Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aqPER-_Aug3tNp23uTfPL42LF1A.roa
File: aqPER-_Aug3tNp23uTfPL42LF1A.roa (raw, json)
Hash identifier: /bZ2nnXCEKWJ1LXJuaoVdEolQp40MJcCbqqYdLLYxCs=
Subject key identifier: 6A:A3:C4:47:EF:C0:BA:0D:ED:36:9D:B7:B9:37:CF:2F:8D:8B:17:50
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA868040DB669B724DBD46B2740AF0045
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aqPER-_Aug3tNp23uTfPL42LF1A.roa
Signing time: Tue 26 Dec 2023 23:13:58 +0000
ROA not before: Tue 26 Dec 2023 23:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a8:68:04:0d:b6:69:b7:24:db:d4:6b:27:40:af:00:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 26 23:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6aa3c447efc0ba0ded369db7b937cf2f8d8b1750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:04:77:b5:d9:59:0f:5d:05:b7:4e:6d:9f:46:
00:bb:34:b1:31:41:ec:36:97:ab:ef:7b:59:9a:e1:
7e:65:e3:56:bf:19:33:1b:9c:75:0b:90:6f:9b:59:
47:94:7e:70:f0:ad:c8:f7:03:37:c0:1a:94:8f:e7:
c9:68:56:93:ee:98:33:83:69:b2:fa:34:1d:27:89:
54:95:51:0e:4d:00:b9:3c:ab:d2:31:bc:b8:b3:30:
04:40:32:3f:be:37:d5:5e:3c:14:22:ff:7e:7a:69:
8c:57:40:b2:0d:f0:51:58:99:a9:13:4d:cc:c8:bf:
84:5e:75:42:5c:9f:42:d4:13:9a:38:44:d1:4c:8f:
3a:d8:a0:75:37:98:27:c2:1e:16:20:94:3b:77:1f:
f7:14:94:3f:1a:0e:2c:2f:6e:61:96:09:4c:b7:b8:
48:ca:1b:80:27:cd:28:24:07:a8:cc:bc:e4:30:cb:
f3:a1:3c:4e:6d:68:b4:aa:e9:78:39:9a:a9:c1:df:
92:b7:e3:ec:18:35:7c:be:6b:6d:a5:b5:b4:0c:a6:
cc:2e:ed:16:f9:e0:57:46:02:87:46:55:88:91:38:
1b:ac:86:23:47:e1:87:18:2d:fc:e6:15:45:f5:3b:
85:a6:c9:87:cc:8b:22:58:9c:ed:03:be:b5:80:09:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A3:C4:47:EF:C0:BA:0D:ED:36:9D:B7:B9:37:CF:2F:8D:8B:17:50
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/aqPER-_Aug3tNp23uTfPL42LF1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:0b:1d:69:76:57:2a:a8:10:b7:15:41:3c:17:82:fa:c5:ac:
6a:48:fa:99:f9:0a:43:22:3f:de:9b:b7:7a:23:49:b3:ca:30:
bd:23:24:37:0a:54:da:84:e4:d9:93:46:1c:b6:00:5c:fc:ed:
45:e5:2c:04:ea:5e:ae:0b:bd:41:1a:bb:27:0f:0e:7f:f7:c4:
ab:b8:95:a5:dd:3a:eb:42:31:dd:fb:ad:43:6a:a4:8f:25:1b:
90:59:a8:1b:7f:54:c7:ba:ef:bc:d5:ab:58:b6:70:97:01:c5:
00:86:29:c8:48:13:9a:9e:6c:21:7b:d8:dc:a7:08:61:49:b4:
7e:42:95:04:47:78:9a:58:a0:7a:de:8a:ff:22:bf:fa:a2:ac:
03:1d:85:00:70:a8:49:40:1f:89:fc:13:bc:e3:96:ce:a0:08:
e8:fa:cf:26:19:aa:ed:69:45:ce:e6:78:d6:be:e5:2f:4a:44:
b5:a1:1f:1b:6e:3a:c0:7c:78:c5:31:00:bd:e2:de:77:d6:ef:
44:a3:68:26:84:36:f4:79:53:3c:41:74:6e:70:51:e0:b4:32:
1d:57:c7:9f:1e:a0:1b:e2:5c:06:2f:45:ba:54:61:1f:b0:a2:
4c:95:c3:aa:d3:ec:0d:93:3d:12:53:e3:64:10:a5:37:48:02:
29:e5:18:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org