Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aY4iy8iGDeGr7ajLKEDknrnXpIQ.roa
File: aY4iy8iGDeGr7ajLKEDknrnXpIQ.roa (raw, json)
Hash identifier: YPP8QStm2QU7XSO3faYypcw9prGa+hzA5wV64wqqyr8=
Subject key identifier: 69:8E:22:CB:C8:86:0D:E1:AB:ED:A8:CB:28:40:E4:9E:B9:D7:A4:84
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CAB3136979FFBE10A794036A787B63A9D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aY4iy8iGDeGr7ajLKEDknrnXpIQ.roa
Signing time: Wed 27 Dec 2023 12:12:58 +0000
ROA not before: Wed 27 Dec 2023 12:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ab:31:36:97:9f:fb:e1:0a:79:40:36:a7:87:b6:3a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 27 12:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=698e22cbc8860de1abeda8cb2840e49eb9d7a484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:29:42:90:5d:97:06:c6:b1:26:36:14:44:
c1:b5:e5:99:a0:7f:e0:40:26:0e:1a:76:5d:0f:f8:
77:d4:e3:7d:75:2b:1a:03:91:ba:81:43:00:fb:d5:
e9:13:d4:06:1c:84:30:7e:ac:20:af:63:ac:0c:d9:
4f:d1:9a:ec:11:05:d0:a8:48:4f:34:2d:38:9d:69:
9f:45:76:d2:5d:84:00:05:e3:f3:1c:17:b1:7b:4e:
ef:70:9b:3f:22:1e:15:30:82:07:d9:ff:38:0c:45:
05:00:60:83:cc:ef:ce:ed:4d:c7:56:50:e3:3d:3f:
cf:cd:bc:71:ac:df:88:f1:af:d5:79:2a:71:34:76:
aa:7b:a6:9e:08:29:7a:55:3a:00:79:8e:bb:63:c0:
c0:d8:19:ef:2a:ea:6c:b7:47:b6:ee:bf:65:3f:58:
09:41:ce:d3:2e:b4:d5:3e:37:14:62:68:31:08:da:
c0:9a:f3:9d:02:b5:3b:32:c1:45:39:c3:f4:d2:e9:
a9:37:ea:22:3f:76:d8:0c:7f:a1:76:42:5f:dd:bb:
e9:a9:9d:57:d8:c4:16:8f:ca:c7:4c:0a:ee:95:63:
36:a3:0f:d2:1e:3d:ca:e3:b7:63:78:55:c2:d6:f9:
a5:10:0b:6c:57:4d:af:16:24:17:20:23:43:19:2b:
44:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8E:22:CB:C8:86:0D:E1:AB:ED:A8:CB:28:40:E4:9E:B9:D7:A4:84
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aY4iy8iGDeGr7ajLKEDknrnXpIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:41:e6:2c:74:f9:9e:26:37:ab:39:99:c1:ff:4d:8d:0d:cd:
77:d1:d5:a7:72:b4:ae:34:7a:c8:a4:46:ac:71:c6:59:fe:35:
28:a5:20:2e:81:e7:21:c2:b0:ba:0c:1d:f1:ce:c7:65:9a:cb:
7a:f4:41:e7:29:11:84:50:e1:e9:b1:1a:95:a4:29:87:78:ef:
79:c2:91:e3:97:34:13:38:24:c6:24:61:ec:7f:44:ed:67:dc:
73:1f:46:ab:32:eb:ed:06:63:22:85:e4:da:a5:9b:e1:64:d9:
d9:a9:62:52:33:c4:7f:1a:e9:f8:12:5c:a5:55:87:4c:e7:18:
3e:f6:e1:07:b5:5e:89:ba:cb:19:c6:24:e1:96:30:65:8f:e1:
d7:4f:e5:8f:bd:4a:ef:19:70:85:fe:fd:75:80:02:0e:16:bf:
9a:9b:29:be:77:c4:0a:f7:8a:30:69:0a:a7:bf:ca:84:96:02:
9f:d7:77:85:04:c0:49:56:dc:4e:34:98:ad:87:78:70:e7:e6:
6a:0e:7a:c8:23:e4:98:84:68:06:fe:94:1c:e0:3e:b1:95:68:
cf:41:5e:8a:ab:80:b1:b9:47:c9:b6:5b:8a:6b:d8:18:42:15:
6f:18:c0:8e:13:41:7f:0c:87:47:d6:7c:4e:28:b1:a1:c2:1e:
21:7e:72:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org