:64:80:81:b7:1f:4f:f1:a2:ee:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 27 20:12:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffea8bd8a40328eb7e911597db0fe4eb334892b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6d:12:4f:08:5d:42:44:b7:56:e6:d5:61:fc:
86:02:7d:55:51:ee:14:e7:ca:61:92:53:59:86:c0:
0f:2b:8c:82:7d:22:c5:b7:83:ae:29:91:3d:9a:81:
64:75:45:ae:54:12:68:73:be:56:a9:7e:8d:f5:13:
64:48:aa:4b:1e:4d:9b:e7:9b:07:4c:03:6a:fc:74:
4b:ed:2e:09:29:6c:1c:83:eb:7c:1e:bb:24:69:35:
85:6f:e2:da:2e:5c:ec:71:b1:0e:e7:2d:a1:8c:71:
e0:7f:57:8b:1d:32:fa:b9:b7:7b:9a:3b:af:e3:2c:
83:0b:9a:32:ff:c6:ee:6a:04:39:ea:f8:3e:d8:11:
4e:1b:f2:06:27:ad:5a:70:2d:03:18:c4:6e:90:38:
41:18:a9:30:ec:ea:cc:8f:66:e0:48:90:91:27:db:
9d:1a:49:8d:6e:58:1c:36:69:83:9d:9a:ab:29:96:
9b:ce:45:04:79:40:2a:2e:fd:7b:24:04:eb:67:e1:
d8:1c:64:30:50:fb:30:36:61:5e:0c:3a:da:cc:6b:
17:08:48:9f:4b:7a:85:e5:a9:5d:55:ef:0e:c0:84:
c0:82:6f:4e:d6:8f:11:77:6c:28:84:f1:60:db:00:
01:3d:66:3e:5f:36:aa:98:08:40:30:27:2a:09:ff:
34:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EA:8B:D8:A4:03:28:EB:7E:91:15:97:DB:0F:E4:EB:33:48:92:B0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_-qL2KQDKOt-kRWX2w_k6zNIkrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:0e:f6:12:8c:25:26:c5:77:c0:49:5c:62:d4:62:e5:bb:55:
73:ae:a2:c1:94:63:cc:08:76:05:b0:6b:03:34:ea:c0:e0:a0:
5f:f9:f5:c5:c9:e1:a0:f7:f6:2f:50:43:0c:7f:56:3d:92:0a:
2f:98:22:b9:e8:ae:be:a7:dc:9f:78:4c:b8:4f:88:2a:0c:9c:
26:3b:58:11:fa:84:f1:76:29:c4:83:4c:d2:13:11:a8:4a:0c:
6a:38:0a:91:5a:72:92:ac:22:08:29:49:d3:3f:d7:eb:21:b9:
1f:16:12:bb:07:be:a5:f5:4d:e3:31:24:af:c1:9e:63:f1:f7:
bd:0d:c1:77:3b:1f:d1:63:ca:54:1c:2e:b1:1e:8a:41:3b:17:
c0:9f:40:4b:6c:c6:d8:16:13:bd:27:e6:8f:7b:51:b1:f2:70:
9b:46:20:80:0c:a6:3c:ce:55:04:c8:32:82:0c:f4:25:c1:3b:
bf:7f:a9:f6:92:49:6b:db:06:90:6a:6d:e3:fb:f8:1a:1d:a3:
15:f3:e4:46:67:f8:5f:7d:43:0a:68:8e:fc:b1:44:9c:1d:23:
89:13:19:2a:e2:56:e3:38:39:6f:53:b9:19:22:85:e8:4b:45:
94:54:ba:db:3a:58:19:a5:4a:c0:37:5f:0f:3c:ca:75:a3:b4:
96:a6:68:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org