Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fmqd_0Lnu7aKuOAYQH7tl0E4cfg.roa
File: fmqd_0Lnu7aKuOAYQH7tl0E4cfg.roa (raw, json)
Hash identifier: Ee8cYr91e9RuiKWG5v9gA/UyUctclJ9LO5OqkDAbNsE=
Subject key identifier: 7E:6A:9D:FF:42:E7:BB:B6:8A:B8:E0:18:40:7E:ED:97:41:38:71:F8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E62DB06D1DB79BCD26FE86C982C74874F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fmqd_0Lnu7aKuOAYQH7tl0E4cfg.roa
Signing time: Thu 21 Mar 2024 21:11:45 +0000
ROA not before: Thu 21 Mar 2024 21:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:62:db:06:d1:db:79:bc:d2:6f:e8:6c:98:2c:74:87:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 21 21:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e6a9dff42e7bbb68ab8e018407eed97413871f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1d:bf:a6:e7:99:e9:4c:e2:1d:f9:d9:2a:64:
86:d5:88:41:ca:a8:45:e2:57:b5:39:2c:ad:8e:db:
80:3d:55:b9:25:21:5a:a2:0a:4b:0e:a8:ee:7a:27:
8b:37:7a:f7:3e:47:92:19:1a:82:87:4f:ce:48:8e:
62:b5:6e:b0:19:95:7a:0d:a5:d1:00:01:45:47:ec:
3a:42:5a:34:78:fa:25:db:90:dc:66:4b:70:e2:a9:
48:5c:44:7d:75:d7:59:5b:38:a0:97:55:2f:13:9e:
df:28:77:c2:1c:e6:83:af:95:4c:79:61:df:47:5d:
40:89:28:87:46:91:df:53:fc:ff:c2:6a:37:36:be:
73:bd:0e:91:a2:89:8f:48:5b:70:4f:31:3c:58:f2:
d9:4c:65:34:23:3e:ae:ee:53:ba:1e:78:c0:43:19:
12:ae:22:10:68:1e:b9:a2:87:d5:fe:18:56:0b:5a:
50:57:5f:09:2e:f3:9e:9a:54:b6:49:7b:6b:d6:9b:
e8:c5:1a:08:66:c5:7b:34:9d:3a:1a:d2:4d:83:92:
46:d2:3b:3c:80:c4:00:3d:9f:ff:94:d2:5f:84:ca:
a2:7e:b7:3a:c8:c6:39:72:4e:ac:ab:2b:72:ff:44:
46:28:b8:32:41:2d:97:66:d5:52:fa:3a:2d:76:93:
7f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6A:9D:FF:42:E7:BB:B6:8A:B8:E0:18:40:7E:ED:97:41:38:71:F8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fmqd_0Lnu7aKuOAYQH7tl0E4cfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:d1:70:1c:a2:3d:ea:a0:c3:76:cc:3e:e9:21:11:be:12:ea:
a8:b4:19:55:44:d8:3a:2e:84:a3:f3:a1:08:98:6c:11:94:26:
b7:14:a4:d8:cc:e7:78:79:38:4f:0b:bc:dc:3a:35:8d:d5:7f:
4c:fd:25:5a:70:b2:03:db:b8:28:b2:5b:f3:78:4b:fb:66:f7:
b1:cf:c8:85:ab:69:1f:a9:83:1d:20:ba:d0:e4:09:de:26:42:
45:85:68:bd:51:a0:0e:ed:09:ea:bd:75:4a:d1:19:d7:af:5a:
00:8b:64:a2:91:da:1c:f4:89:55:72:be:d6:3e:3a:25:48:04:
60:19:1f:69:86:f7:af:bb:d5:fd:8e:dc:15:3e:9d:b9:91:f5:
e3:35:dc:29:07:c7:03:8a:40:66:83:d2:13:52:04:b6:d2:20:
97:03:71:b7:e3:be:67:50:3b:85:02:70:5d:66:67:ba:a3:e9:
b0:47:03:97:aa:58:58:68:52:fe:f8:be:91:87:87:4d:66:1f:
1b:f4:8f:23:b6:a9:c9:99:40:e2:d6:8f:d5:f5:69:7a:86:7c:
02:fe:b9:e2:73:39:81:4e:79:c6:95:55:4b:11:b9:19:48:56:
e2:3a:63:e7:a7:b8:e1:a1:65:d0:87:8d:90:ec:f7:cf:80:27:
b4:36:97:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org