Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/i3E0h9P5fS6VQZAXgdLq0fqLhEM.roa
File: i3E0h9P5fS6VQZAXgdLq0fqLhEM.roa (raw, json)
Hash identifier: erw8pbqbsuuIXbvXr2/i+xW9U5V4xk0ARqt6fVraPQI=
Subject key identifier: 8B:71:34:87:D3:F9:7D:2E:95:41:90:17:81:D2:EA:D1:FA:8B:84:43
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E64249E5202630CDE85E2F39AA0329954
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/i3E0h9P5fS6VQZAXgdLq0fqLhEM.roa
Signing time: Fri 22 Mar 2024 03:11:45 +0000
ROA not before: Fri 22 Mar 2024 03:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:64:24:9e:52:02:63:0c:de:85:e2:f3:9a:a0:32:99:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 22 03:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b713487d3f97d2e9541901781d2ead1fa8b8443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e7:ae:2b:90:c1:8f:12:db:52:d6:91:65:a2:
64:c5:e0:15:2a:6f:ff:8a:3b:7b:aa:c2:2f:51:86:
d6:61:ed:97:97:47:77:86:43:3a:0c:4d:ea:09:cb:
b2:0f:ea:74:89:5a:57:f7:b2:a0:4a:9d:b3:fb:a3:
0d:62:fd:b8:82:f7:cd:13:70:64:05:e7:32:c3:d9:
a2:6e:8d:13:48:80:55:a8:3f:68:6d:b3:ec:2f:1b:
a1:75:7d:94:9b:52:ed:b9:c9:98:c1:b0:fc:00:e8:
b2:fe:99:b1:65:af:a8:50:31:4e:59:c9:4c:53:ab:
ee:60:13:0e:17:67:8e:50:42:2f:7d:af:36:42:b1:
3f:88:e8:f6:33:ee:d3:df:dc:d1:30:7b:0b:06:76:
69:2f:99:96:22:17:26:f3:66:82:6a:f6:09:16:f7:
d3:6c:c0:7c:02:0c:3b:87:93:2e:74:7c:93:ec:9d:
42:d9:c7:53:8e:1f:73:87:7c:b7:79:e3:35:b3:e5:
39:2a:e6:46:62:24:f0:20:c9:6c:3d:80:0d:ab:be:
e6:15:a3:02:88:20:60:e4:d8:2a:08:0d:ef:26:55:
54:d4:4f:2f:19:69:d6:c8:9d:ca:de:4c:58:b0:18:
eb:30:b8:b8:78:b2:b3:65:8f:52:83:d4:72:14:bb:
0b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:71:34:87:D3:F9:7D:2E:95:41:90:17:81:D2:EA:D1:FA:8B:84:43
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/i3E0h9P5fS6VQZAXgdLq0fqLhEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:63:18:9d:2a:74:7d:28:55:8e:3a:24:63:ab:91:c9:32:b3:
b2:76:92:2c:4e:aa:0d:ed:65:63:2c:bc:ab:41:d1:e8:c4:8f:
0d:16:ab:8f:b7:04:8b:06:03:c6:e9:ea:c0:25:8e:bc:7a:a6:
a6:76:08:54:4b:d2:3e:c1:f6:32:2d:5b:f3:bf:5a:95:03:aa:
d7:bb:2c:5a:2c:d8:1e:3d:03:77:58:be:77:f7:f3:a1:d4:dd:
ff:ee:89:83:91:50:e1:27:70:13:43:be:c5:bb:0f:61:91:0a:
18:d8:67:a3:19:9f:ee:2c:39:9e:23:6f:cd:61:05:60:0a:84:
c9:d8:85:54:f0:86:a0:38:b9:6f:5a:c4:a5:df:a1:27:2a:6c:
19:aa:ec:5d:35:a1:93:4e:fe:00:be:32:3d:dd:85:65:13:3b:
4a:20:0d:45:60:e4:1b:8d:61:e4:17:69:c7:3c:c0:cf:75:e5:
0c:ca:32:f4:2d:ec:87:e2:48:e2:49:dd:1d:e7:2c:77:5d:b2:
63:a7:77:4a:34:2e:55:11:f8:93:c2:c1:39:28:1a:9c:eb:24:
7f:4f:e8:ef:4d:bf:9f:23:5c:a6:cc:6f:84:e5:d3:89:03:0b:
76:0d:0e:5b:e9:04:8e:a6:8c:bb:08:7e:98:5a:04:35:a6:a1:
f5:27:00:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org