Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gZyh5GyVEbBliypIrGRHTXfvqhM.roa
File: gZyh5GyVEbBliypIrGRHTXfvqhM.roa (raw, json)
Hash identifier: 0N6Iu8K/cqTU635ulcO+5Xtqhc2wIlu0i7JhuY/sjXE=
Subject key identifier: 81:9C:A1:E4:6C:95:11:B0:65:8B:2A:48:AC:64:47:4D:77:EF:AA:13
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EA74E381425D29F4DFACE93114CB322CD
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gZyh5GyVEbBliypIrGRHTXfvqhM.roa
Signing time: Thu 04 Apr 2024 04:11:44 +0000
ROA not before: Thu 04 Apr 2024 04:11:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a7:4e:38:14:25:d2:9f:4d:fa:ce:93:11:4c:b3:22:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 4 04:11:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=819ca1e46c9511b0658b2a48ac64474d77efaa13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:e8:73:57:19:22:8a:a2:90:e6:ce:44:2f:
09:94:5e:dd:dc:95:74:ce:21:3c:9c:3f:d1:b2:08:
d2:78:aa:2e:91:ab:6b:3f:17:b6:e7:c8:b4:62:4f:
48:a4:a0:97:1f:7f:55:bc:be:93:df:dd:ac:0d:fe:
9d:ba:93:9f:55:7c:52:75:67:5c:d5:63:38:42:e0:
63:15:17:65:f9:f8:3b:4a:00:44:60:77:1d:9e:41:
19:23:67:b6:df:cf:5f:f0:f7:a8:30:d8:fe:8b:ec:
0e:69:6a:f1:41:e5:ad:db:b8:ad:f0:fc:e0:55:c8:
d2:ec:58:64:8c:e0:6a:15:e4:15:e6:e7:e5:d5:f1:
d6:3d:cf:5c:ab:06:e9:0c:d2:c5:7a:a3:3a:cb:18:
71:f3:ed:47:22:c3:f5:aa:b7:7b:35:53:c6:ef:6c:
0c:48:f4:f6:91:58:79:05:6b:3e:c3:f4:28:1a:f7:
d7:fb:10:a0:e2:f0:6d:1c:19:cf:91:d2:03:28:c7:
59:cf:70:3c:4e:45:61:f3:25:55:2b:93:f8:ac:46:
fe:41:82:06:68:14:3d:e2:2b:3a:8f:12:22:6f:cd:
c0:b9:78:99:e8:1e:f2:47:16:90:11:f9:3d:1e:d6:
05:10:1b:5e:3b:1a:2e:58:63:7c:93:d3:3e:2b:24:
f4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9C:A1:E4:6C:95:11:B0:65:8B:2A:48:AC:64:47:4D:77:EF:AA:13
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gZyh5GyVEbBliypIrGRHTXfvqhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:ed:4c:cc:80:6f:2c:cd:4d:4f:32:f1:22:45:31:90:47:ac:
9b:ed:17:95:58:ce:4f:48:50:d5:23:42:00:71:db:af:93:bb:
c7:13:84:4c:aa:ad:f5:49:58:b2:a5:6a:56:fa:9b:8d:e9:ea:
2f:57:64:a1:67:35:09:91:28:55:cb:0f:d4:86:3f:07:16:42:
13:de:df:06:8f:43:8e:21:b1:f6:21:8a:2e:55:1d:ad:3d:ed:
78:f9:60:17:5b:ec:73:c2:59:73:82:d5:c1:f0:ac:56:88:56:
aa:f8:c5:92:5b:da:ca:63:99:38:30:5f:da:0a:aa:f2:f8:b5:
ce:3b:19:1e:33:44:e5:c7:07:10:99:8d:cd:6e:0b:79:1f:d3:
dc:04:f8:8d:e8:11:80:06:3b:7e:ba:a3:f6:07:0a:0d:4b:d3:
16:ad:19:e4:f5:5a:b4:34:55:f4:30:31:65:97:19:5d:fe:06:
97:f7:0a:ca:c7:9c:d6:07:6f:b4:fa:7d:20:1b:b7:3b:8f:0b:
1a:8d:7c:76:01:32:cc:ab:3d:2b:2f:9c:46:5a:b3:17:f6:3a:
7b:fa:78:cf:82:00:01:81:ad:d9:0b:f1:ec:4b:d3:4a:0b:f5:
79:b9:98:9c:13:55:04:3c:f2:6a:89:8a:7a:f0:d1:24:a2:b4:
61:55:08:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:51 2024 by rpki-client on console-ams.rpki-client.org