Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/h-2-zrKtpYt9friz4-KyUUcQgf4.roa
File: h-2-zrKtpYt9friz4-KyUUcQgf4.roa (raw, json)
Hash identifier: R1/I6eI976/ACVN08T6TOltg47TmzRN8rQXnU2Bn/Kc=
Subject key identifier: 87:ED:BE:CE:B2:AD:A5:8B:7D:7E:B8:B3:E3:E2:B2:51:47:10:81:FE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EE4E3F04124117DC03FA37365AEB38438
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/h-2-zrKtpYt9friz4-KyUUcQgf4.roa
Signing time: Tue 16 Apr 2024 03:12:07 +0000
ROA not before: Tue 16 Apr 2024 03:12:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e4:e3:f0:41:24:11:7d:c0:3f:a3:73:65:ae:b3:84:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 16 03:12:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87edbeceb2ada58b7d7eb8b3e3e2b251471081fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:45:8c:a0:89:d9:7e:fe:90:27:34:3b:9b:
0e:31:77:94:6c:50:7c:59:9b:78:c4:b6:a3:8d:c6:
47:62:03:86:32:b0:fe:a8:f2:2b:bd:58:da:06:9f:
22:fc:a9:02:2e:53:a1:f2:33:65:16:72:e0:e1:46:
37:17:bb:f8:21:d2:72:fc:89:fe:51:b0:87:fd:06:
d3:2a:97:98:2b:80:66:83:8b:23:fd:ce:c1:41:af:
d4:5f:d8:b3:46:bc:e6:45:36:ef:74:90:17:15:70:
f8:2a:e0:21:7e:30:d7:50:46:65:ca:8f:fa:e1:36:
88:6a:0b:21:42:93:93:ce:03:2a:ac:92:fe:84:94:
c7:98:2c:0e:91:7b:d3:2e:7e:b6:85:e4:e1:06:96:
bf:10:b4:fa:c9:06:50:6e:e3:5d:e0:24:5b:1b:e1:
49:1f:c7:e3:ae:80:8d:7c:f5:cd:70:ae:25:3e:55:
61:89:e8:46:2e:3d:80:d3:8d:89:0f:b0:de:17:28:
a3:57:43:03:0f:5f:45:ff:21:01:00:b0:88:8e:93:
fe:26:7a:f5:ea:14:d9:90:ca:10:3e:55:1a:d2:f0:
b2:0f:c2:91:43:d1:7f:37:68:16:14:a4:7e:f9:36:
33:c2:c1:78:3f:a5:59:cf:eb:05:8b:21:38:ed:10:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:ED:BE:CE:B2:AD:A5:8B:7D:7E:B8:B3:E3:E2:B2:51:47:10:81:FE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/h-2-zrKtpYt9friz4-KyUUcQgf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:4a:cd:27:d5:0a:e2:93:17:db:dd:91:fe:9e:90:6c:ae:62:
2e:09:f3:13:ce:36:cd:6d:99:f7:79:65:d6:bb:7f:22:b0:67:
8a:73:4c:59:ac:4c:8b:43:60:8b:c8:ba:7e:a0:02:cf:3a:5c:
4f:ba:a3:ce:51:ce:cc:fb:73:9a:80:69:33:16:7a:ba:8d:c2:
0e:7f:66:29:90:8d:73:79:3c:bc:36:01:7b:46:7e:b1:bd:06:
5e:a3:a2:ae:bb:63:67:71:c0:1c:b7:c9:0a:ea:67:82:fa:3f:
60:4a:1a:ed:84:7c:71:57:8b:36:3a:73:99:2a:2c:13:a4:5e:
44:f7:36:83:c1:0e:f9:38:c9:5a:98:9f:c3:c4:7e:35:1a:b2:
3f:d4:80:22:a2:c8:b5:87:b0:fb:17:80:5a:41:6d:22:df:bb:
3f:94:ea:01:8e:76:11:81:44:95:be:a9:6d:b1:6c:f4:01:17:
e4:46:0b:72:bb:dc:c5:ac:0b:93:d6:60:43:b6:2a:cd:38:95:
d1:cf:1e:44:3e:ae:69:f8:73:3c:88:45:5a:35:e9:57:c2:59:
d8:7a:62:df:9b:ce:04:49:49:3c:91:de:ef:45:b5:2e:9f:17:
8c:44:5c:18:b9:f1:96:9b:19:a1:7c:3b:bb:9a:3c:46:a2:08:
d6:b9:f1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org