Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/abxjg3pVwMDeAGpatMQWlOqy1hE.roa
File: abxjg3pVwMDeAGpatMQWlOqy1hE.roa (raw, json)
Hash identifier: +S9ku8DZPen7y2J6FcAqr5+A7b9P7IHZtHgS4yKfuds=
Subject key identifier: 69:BC:63:83:7A:55:C0:C0:DE:00:6A:5A:B4:C4:16:94:EA:B2:D6:11
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EDB6C88D71F388D9FF077D47EF6644DC0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/abxjg3pVwMDeAGpatMQWlOqy1hE.roa
Signing time: Sun 14 Apr 2024 07:05:06 +0000
ROA not before: Sun 14 Apr 2024 07:05:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:db6b:b16f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:db:6c:88:d7:1f:38:8d:9f:f0:77:d4:7e:f6:64:4d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 14 07:05:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69bc63837a55c0c0de006a5ab4c41694eab2d611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3a:6b:e8:fb:5d:c4:95:31:19:d1:68:9f:07:
dc:da:df:ac:77:bf:5d:90:dc:a5:f9:b0:a5:ae:38:
23:b9:2d:3b:fb:86:b0:fe:d6:dd:83:17:23:aa:61:
e3:d7:f5:34:3e:24:e8:c7:9e:0b:53:59:0e:d9:87:
46:f2:06:75:c7:de:e0:ce:23:71:91:50:6c:f7:c6:
b4:6a:3a:66:c5:3a:ec:0b:4c:be:f3:51:9a:34:76:
bd:c6:d2:4a:db:55:ed:98:06:5c:1d:ff:f4:18:5c:
d2:18:78:e7:90:8c:2f:e9:65:e4:52:e7:99:3b:49:
71:87:27:45:7e:24:80:75:68:ee:45:4b:82:48:73:
ee:13:51:af:5f:bc:1e:d0:46:ad:27:27:c3:e7:a5:
9a:3c:7c:38:d4:97:c9:ed:d4:a3:6f:38:9a:be:e2:
1e:bf:5e:22:e8:c9:d7:e4:2d:ae:60:07:8e:39:87:
56:45:47:88:dd:8f:64:09:d7:5f:74:65:fb:cb:07:
90:69:57:97:ca:6e:9d:65:9d:41:99:55:9c:3f:b9:
ab:08:7e:94:5f:c7:48:2e:b1:9b:a6:6e:27:f7:01:
77:87:e7:95:f2:2a:21:13:a7:93:83:3f:dc:ea:6c:
ed:db:10:29:72:3f:6e:73:f7:f7:0e:e4:7d:41:0d:
5f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BC:63:83:7A:55:C0:C0:DE:00:6A:5A:B4:C4:16:94:EA:B2:D6:11
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/abxjg3pVwMDeAGpatMQWlOqy1hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:ff:0c:d6:cd:5f:d9:0e:d8:7e:16:6d:00:d8:6c:b5:f5:2d:
55:49:60:d2:2a:9b:6f:74:cb:d1:1b:cb:3e:1f:34:9e:2a:ba:
06:3d:92:3a:d8:1a:f7:1f:b3:6e:12:1b:de:54:2d:e1:5f:24:
9b:4c:59:61:cb:6b:58:ea:06:b3:f3:db:35:be:3a:7e:ee:05:
ea:76:f0:3e:ca:88:aa:f4:61:be:ae:1b:dc:33:94:3e:01:0d:
c1:70:d2:36:a1:b6:3c:3d:18:f8:45:b9:63:50:d8:03:72:48:
9f:5a:d7:93:34:34:71:ea:cf:c5:d1:59:c0:dd:40:0a:49:7f:
5a:a2:dd:1c:0e:6f:9b:b0:e5:2a:e2:49:89:98:45:41:64:7b:
e9:04:00:3e:d6:6e:4b:19:32:5f:ed:64:c7:a7:d5:0c:01:31:
57:37:6a:73:49:40:ac:97:69:c1:ef:9b:20:64:3b:78:18:b3:
22:af:a0:1d:6b:b1:b6:6a:57:37:44:14:2d:ae:41:a3:34:97:
af:3f:6f:c8:2a:d8:9a:44:eb:fc:1f:a9:06:31:97:fe:fd:82:
d1:7d:ac:c6:f3:d4:2d:22:7d:d6:8f:08:50:f7:ce:11:ae:f7:
62:a2:22:ed:dc:dd:fa:fe:bf:53:62:ce:6f:48:07:a0:65:f9:
9f:d9:ff:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:51 2024 by rpki-client on console-ams.rpki-client.org