Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ifkoG-JGo8tYM4_IslmYy2d4LJI.roa
File: ifkoG-JGo8tYM4_IslmYy2d4LJI.roa (raw, json)
Hash identifier: raicpkStqs2zUGb2T+xSBRDbnXZo/z1492Nv0xsP6JE=
Subject key identifier: 89:F9:28:1B:E2:46:A3:CB:58:33:8F:C8:B2:59:98:CB:67:78:2C:92
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E487759F310CD17A4AE2053D436C13BBB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ifkoG-JGo8tYM4_IslmYy2d4LJI.roa
Signing time: Sat 16 Mar 2024 18:12:45 +0000
ROA not before: Sat 16 Mar 2024 18:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:48:77:59:f3:10:cd:17:a4:ae:20:53:d4:36:c1:3b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 16 18:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89f9281be246a3cb58338fc8b25998cb67782c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:6e:6b:46:a4:85:88:1a:81:b9:d6:89:40:
2a:19:6d:2f:c8:d1:df:4c:15:56:ca:07:64:c5:40:
a5:5c:3d:e3:b4:40:46:30:3c:c8:73:14:6d:33:bf:
7d:04:b3:04:07:02:b7:66:48:4f:ba:4f:38:4a:44:
44:cf:c1:57:1c:42:0c:95:ae:02:7f:9d:70:19:f8:
6b:55:47:b6:9d:87:33:45:d2:dd:0e:ec:ae:92:57:
e4:59:32:2e:8d:0f:5c:9a:bb:cf:6e:6c:22:17:e8:
27:42:7c:5e:ec:79:c9:7c:45:38:8a:e5:c5:3c:8e:
01:22:59:cd:42:15:be:67:76:5a:78:df:bf:cf:74:
37:52:da:0a:da:61:45:a2:3a:02:c2:0c:f8:05:e9:
af:24:e2:bb:4c:6f:57:e7:43:e2:97:4e:33:20:1a:
5a:7c:69:e9:6a:7c:44:6f:97:59:83:c8:23:01:75:
b6:a9:40:30:6e:46:7a:e2:51:06:1b:ac:cc:49:61:
13:36:05:db:2a:b2:51:a6:99:8c:30:b3:12:ce:cf:
ed:a8:be:ce:21:c4:46:64:e0:3f:23:4b:92:c6:c7:
83:05:d2:c3:ea:af:58:43:8e:2c:4d:70:5c:c4:e3:
7c:78:cc:2b:63:03:8e:07:d5:92:29:e8:d5:e0:19:
99:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F9:28:1B:E2:46:A3:CB:58:33:8F:C8:B2:59:98:CB:67:78:2C:92
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ifkoG-JGo8tYM4_IslmYy2d4LJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:ee:26:8f:7d:21:4e:3b:66:f9:19:9a:7c:44:3b:7b:36:7b:
07:32:35:a1:77:c0:2b:c7:5f:e2:e2:99:6c:90:2e:8a:6b:9e:
1a:54:6f:77:99:a6:84:ea:e6:bf:b1:67:21:e7:0f:44:2c:34:
81:3b:82:04:28:a8:05:73:be:98:68:2c:84:42:4d:77:ca:6e:
cc:25:6d:41:f5:c3:5b:06:04:ef:c6:14:ed:c1:0e:e8:2a:85:
55:b3:44:84:e5:fb:df:3b:d9:62:94:fa:77:dd:70:25:f3:f7:
cd:d8:cb:ae:4d:80:2a:8e:25:c1:d2:db:6d:3b:2b:2f:08:b3:
98:61:1f:5b:d3:ba:89:18:50:de:13:d9:79:c7:e1:7a:7a:9a:
22:83:29:c7:75:04:49:7a:6b:8e:e4:51:13:75:cf:76:5d:e2:
e7:89:a4:22:7f:01:7d:4f:f8:ba:24:73:ad:d5:52:94:e0:61:
d0:e8:f1:87:fe:57:d9:63:d5:19:2b:6e:51:98:6b:1d:94:d5:
60:54:46:51:e6:d3:0a:e4:b9:b9:7f:1c:4e:6e:1f:dc:40:85:
f5:db:99:90:3c:f3:67:65:ea:d5:f9:a7:79:3d:05:81:3c:a0:
32:ff:47:ba:80:89:fa:0a:22:59:35:56:f6:9d:3a:e5:5e:79:
ec:60:d1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:51 2024 by rpki-client on console-ams.rpki-client.org