Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_R_gaPybR0rWTtpqqMEc9DwHPLQ.roa
File: _R_gaPybR0rWTtpqqMEc9DwHPLQ.roa (raw, json)
Hash identifier: fDFKxCRe2JGf0JiIKhc3YSHS3EIIDEiE9sW8ZlfqEgM=
Subject key identifier: FD:1F:E0:68:FC:9B:47:4A:D6:4E:DA:6A:A8:C1:1C:F4:3C:07:3C:B4
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB61CA44AC07D6E8C5C2E6FA14CF80292
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_R_gaPybR0rWTtpqqMEc9DwHPLQ.roa
Signing time: Sun 07 Apr 2024 01:11:54 +0000
ROA not before: Sun 07 Apr 2024 01:11:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b6:1c:a4:4a:c0:7d:6e:8c:5c:2e:6f:a1:4c:f8:02:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 7 01:11:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd1fe068fc9b474ad64eda6aa8c11cf43c073cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7d:a1:1d:76:d3:44:54:b4:fe:9c:3c:2e:45:
6f:27:d3:c9:46:a9:13:ef:af:3d:2d:ae:e3:a1:dd:
8d:2a:8c:a8:cc:97:e0:d3:38:aa:99:48:b8:b1:91:
6a:e9:25:2c:88:4f:c4:60:f7:a1:56:8f:60:45:1c:
f7:65:e0:a1:4c:31:75:d7:6b:78:35:f7:62:3e:56:
8c:30:b2:28:b6:ae:75:aa:ef:15:86:f6:0a:5f:b1:
8e:16:e4:49:38:d8:dc:12:c4:ba:42:d6:c6:8e:e5:
8b:de:90:b8:45:f4:65:9e:90:37:b2:6a:af:ad:9a:
1c:b1:eb:1d:94:a3:9d:86:7a:f6:96:b9:d1:b3:21:
5b:e0:0c:fc:e2:ac:8a:8d:13:cc:08:68:ce:95:db:
35:41:f9:e9:23:8c:0d:78:67:78:c6:98:00:ca:df:
17:d4:fe:7a:7c:e9:c9:48:03:77:8a:c2:99:41:a1:
43:e0:d1:64:82:8a:45:69:0c:5a:74:a4:1b:08:e7:
8f:4d:f9:70:90:d4:ec:2b:21:d2:d1:2d:36:c5:21:
42:5f:4b:36:be:da:98:b3:bf:8e:a9:08:7d:01:f0:
22:9c:33:1e:73:f5:0f:62:83:0b:c7:79:c3:80:b5:
42:54:65:ad:ad:4a:5a:8c:ac:95:3a:ca:23:32:24:
7b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1F:E0:68:FC:9B:47:4A:D6:4E:DA:6A:A8:C1:1C:F4:3C:07:3C:B4
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_R_gaPybR0rWTtpqqMEc9DwHPLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:b3:4f:b4:93:76:2f:ac:ed:4c:ec:be:5d:9a:b8:a4:47:e9:
b1:b4:a5:cc:ce:bd:c9:65:a7:e7:13:b0:1c:c5:f0:f0:59:96:
da:27:80:b7:48:30:aa:73:2f:55:5f:ed:64:6c:fd:23:77:86:
db:2d:bd:a7:df:f9:c4:9d:ee:52:a6:b7:9b:b0:51:f4:d0:b6:
0b:52:e6:3f:7a:e7:d1:6c:cb:d3:8c:d4:d4:ba:d5:c6:aa:ad:
48:1f:9c:71:b9:13:6a:fb:7f:0f:21:81:ee:d0:37:1a:8f:46:
4f:54:92:47:e4:bc:13:07:9d:b9:b0:4b:91:69:95:3d:5b:9b:
72:65:71:ee:ae:6e:76:67:65:56:87:10:a6:d5:d8:35:9f:2a:
cb:11:19:d0:7c:e2:0c:f8:72:0f:0a:18:11:f5:ef:db:ae:29:
54:1d:3e:2a:1c:78:7a:fd:31:6b:28:b4:9c:a8:91:4e:75:6e:
28:4a:bf:72:53:e8:94:d1:cd:84:55:4e:66:e6:89:47:56:aa:
a7:33:dc:20:bc:a8:7d:43:fc:e4:b2:ae:d6:bf:09:1f:f3:90:
74:fc:bb:1b:96:fe:cd:98:1f:2a:ba:35:3e:b3:d1:d7:52:15:
29:e5:79:da:46:8d:98:13:16:c6:2a:db:f5:82:b5:80:46:e1:
46:70:a6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:51 2024 by rpki-client on console-ams.rpki-client.org