Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fsi2BeUDrJx652ZZTdoUZqVqr7g.roa
File: fsi2BeUDrJx652ZZTdoUZqVqr7g.roa (raw, json)
Hash identifier: VPsxJZU4w8XxPAP3LbttD81h2dJIQL1ExNAuuI/AC3s=
Subject key identifier: 7E:C8:B6:05:E5:03:AC:9C:7A:E7:66:59:4D:DA:14:66:A5:6A:AF:B8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DC51D8262B156A7901C247750CEC98261
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fsi2BeUDrJx652ZZTdoUZqVqr7g.roa
Signing time: Tue 20 Feb 2024 06:04:21 +0000
ROA not before: Tue 20 Feb 2024 06:04:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:c51d:58af/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:1d:82:62:b1:56:a7:90:1c:24:77:50:ce:c9:82:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 20 06:04:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ec8b605e503ac9c7ae766594dda1466a56aafb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:0f:8c:c1:72:90:2b:7b:c0:f5:00:a1:eb:
84:0b:cb:6d:03:2d:8d:2b:5a:d3:bb:3d:cb:60:c6:
6b:82:b1:46:d2:67:78:06:45:a2:0e:85:57:3b:32:
77:2e:c6:23:41:4b:2f:4b:ec:71:20:0e:4a:4a:0f:
73:0b:fc:7a:5e:e6:05:39:a8:50:46:ff:d5:2d:e5:
92:87:1a:14:ed:38:b7:3c:36:e8:b7:73:ff:b2:0e:
2d:0a:fe:e9:5c:7f:b3:f4:a1:10:91:9b:18:ae:12:
0b:52:3c:4a:1b:f5:77:ec:68:71:1e:21:0d:28:fe:
d9:bc:6d:13:33:40:15:d5:a2:59:7f:6b:41:9d:58:
09:ae:2f:b9:b2:d7:66:94:df:dc:ff:34:50:6c:6d:
34:82:eb:6c:27:1d:bb:3f:b8:ed:38:22:5e:3a:a8:
27:46:66:95:d9:84:2d:92:25:10:c8:4e:99:19:6d:
36:1a:0f:18:43:1e:7b:de:3a:ac:ed:1f:c4:75:6c:
2b:50:99:57:4e:a8:73:14:f8:e6:70:9c:c4:48:06:
f7:36:8c:b3:40:d5:50:fc:93:c6:fe:87:06:cc:c3:
62:65:64:36:2b:b6:e5:c2:a0:35:50:13:78:86:f1:
d1:b6:3a:f1:15:a3:f0:37:ac:a0:e0:20:51:5e:66:
5c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C8:B6:05:E5:03:AC:9C:7A:E7:66:59:4D:DA:14:66:A5:6A:AF:B8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fsi2BeUDrJx652ZZTdoUZqVqr7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:20:86:3b:65:ae:96:22:94:38:1e:41:62:99:d4:fe:ca:b9:
8e:cd:dc:da:32:e0:4c:0d:d5:5b:a7:dc:52:a5:96:76:8a:8e:
6a:bf:dd:2c:93:76:ff:f1:5e:db:12:8d:de:92:e9:32:1e:06:
9b:34:63:e0:bd:59:93:5a:c6:d9:3f:b2:67:0c:2e:e8:54:0f:
80:36:bc:be:ac:b5:18:76:b0:44:8e:9e:c2:25:ef:cb:06:e6:
4e:8c:81:24:d9:95:10:56:f9:3b:5f:73:bd:47:a0:2b:2b:fd:
e8:c0:ca:69:88:0a:78:e2:92:5a:e7:1c:a0:3a:25:98:05:53:
fc:5c:bd:73:04:a4:cc:a1:82:6b:f5:1e:94:21:3b:76:0c:53:
5e:49:c1:ec:4e:b6:19:8e:07:ed:cc:f9:6c:bb:f8:a5:d4:c3:
0d:2b:dd:85:70:e0:c5:ce:8c:67:9c:b8:b4:61:25:3a:a6:7f:
8c:87:63:77:76:f5:9a:35:27:b0:fb:c3:7a:99:58:50:c7:1f:
49:dd:a1:47:9b:b9:8d:77:33:eb:24:5e:26:c3:29:5b:16:a6:
50:36:d2:d6:dd:b7:b0:2c:27:c2:0a:70:ae:7d:1c:6d:43:b5:
6d:87:78:10:02:d1:2d:98:05:67:cf:57:3e:6e:43:4f:8a:b8:
d8:03:e9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org