Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aRVP8h26n6rHwwmdOWby1E3vJFY.roa
File: aRVP8h26n6rHwwmdOWby1E3vJFY.roa (raw, json)
Hash identifier: 4C4BuSVCJxHEClrmT9IOkrGpBCWcSy0ubOmMezxUT3c=
Subject key identifier: 69:15:4F:F2:1D:BA:9F:AA:C7:C3:09:9D:39:66:F2:D4:4D:EF:24:56
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D2ADBE98F30C4AFCF7FD00CF95EAF6302
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aRVP8h26n6rHwwmdOWby1E3vJFY.roa
Signing time: Sun 21 Jan 2024 07:11:11 +0000
ROA not before: Sun 21 Jan 2024 07:11:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2a:db:e9:8f:30:c4:af:cf:7f:d0:0c:f9:5e:af:63:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 21 07:11:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69154ff21dba9faac7c3099d3966f2d44def2456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e8:f7:25:13:3d:8f:5f:af:13:0b:ac:53:4d:
b2:48:8d:33:49:32:94:14:e2:d9:a5:12:f8:91:b4:
e5:82:a6:ca:40:77:c8:c6:4a:0f:0f:94:be:47:35:
fc:ab:59:59:e6:c8:52:25:52:92:73:3d:23:8c:47:
84:38:a0:2c:d3:fb:04:45:3e:32:1c:80:b7:62:e0:
e1:81:50:52:5d:31:ef:fc:42:86:2e:52:90:46:71:
17:2a:7c:52:8e:64:e0:4c:0e:49:e4:bb:e2:8f:7d:
a7:d6:a7:aa:b6:38:25:10:fd:3f:dc:94:08:de:98:
5b:64:5d:d1:75:11:50:e7:a8:13:9d:74:81:7d:ba:
fc:4f:96:f2:dc:9d:bd:6c:b8:a2:c8:1f:6c:93:ff:
87:1e:82:b3:a0:00:44:86:3a:fc:dd:78:4f:fc:30:
72:2f:f7:27:58:7d:56:d9:ca:2d:9e:46:da:ab:e3:
a2:12:93:b3:23:0c:9c:f0:31:33:dd:cb:32:6f:ec:
37:fa:b6:66:3d:d6:a5:8c:cd:9e:46:be:23:c5:78:
e1:41:57:ca:06:b8:a2:d2:76:97:b7:67:16:1f:2c:
f0:e2:7d:6d:ba:05:e6:7b:9d:6e:81:33:59:c3:ce:
1d:b0:7f:47:b6:0a:67:6b:e4:3c:ef:be:6a:e5:fc:
29:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:15:4F:F2:1D:BA:9F:AA:C7:C3:09:9D:39:66:F2:D4:4D:EF:24:56
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aRVP8h26n6rHwwmdOWby1E3vJFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:59:cc:eb:05:f4:ea:6c:57:93:08:0e:3d:53:42:3b:da:78:
98:34:25:10:c5:44:5c:85:7f:7b:90:9f:c2:6d:6a:0b:48:ef:
72:48:9a:8b:f7:28:df:d1:1f:0a:c9:93:44:06:f2:1d:67:98:
6a:02:73:70:30:86:d2:f2:94:8e:13:1b:4c:86:cd:4b:d9:db:
99:91:30:6a:2e:af:2f:5a:5b:ca:21:06:6d:8d:02:89:9d:2f:
74:eb:4b:7c:6c:46:b5:b6:07:a0:55:20:0b:a5:a2:ab:ad:80:
4b:0d:c3:f7:b9:ed:19:5f:89:34:87:ff:d8:b6:9b:2a:31:e9:
18:f5:80:de:05:46:2c:94:50:90:c9:52:54:76:07:cf:bb:9a:
8c:87:f4:e5:86:e6:b6:d2:37:e1:89:54:6e:5e:ad:3d:4a:b9:
fb:2c:4f:c6:41:03:1c:bf:0f:36:1e:e8:cd:df:1f:24:92:db:
d6:31:09:ac:20:3a:04:2c:66:8f:58:ed:99:ce:8f:e3:af:67:
5f:f5:6a:1d:de:2b:70:a3:e4:56:e9:06:a9:5c:aa:b3:d9:85:
96:9c:24:83:2e:09:80:81:b9:6d:95:37:86:c6:7c:c7:4d:5b:
35:74:d7:45:dd:c5:7b:08:a8:0a:e9:88:0b:f0:6b:c4:6a:8f:
c4:1e:eb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:51 2024 by rpki-client on console-ams.rpki-client.org