Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ccundAoBXgHLEMv3HWTOzJ7VLLU.roa
File: ccundAoBXgHLEMv3HWTOzJ7VLLU.roa (raw, json)
Hash identifier: vZuzqPb9rJR16L87pEB/V5kkmlEApmdtsAeHgQXCuC0=
Subject key identifier: 71:CB:A7:74:0A:01:5E:01:CB:10:CB:F7:1D:64:CE:CC:9E:D5:2C:B5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EE1072A1DD594430057467291B81AC3DA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ccundAoBXgHLEMv3HWTOzJ7VLLU.roa
Signing time: Mon 15 Apr 2024 09:12:06 +0000
ROA not before: Mon 15 Apr 2024 09:12:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:07:2a:1d:d5:94:43:00:57:46:72:91:b8:1a:c3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 15 09:12:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71cba7740a015e01cb10cbf71d64cecc9ed52cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:98:0e:be:68:1e:5f:0d:bb:40:d3:81:77:60:
40:07:45:a0:af:71:f4:24:c4:be:63:cb:21:09:93:
39:15:b8:1a:a2:10:c5:78:9d:d7:9e:de:d0:d6:29:
50:9e:f2:b8:43:a6:ee:05:6f:4a:59:28:7b:02:05:
c1:2f:52:cc:46:6e:92:89:fd:aa:5b:dc:a9:c7:3e:
a2:ad:bb:2e:50:a2:58:b7:bc:dd:fb:8e:55:73:04:
49:5a:dd:1c:c6:93:8c:aa:f5:d7:e3:4b:3d:ed:22:
89:e3:39:cd:de:36:50:03:67:03:be:bb:b2:ce:2d:
33:10:97:27:c7:4f:0b:ad:62:7a:77:7b:9b:93:14:
3e:1b:69:1a:67:77:c2:0b:14:06:f6:91:ae:1e:21:
48:ef:37:b1:e7:d9:2d:5e:d2:96:04:76:b6:3e:64:
bd:0b:28:bb:5a:a4:a4:0b:01:07:d1:b7:70:25:fe:
fc:6d:d6:b7:b8:15:21:be:63:74:95:58:25:9d:b2:
9a:8a:a3:06:d1:ad:41:21:dd:6d:11:d3:09:a9:63:
a0:15:ae:bd:0e:07:2f:92:17:eb:fa:60:e8:1f:73:
10:8f:f1:ad:9e:3a:33:2c:54:9c:f8:e2:be:d9:49:
72:33:3a:f8:a8:94:33:d4:2e:02:36:06:0f:03:54:
d6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CB:A7:74:0A:01:5E:01:CB:10:CB:F7:1D:64:CE:CC:9E:D5:2C:B5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ccundAoBXgHLEMv3HWTOzJ7VLLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:69:50:d0:ce:62:e4:0b:30:d7:d0:8b:a6:8a:27:0e:c7:f4:
a0:bc:e1:8b:64:0a:7b:ba:40:29:f9:a6:d1:42:16:c9:25:cc:
db:87:d9:29:09:62:9a:cc:b8:f4:1a:57:28:fe:04:57:82:a2:
f6:32:54:21:0d:35:9b:14:2b:37:dd:65:b6:08:dc:39:bb:91:
f5:1b:94:c7:49:99:1a:1b:45:d2:86:c7:cc:7a:b7:10:a2:76:
d9:7d:af:e6:e2:4c:13:9f:d1:9e:99:26:89:31:61:12:5b:44:
59:bd:bc:82:0f:2a:e0:4d:eb:e9:98:85:74:d5:9c:74:04:a5:
69:e0:0d:aa:be:50:44:e9:ad:ec:0a:29:d6:cc:45:5d:c8:8a:
e9:38:96:e8:b3:a2:08:9f:96:f5:4a:c0:65:41:0e:1a:a2:df:
06:5b:58:13:fa:8d:1c:49:6e:6d:52:27:6e:b5:17:a1:b3:3a:
6c:a9:1d:0b:62:77:27:8d:85:44:0b:b4:5d:0d:dd:c8:e3:90:
da:21:49:ac:65:7d:bb:2c:cf:1d:c4:01:be:7e:24:67:6e:7a:
83:ab:81:c7:ae:ea:8b:47:1d:f6:e1:db:41:b6:fe:0d:92:7d:
08:70:e1:f0:ca:8f:60:a7:08:49:e7:02:36:16:fc:cd:fd:aa:
2d:55:75:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org