Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cjA-PFYRZYI-65Me466K0vS4qpg.roa
File: cjA-PFYRZYI-65Me466K0vS4qpg.roa (raw, json)
Hash identifier: Evq+oK3brRwqZBEi6PweE4vcFc0uCTSQ9y8FvyO0Gdc=
Subject key identifier: 72:30:3E:3C:56:11:65:82:3E:EB:93:1E:E3:AE:8A:D2:F4:B8:AA:98
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D7708B7188FC1E1021B839D9BF70137DB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cjA-PFYRZYI-65Me466K0vS4qpg.roa
Signing time: Mon 05 Feb 2024 02:11:16 +0000
ROA not before: Mon 05 Feb 2024 02:11:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:77:08:b7:18:8f:c1:e1:02:1b:83:9d:9b:f7:01:37:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 5 02:11:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72303e3c561165823eeb931ee3ae8ad2f4b8aa98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:f2:57:18:22:9e:07:0e:8f:87:54:45:ca:
ac:3a:ce:66:7b:c4:28:de:b6:52:1f:5c:ae:d3:a8:
e8:16:34:d3:1b:35:72:fb:d4:66:4b:79:6f:99:9c:
de:f3:c4:80:46:6e:9c:6b:b5:23:72:73:72:1c:b1:
c8:98:a9:9b:07:4d:c7:6c:d9:57:34:f1:6a:b5:7c:
67:e3:11:a8:90:78:5e:dd:53:05:ec:5c:56:ae:c0:
b2:23:3e:7d:9e:1f:a7:17:c7:17:d4:93:19:81:06:
c9:30:88:1d:a9:01:0f:03:09:73:2a:20:d5:f3:c9:
25:fb:a9:30:c7:80:b6:f9:29:bb:cd:65:6d:8c:fe:
0d:7c:87:a4:5c:7e:06:54:86:22:db:1c:3a:c4:72:
bc:f7:32:ba:94:54:14:e8:6e:d8:34:b4:e9:12:3e:
56:1e:f6:4d:d6:ef:8b:1d:e1:51:24:7e:99:a9:06:
4f:e6:5a:de:af:09:31:87:5e:77:e6:e3:92:65:99:
7e:d9:52:fa:e6:d1:7b:b7:23:1c:c9:73:3e:3c:cd:
f7:cf:a2:51:64:42:d2:0f:68:5f:3f:02:2a:74:b5:
22:b5:28:fe:6c:e8:da:ac:b2:1c:e3:0e:62:aa:98:
5f:91:68:b1:8e:15:7a:af:16:28:1d:55:5b:b0:bb:
4b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:30:3E:3C:56:11:65:82:3E:EB:93:1E:E3:AE:8A:D2:F4:B8:AA:98
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cjA-PFYRZYI-65Me466K0vS4qpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:4c:2a:d8:15:02:0a:64:1a:db:c6:d2:92:32:c2:28:33:cb:
f1:01:81:c5:03:aa:45:12:4b:24:91:40:34:74:8c:e9:9d:1b:
e5:51:65:85:92:c2:82:0f:21:26:74:d2:0d:fb:78:c7:00:9c:
91:ae:af:d6:fc:ce:5c:c4:0e:c1:6f:22:79:8a:3e:20:f7:66:
39:20:ab:b7:b8:83:dc:24:b7:9d:e0:94:75:96:d1:3e:26:b3:
70:b5:eb:fb:d6:58:d8:50:41:cc:c4:87:f1:9f:5e:b8:cd:14:
bd:ce:a3:be:4d:0f:83:a7:1f:b3:7d:ed:29:d7:79:64:51:f7:
2c:78:1f:41:08:28:c1:cb:17:7c:62:02:25:b6:58:17:71:fe:
96:e4:ac:69:70:c4:e7:83:cd:6f:2b:cc:d5:30:ee:eb:de:6a:
1e:05:a2:90:23:f3:9b:d1:32:c2:81:1f:6c:f6:de:c2:cc:a0:
cb:f4:26:23:8f:6e:65:70:42:96:50:45:54:99:4d:b4:08:82:
1d:aa:0f:fd:0c:a2:7b:ba:7c:e7:5f:ab:4a:37:90:6f:19:e1:
80:3f:ce:a2:08:b2:0d:62:90:8a:66:bd:0e:55:ad:e2:0f:66:
15:61:0f:da:1c:08:cb:ba:f7:23:6d:6c:db:6b:40:07:12:e1:
44:a3:3a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:51 2024 by rpki-client on console-ams.rpki-client.org