Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fMgiGos0HyUf9lkermPPqWRmZ20.roa
File: fMgiGos0HyUf9lkermPPqWRmZ20.roa (raw, json)
Hash identifier: 6E974zW/j/tgPuTtY2UidzRnlGDY70flxxMGG/vsn7Q=
Subject key identifier: 7C:C8:22:1A:8B:34:1F:25:1F:F6:59:1E:AE:63:CF:A9:64:66:67:6D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DFD257AEB0EEF6F4DC01CF8DD88B4EE76
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fMgiGos0HyUf9lkermPPqWRmZ20.roa
Signing time: Sat 02 Mar 2024 03:11:48 +0000
ROA not before: Sat 02 Mar 2024 03:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fd:25:7a:eb:0e:ef:6f:4d:c0:1c:f8:dd:88:b4:ee:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 2 03:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cc8221a8b341f251ff6591eae63cfa96466676d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:21:97:85:e9:56:3b:87:44:01:83:42:5d:
dc:4c:9b:99:d2:c1:3d:82:01:aa:3b:02:1c:46:04:
a9:07:10:93:b2:b1:2b:06:a4:9d:1c:df:6f:a8:a8:
9b:db:90:74:80:26:08:28:32:15:e0:bb:41:eb:0c:
0c:f9:73:25:d9:5e:94:50:cc:2e:e7:1b:b7:35:eb:
23:f0:68:c7:97:15:d8:3e:ab:aa:f5:d7:44:64:9b:
81:ab:7c:2c:b2:3f:65:b5:fe:4e:f4:dc:73:f1:85:
7e:34:a0:60:8b:96:c6:99:d6:79:14:ab:e1:a0:84:
c3:4a:f8:43:e8:86:88:b7:9a:71:f6:c1:9d:c4:9c:
4e:75:e5:42:3c:3a:24:73:f6:b5:87:a8:0c:dd:6f:
92:71:4b:ab:d2:c4:d3:c3:81:82:b7:83:23:ca:e5:
63:0f:ac:da:b5:9f:f9:5e:48:c3:c1:e2:aa:ee:53:
aa:34:b0:f3:ab:fc:82:8c:7f:7e:bd:b2:ea:91:bc:
f2:70:1c:24:c6:dd:0d:ce:92:74:8b:f6:fb:e6:81:
ce:9a:c6:ce:6c:28:a2:de:79:ae:bb:05:37:de:dd:
31:f0:04:22:71:de:1c:51:59:b7:57:ed:59:60:05:
05:fd:3d:db:e9:6b:37:2c:f9:e4:9f:56:5f:7f:1a:
f4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C8:22:1A:8B:34:1F:25:1F:F6:59:1E:AE:63:CF:A9:64:66:67:6D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fMgiGos0HyUf9lkermPPqWRmZ20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:e7:cf:a5:0b:0b:58:a0:a3:3d:67:7e:51:32:4a:f0:e5:c0:
43:43:fb:a6:8a:9c:cb:23:98:c2:fa:08:4d:2a:bb:bd:37:f9:
2a:ea:4f:98:c1:92:46:c4:94:f5:58:66:b7:80:55:d6:1d:12:
b8:e1:b9:8b:46:37:f9:83:a2:cf:e6:9f:fa:e2:a3:b2:85:1b:
eb:e7:c6:5e:04:5a:1d:9f:57:67:aa:e0:58:5b:7e:14:0b:c6:
58:c0:fb:6a:55:cd:05:1a:63:be:dd:61:cc:79:2f:0c:03:07:
cc:12:5e:7b:0e:03:63:15:d5:d2:20:df:f0:3f:01:44:db:2b:
5f:9d:41:a5:8d:53:5c:a6:df:7c:cb:f8:d0:db:23:f2:89:c1:
8c:34:cb:57:2c:00:29:cc:01:e8:0a:d1:42:97:54:1d:6f:cd:
60:9c:92:c4:59:0a:d1:23:b4:ad:96:87:8c:9c:88:89:4f:92:
a5:2f:6c:b4:58:f8:1c:3f:b0:ed:43:6b:a1:1f:57:f2:5a:cd:
66:e4:4d:b5:b8:24:ca:f4:d2:80:f2:86:3f:cc:bd:28:e1:93:
eb:e3:35:b4:2f:b9:fe:82:42:85:b4:3f:0c:00:51:cc:9f:c9:
ba:b2:d5:53:fa:aa:f8:d0:fe:cb:4c:70:2e:ff:56:b0:0d:b2:
68:28:9a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org