Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gNyqIu96gjkLlhtJfDCY4OAiszs.roa
File: gNyqIu96gjkLlhtJfDCY4OAiszs.roa (raw, json)
Hash identifier: itS8cLvk2L+yo7CM8L+lxiFRDrsewGuCnT6lhVP0ybw=
Subject key identifier: 80:DC:AA:22:EF:7A:82:39:0B:96:1B:49:7C:30:98:E0:E0:22:B3:3B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA25DB15A242D8BDF6DF929712C06004D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gNyqIu96gjkLlhtJfDCY4OAiszs.roa
Signing time: Mon 25 Dec 2023 19:04:58 +0000
ROA not before: Mon 25 Dec 2023 19:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:a25c:f01d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a2:5d:b1:5a:24:2d:8b:df:6d:f9:29:71:2c:06:00:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 25 19:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80dcaa22ef7a82390b961b497c3098e0e022b33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:90:5d:d7:2b:96:09:87:64:80:30:b3:19:
11:cb:ef:92:2c:67:00:ac:55:17:18:f6:1b:a9:5a:
5a:c7:45:49:fa:84:65:9e:61:61:cf:85:4b:19:6e:
75:e0:51:07:4d:8c:00:7d:a1:f5:b8:cd:31:86:62:
39:89:1d:58:43:35:56:9b:24:05:60:81:9e:27:17:
57:b8:0b:d3:0a:33:6b:fd:ff:eb:d5:45:cb:63:ac:
26:a6:4a:a3:7c:4a:78:42:d9:86:ad:60:86:69:eb:
22:a0:90:cf:ab:34:f6:dd:2d:27:9d:e1:b4:9a:72:
09:50:a5:c7:4c:f1:a9:41:0a:eb:27:55:6a:90:a2:
8d:a0:bf:c3:8e:15:09:b8:2a:f8:f8:7a:f6:83:d4:
69:7d:29:e0:5f:e0:b9:87:6c:e9:cc:c8:b0:87:d6:
12:14:58:c0:80:f5:52:b6:f8:dd:f0:53:b0:28:46:
c4:25:af:b4:c9:6a:49:2f:aa:4b:68:e7:a3:75:9f:
5a:04:00:6a:b2:ce:0d:a8:e9:21:d2:36:ac:ac:d5:
80:24:b6:9e:35:93:b5:ce:6c:de:15:27:9f:c4:e8:
76:58:71:d6:c0:0a:13:06:1e:ba:06:1f:1c:8e:cd:
c0:f3:46:06:ce:66:a6:4e:0f:3e:7a:a0:76:c8:10:
8e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DC:AA:22:EF:7A:82:39:0B:96:1B:49:7C:30:98:E0:E0:22:B3:3B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gNyqIu96gjkLlhtJfDCY4OAiszs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:59:2e:f3:68:84:7a:94:2a:ac:59:91:9c:8b:00:16:9f:d5:
05:e2:c2:bc:35:37:b2:01:c1:f3:31:00:07:71:93:90:7d:be:
29:a7:46:2f:b5:51:fa:25:39:8c:8a:4c:38:5e:93:ad:0d:d1:
c9:d8:d3:ee:5a:9f:f0:08:a6:54:b7:4f:ba:6e:0a:55:b4:1a:
c1:93:7a:41:17:16:cf:6d:e4:d5:6c:94:2f:7d:ed:79:fc:bb:
0d:f9:4f:e4:40:1e:73:de:3e:02:99:56:8c:47:48:4d:34:32:
f3:cd:64:dc:80:33:b6:fd:38:a2:9a:4b:8d:58:89:6f:40:dd:
46:0f:fb:64:cc:48:db:e7:b0:29:8a:8b:90:69:e7:62:95:67:
50:50:1b:bc:b7:6b:b7:a2:98:da:ca:f6:66:e6:15:27:1d:d5:
46:58:73:39:80:77:42:97:11:6f:7e:06:bb:60:3b:50:21:99:
7c:f1:90:ef:16:3b:23:1c:63:4f:93:bf:48:6c:98:00:cf:e0:
c0:e3:9d:e4:43:0d:86:0a:b8:41:74:58:f3:46:5d:3f:cd:75:
25:47:52:0f:f9:c8:3e:a3:81:be:63:75:cd:c8:a0:aa:60:81:
56:2f:83:b1:d9:e1:0a:0a:39:86:16:c5:9d:78:7e:0f:d1:1b:
28:f4:0c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:51 2024 by rpki-client on console-ams.rpki-client.org