Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iay3L-YDdIJsbDG8gfvL9KbKZQA.roa
File: iay3L-YDdIJsbDG8gfvL9KbKZQA.roa (raw, json)
Hash identifier: 0LQ5aX7UBwD66PJkyYeHn0xyIhFmKhsnmFhZG4fBeyY=
Subject key identifier: 89:AC:B7:2F:E6:03:74:82:6C:6C:31:BC:81:FB:CB:F4:A6:CA:65:00
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D4841FA7A5DF14E25D3FDFC76C3DFA5A9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iay3L-YDdIJsbDG8gfvL9KbKZQA.roa
Signing time: Sat 27 Jan 2024 00:11:39 +0000
ROA not before: Sat 27 Jan 2024 00:11:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:48:41:fa:7a:5d:f1:4e:25:d3:fd:fc:76:c3:df:a5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 27 00:11:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89acb72fe60374826c6c31bc81fbcbf4a6ca6500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:4b:da:8e:7e:9d:38:19:8a:7f:a3:a0:66:
c5:9c:ae:94:87:a4:ab:78:3b:ef:b7:93:ac:c2:c5:
cb:e3:55:e3:38:13:43:81:d8:90:f6:92:1b:1a:fc:
4d:d5:41:ef:9c:51:1e:bd:48:c8:66:05:29:15:6b:
db:64:8a:37:c1:73:3d:53:8d:70:b2:11:da:5d:aa:
7b:40:55:bc:e2:ea:7d:62:08:3d:92:1e:03:80:45:
a9:f1:e5:40:fc:b9:81:10:48:2b:9b:b9:9b:5c:e7:
bc:e7:18:2a:ec:a5:2c:16:8d:ed:33:02:41:fb:e1:
ae:60:c5:af:83:98:de:f8:b2:b6:e4:bd:34:57:a5:
c7:3d:cc:0a:63:32:a4:8a:ad:a9:75:1e:12:f0:8a:
34:a4:8d:19:a4:70:67:63:bc:6c:e2:3d:2c:28:2a:
da:3e:99:a6:91:00:19:59:47:52:b8:82:25:55:c4:
ab:3b:51:23:cb:eb:e3:48:94:c1:b3:47:ff:15:f3:
6a:1b:8b:ac:68:c3:bf:84:c7:40:ec:7f:f6:d2:80:
49:e4:09:1f:fd:7f:7e:06:e2:0c:ee:8f:3c:7a:9f:
29:f6:d4:85:01:9e:7f:81:86:28:32:7c:e8:dd:d7:
e8:0f:c8:03:fa:01:4e:6a:f2:f0:3b:92:e5:d5:9f:
c3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AC:B7:2F:E6:03:74:82:6C:6C:31:BC:81:FB:CB:F4:A6:CA:65:00
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iay3L-YDdIJsbDG8gfvL9KbKZQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:ec:c5:0d:f2:0c:7c:5a:e1:6a:cc:c4:24:60:0b:e7:f5:ed:
67:55:85:b5:06:1b:a6:55:ba:75:ce:70:30:51:ab:e8:8b:88:
5c:c7:33:88:9b:09:f1:70:58:ca:1e:45:93:1f:ca:2b:53:d6:
3c:d3:0a:bf:07:8d:59:ba:e4:a8:5a:ae:fe:f8:37:46:c1:49:
8b:97:93:93:e8:4d:cc:42:dd:ee:46:1e:f0:ae:00:9c:23:38:
19:a7:51:ae:05:36:e7:51:cc:d2:10:89:bd:65:58:64:3f:fb:
9f:a2:32:4e:c0:6b:6c:84:0a:ca:e1:dd:76:eb:61:56:f4:9b:
ac:35:4e:0d:b5:38:e2:53:5d:ca:8f:a0:6e:9a:42:68:3f:e2:
cc:fb:8c:89:de:32:03:19:a3:6d:41:60:99:85:4a:69:95:d1:
b8:b7:c9:9d:14:a9:73:06:8a:6b:2d:c1:f8:01:ae:db:c5:88:
1d:27:a4:fe:07:fb:bc:d3:88:cf:f2:9c:20:e4:e3:bc:eb:aa:
4d:03:db:fc:c9:8e:41:45:30:f3:3c:b4:12:4c:84:25:bd:a5:
cb:27:1c:30:b3:54:98:40:e2:c4:45:00:b9:ef:5b:5f:ac:c5:
a5:0a:2a:15:a1:dc:73:25:3a:1d:96:5b:c8:cc:9e:5f:d5:20:
60:cc:e7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:51 2024 by rpki-client on console-ams.rpki-client.org