Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cLSSdVrnUmFpm25v8UHCk2vCvxI.roa
File: cLSSdVrnUmFpm25v8UHCk2vCvxI.roa (raw, json)
Hash identifier: vtoL2R1kkanKDGC3jp+FeDEukeaC4sH1Q+MRnYuBqyc=
Subject key identifier: 70:B4:92:75:5A:E7:52:61:69:9B:6E:6F:F1:41:C2:93:6B:C2:BF:12
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB9F82C7DEABC95BB68D3C49C2DD9E814
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cLSSdVrnUmFpm25v8UHCk2vCvxI.roa
Signing time: Sat 30 Dec 2023 09:04:58 +0000
ROA not before: Sat 30 Dec 2023 09:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:b9f7:6f2e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b9:f8:2c:7d:ea:bc:95:bb:68:d3:c4:9c:2d:d9:e8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 30 09:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70b492755ae75261699b6e6ff141c2936bc2bf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3c:96:47:7d:3c:19:eb:1d:7c:34:20:68:b3:
24:07:d1:cd:11:f8:2d:51:b6:6e:b0:30:4a:b3:37:
0a:da:56:e5:b5:3f:85:1a:7c:6b:ca:20:cb:f5:dc:
a6:94:b8:54:e2:5a:a4:2f:16:45:27:17:69:b2:8b:
f3:dc:99:9c:c6:bd:c7:50:9d:c8:70:a4:89:19:0c:
9c:b5:ef:f4:59:9a:a1:c0:92:56:e2:06:89:58:3a:
7c:e6:1e:a1:f0:91:92:32:cb:6b:22:6b:ae:ef:a5:
e9:f5:b9:66:26:80:dc:9a:96:77:ac:67:4c:fa:48:
7e:bc:49:df:d1:33:b7:de:c9:2e:9c:83:67:54:ec:
fe:d4:43:07:15:7a:97:52:be:dc:c4:6f:bd:d6:76:
d2:e0:4a:75:5c:d0:e6:63:7b:1e:b7:59:7a:df:d0:
4e:6b:c7:85:ed:bf:31:70:5e:28:67:3f:9b:72:c3:
1c:1e:27:b1:22:68:22:d8:39:31:5d:8b:c0:94:0e:
27:9d:20:8f:d8:ea:5b:cc:05:10:96:b8:35:6c:ec:
75:77:30:66:c4:f3:60:43:0e:43:e4:92:02:d9:b2:
ad:00:20:3a:15:41:b3:ce:d3:7e:83:fd:45:a5:17:
be:cc:fa:82:6c:cd:23:15:64:90:ca:a5:62:1a:5d:
bf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B4:92:75:5A:E7:52:61:69:9B:6E:6F:F1:41:C2:93:6B:C2:BF:12
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cLSSdVrnUmFpm25v8UHCk2vCvxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:af:b6:fe:44:5d:4e:ee:fd:75:33:fb:f0:91:47:b3:cd:90:
94:30:0b:18:eb:ab:4f:54:60:7f:a2:ca:28:fd:5b:52:68:b3:
a3:da:1f:30:56:e7:27:ce:41:29:50:01:12:41:46:de:d0:60:
43:42:a9:3c:89:45:39:67:ec:0b:f7:b5:d1:8d:e0:1d:54:b0:
6c:49:d2:4d:cd:48:9a:06:11:5d:a2:6f:a9:20:e6:ba:9b:67:
42:69:f5:d2:2d:b6:69:79:9b:95:d1:a5:ab:d2:5c:6c:09:1b:
00:4f:b7:01:5c:10:ba:83:a2:b7:10:63:84:00:2f:cb:e6:ff:
b0:00:c0:38:ea:e1:62:74:9d:a7:f2:68:c1:bd:30:e3:1b:6a:
c8:92:51:2f:5b:1b:4a:38:6c:31:de:e3:2a:10:13:03:62:b1:
4e:d6:28:b3:5d:52:ee:bb:09:bd:89:c5:89:f9:db:40:7f:f2:
3d:9f:52:43:a1:fc:13:63:fd:29:b4:5a:04:10:9e:44:31:bb:
64:7c:4a:9a:72:83:f0:89:ac:00:3b:17:53:fd:fe:18:59:cf:
8f:28:7a:e0:02:90:30:ea:68:9b:fd:12:36:24:32:27:10:8c:
37:9a:ea:31:3a:13:c2:b2:ac:c4:76:a8:15:57:05:1b:1f:99:
9e:19:78:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:51 2024 by rpki-client on console-ams.rpki-client.org