Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/g1LKXythXv3CXZoC0GrR79MRsgI.roa
File: g1LKXythXv3CXZoC0GrR79MRsgI.roa (raw, json)
Hash identifier: dV7YvXupL6t/CJ1p7z3hNxnArRW6w7FqqX4/uzJEDdI=
Subject key identifier: 83:52:CA:5F:2B:61:5E:FD:C2:5D:9A:02:D0:6A:D1:EF:D3:11:B2:02
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D67CC915231E6EDDE737487B55C54ECCF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/g1LKXythXv3CXZoC0GrR79MRsgI.roa
Signing time: Fri 02 Feb 2024 03:11:16 +0000
ROA not before: Fri 02 Feb 2024 03:11:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:67:cc:91:52:31:e6:ed:de:73:74:87:b5:5c:54:ec:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 2 03:11:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8352ca5f2b615efdc25d9a02d06ad1efd311b202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:17:78:c7:cd:61:6e:c5:42:68:26:43:b4:f9:
91:07:93:fa:ac:d0:25:b5:95:19:86:c0:2b:67:a3:
7d:ec:bb:62:26:a1:3b:b6:ff:69:60:e3:2a:61:77:
e8:eb:60:ab:af:d7:0d:7a:88:d7:14:5b:cf:1b:5a:
d0:21:b8:7d:4a:f7:be:d1:1a:ec:a7:a6:c4:6b:81:
69:6d:e7:51:65:40:54:b2:a6:22:88:b1:46:2a:e3:
c4:93:1a:40:25:fc:ae:8e:14:b3:ce:e5:1b:cb:38:
9b:2c:98:5f:f2:8d:f6:42:d8:47:17:ae:77:46:72:
9f:06:79:06:54:86:85:45:1a:9f:ef:57:5b:f9:c1:
aa:78:b3:ae:33:39:d0:09:83:8b:fb:e8:e3:1b:8a:
a3:62:b0:d1:9d:ab:73:64:c5:29:4f:3a:ca:7d:5b:
18:41:e7:77:a2:b8:08:a5:89:63:be:71:22:51:33:
f0:a9:85:d1:9e:ad:58:64:40:06:40:b2:e7:32:26:
a9:1e:a4:f2:43:6b:ae:f4:19:a6:81:53:c8:ae:21:
0c:dc:84:51:90:19:da:96:e1:f5:3d:a5:72:87:8f:
20:e6:21:cf:48:90:98:06:ac:44:9f:8d:87:7d:d1:
63:65:02:d7:7b:af:a3:50:2a:2b:7e:9f:45:02:fd:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:52:CA:5F:2B:61:5E:FD:C2:5D:9A:02:D0:6A:D1:EF:D3:11:B2:02
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/g1LKXythXv3CXZoC0GrR79MRsgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:58:97:ca:64:d0:54:76:78:e7:40:61:9e:07:68:f6:2e:a9:
19:e7:86:31:05:3c:0d:c4:2d:ea:94:90:43:9c:48:8e:d3:2a:
2a:e6:65:fd:3d:94:1e:c0:65:8c:85:37:1c:f3:44:5e:6e:0b:
a8:cb:8d:46:3e:cf:dd:a8:4f:f0:e7:0a:a1:67:b1:2a:af:2a:
fd:28:78:6a:37:42:a4:b1:dd:3c:ab:c7:08:ff:87:87:b6:b0:
19:5a:2c:f0:d4:15:e5:31:77:4e:68:8d:ea:81:c4:80:76:ff:
7b:77:a8:db:79:17:15:17:ac:11:bd:09:29:1c:90:5e:02:07:
e7:42:20:4b:3f:07:0a:39:01:69:9a:1a:35:75:e8:2c:79:00:
03:ef:2a:c8:fb:75:3f:3f:05:70:a9:c6:49:af:cf:05:f6:ce:
d6:db:5e:3c:b8:5b:a4:06:f6:7c:ef:9a:67:2a:da:e9:70:74:
d6:46:d6:5e:39:c9:20:f4:96:de:cd:03:d1:9c:37:5b:f9:9c:
43:79:1c:f8:11:88:1d:a7:45:c8:52:1a:e4:d5:a5:96:1f:7c:
eb:e2:16:fd:8c:d5:66:f7:6b:69:e5:20:c5:ab:d6:0c:6c:72:
41:37:32:ef:40:a2:99:f6:27:b0:4e:8b:a0:86:ff:c1:74:dc:
f3:58:b9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:51 2024 by rpki-client on console-ams.rpki-client.org