Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bQ9jdEjcH92uEQ4wk1jQnu1_67Q.roa
File: bQ9jdEjcH92uEQ4wk1jQnu1_67Q.roa (raw, json)
Hash identifier: 6eMGagsP07orjYfInrMfpVVxoHB9t/maKWQ0VND6udo=
Subject key identifier: 6D:0F:63:74:48:DC:1F:DD:AE:11:0E:30:93:58:D0:9E:ED:7F:EB:B4
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E8832F63B79C77B96F60590B988BFFBE8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bQ9jdEjcH92uEQ4wk1jQnu1_67Q.roa
Signing time: Fri 29 Mar 2024 03:13:44 +0000
ROA not before: Fri 29 Mar 2024 03:13:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:88:32:f6:3b:79:c7:7b:96:f6:05:90:b9:88:bf:fb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 29 03:13:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d0f637448dc1fddae110e309358d09eed7febb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:12:0d:3a:13:c8:20:14:ce:56:06:2d:4d:c1:
d8:3c:c5:3e:2c:81:b3:81:1b:a2:b3:b8:c3:32:c2:
fa:71:48:1f:31:c9:e2:ec:8c:c4:93:44:9f:7b:80:
4e:b6:60:ba:c8:a0:14:67:fc:25:71:a1:94:93:22:
1f:0e:25:84:7b:30:28:e6:80:19:87:a7:37:81:f6:
3b:b5:95:43:b1:8e:3f:52:c9:98:42:3f:f4:b9:88:
7c:84:31:b0:72:4e:24:6c:48:a2:f5:d0:19:f6:a1:
ab:06:7e:ff:6f:cd:f1:ab:4c:04:9f:ab:4a:89:fb:
ab:5d:70:1b:70:c7:67:59:b2:57:05:e1:78:4d:56:
e8:f7:58:de:69:70:1d:19:b2:7b:4a:02:11:ea:43:
b3:08:6f:a7:4f:25:c7:18:4f:d0:04:55:30:3b:f1:
6d:12:d2:5c:3a:cb:f2:84:3a:b7:98:23:1e:a3:e8:
1f:54:f0:06:a9:99:84:d7:8e:e1:c6:2d:5e:93:45:
f3:14:0e:09:51:bc:82:c9:a7:70:c6:3a:65:1c:88:
4d:a8:b3:fa:1c:56:4c:3f:84:d8:20:05:97:8d:c1:
44:bb:14:f5:ce:c5:0e:df:cc:5f:f5:0c:ea:2d:3a:
8f:1c:76:67:fd:54:4d:d7:d4:15:62:a2:25:b3:ea:
fb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0F:63:74:48:DC:1F:DD:AE:11:0E:30:93:58:D0:9E:ED:7F:EB:B4
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bQ9jdEjcH92uEQ4wk1jQnu1_67Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:25:f0:13:45:d2:3c:08:cf:ad:3f:c5:97:c5:92:30:63:77:
23:c6:26:e7:ab:83:b7:9a:47:ad:54:f3:a8:df:aa:77:c7:4b:
94:18:d0:3f:93:a5:e3:00:b8:8a:7f:af:be:7a:1b:47:4f:c2:
ac:8d:5b:02:a4:9f:fe:36:c3:3f:5b:f3:fe:1a:0e:80:57:6f:
ea:a8:6d:b4:ab:13:c4:7f:9a:8e:6b:ca:c5:4c:ec:c8:6e:97:
d5:8b:f2:c9:c4:db:07:ec:fd:c1:6b:a2:4a:67:59:83:96:6a:
af:c4:b4:ee:b7:00:97:cf:f4:ba:51:f0:f6:88:f9:73:b1:2b:
86:b0:cc:42:63:a4:f4:a9:cd:40:3c:dd:62:4d:ca:5e:2a:bc:
89:be:f0:68:d4:b7:5b:d5:38:26:d2:ad:ab:08:f2:2b:d9:86:
42:a9:80:c5:00:1e:e9:4b:20:d0:a5:ae:da:26:09:85:57:96:
98:a9:af:03:90:d1:4a:80:c4:b7:92:3e:ef:fb:fc:01:78:45:
9b:98:b6:b0:37:d4:b5:82:2e:2b:c2:f0:94:19:53:f0:8a:de:
88:1c:b7:f2:3b:30:96:29:3e:b6:70:41:58:7c:6d:87:84:4c:
f5:91:4a:03:12:3b:41:a9:76:8a:5a:9b:7b:ef:c2:24:91:01:
f1:a8:2d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org