Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iaohT1E_Qia_X2AHkJOmDhXRJ_A.roa
File: iaohT1E_Qia_X2AHkJOmDhXRJ_A.roa (raw, json)
Hash identifier: mcAsPp/4Y63lr2ljFuXZwGsHuI/B4UqFHxtZwCPJGyA=
Subject key identifier: 89:AA:21:4F:51:3F:42:26:BF:5F:60:07:90:93:A6:0E:15:D1:27:F0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E9F26D1698F5E1B6A9E3C90605BE75D9E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iaohT1E_Qia_X2AHkJOmDhXRJ_A.roa
Signing time: Tue 02 Apr 2024 14:11:45 +0000
ROA not before: Tue 02 Apr 2024 14:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:26:d1:69:8f:5e:1b:6a:9e:3c:90:60:5b:e7:5d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 2 14:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89aa214f513f4226bf5f60079093a60e15d127f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:90:c7:cc:c5:63:1e:2e:ad:8f:5e:13:19:51:
23:22:4b:07:60:79:54:68:69:9a:f8:5c:60:ae:21:
c0:73:99:d0:90:eb:4a:b2:66:dd:a5:37:a4:e6:e0:
96:a8:55:b1:8e:f0:cd:d4:f0:df:85:4f:87:c9:8a:
a8:ee:e7:a0:7e:18:d2:23:35:89:7d:9f:42:90:71:
a0:62:77:c0:53:ae:78:d0:c7:d2:7c:0b:3c:24:e4:
7f:a3:0b:3d:bc:8c:26:4e:ee:42:60:27:d2:c6:35:
8d:62:d6:df:41:e8:b9:e7:98:f6:02:52:32:27:96:
6a:30:a8:51:da:82:f9:32:2c:e7:19:8a:9f:d7:67:
a7:e2:91:3e:41:2b:8a:65:bc:4c:7c:3e:43:98:93:
4a:f5:73:71:f2:89:5a:a0:c7:61:ee:ab:ad:7b:47:
4e:0a:8f:cc:ab:8e:c2:31:0a:69:07:ca:af:13:03:
7f:5c:49:bf:46:da:31:52:fc:c3:7e:37:0b:c5:a9:
dd:49:dd:ee:8c:02:4c:98:84:19:07:e3:61:c2:9a:
77:9a:a4:f2:32:2b:53:8f:04:e7:a0:f0:35:2e:6d:
b1:a8:f4:28:ae:cd:a2:80:5a:b5:b0:2c:0f:e8:5f:
3f:55:1e:d2:1e:79:d8:57:39:38:42:4d:84:21:32:
e7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AA:21:4F:51:3F:42:26:BF:5F:60:07:90:93:A6:0E:15:D1:27:F0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iaohT1E_Qia_X2AHkJOmDhXRJ_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:8f:00:76:ed:af:ab:a1:fb:ae:96:0c:89:0a:c7:b5:ec:85:
37:9e:0b:81:fb:5d:84:90:0a:c8:59:e0:4b:01:fc:de:8b:de:
68:5c:c6:42:4d:00:a6:ba:cc:46:16:94:a1:1d:4c:19:b3:07:
fd:96:28:06:95:b1:7e:4a:34:68:0e:9e:b8:d6:a4:73:d3:2f:
f8:5e:93:a0:50:e7:96:9a:15:0f:26:32:d0:e2:bc:f0:07:f4:
73:19:59:b2:96:ab:ca:1d:48:d1:55:8c:10:c9:65:7b:46:d1:
f5:fd:e0:a3:61:12:c8:57:e0:4c:9e:e2:19:ae:6f:30:9e:78:
d6:9d:23:8c:37:09:f6:6d:a0:3c:dd:f9:94:6a:07:c1:f4:68:
90:92:07:dc:fe:27:99:9b:b3:2d:3d:20:aa:f2:35:87:66:45:
85:79:d8:d5:29:ae:fe:02:0e:0a:06:b1:82:b7:0b:a0:81:65:
48:26:c2:da:bf:16:88:e7:f7:c4:6a:60:ed:2a:43:35:c8:4f:
ff:60:4c:05:ab:32:d9:de:85:fe:0f:02:67:b4:4f:bc:62:8e:
02:66:bc:35:3c:df:1f:eb:4c:54:77:49:2b:cb:d9:38:75:22:
67:71:0c:6f:25:50:13:bf:31:63:c9:fd:c3:b0:49:00:7b:a0:
e0:ad:46:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org