Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/j4Nq6TahlhnMoJOEBi2IBvq41cE.roa
File: j4Nq6TahlhnMoJOEBi2IBvq41cE.roa (raw, json)
Hash identifier: zw110eRKEtFmBjWa7zFKSEwffIcVcK7N6+j+UaSpa1w=
Subject key identifier: 8F:83:6A:E9:36:A1:96:19:CC:A0:93:84:06:2D:88:06:FA:B8:D5:C1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DA0E67F8F803E86EDF73965FD5D25AFC3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/j4Nq6TahlhnMoJOEBi2IBvq41cE.roa
Signing time: Tue 13 Feb 2024 05:17:56 +0000
ROA not before: Tue 13 Feb 2024 05:17:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a0:e6:7f:8f:80:3e:86:ed:f7:39:65:fd:5d:25:af:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 13 05:17:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f836ae936a19619cca09384062d8806fab8d5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7e:f5:a4:e6:42:91:71:4a:56:85:9a:6d:19:
90:5a:a2:b3:db:af:60:89:e7:71:75:0a:18:be:95:
f3:22:a1:62:0c:9e:13:2a:83:de:72:64:85:83:9a:
cb:b5:32:e3:77:73:83:b9:f4:1a:2c:45:92:da:fe:
e3:19:87:d5:d0:76:92:a5:f6:3c:60:50:12:67:f0:
78:64:53:43:be:30:43:a4:55:ee:4c:48:63:dc:eb:
31:be:d1:8e:b5:c1:51:7e:8e:36:f3:e1:e9:a3:f3:
e3:ae:29:4f:0a:65:c8:36:fe:98:92:29:71:aa:8f:
4e:0b:93:ac:49:b3:05:11:2f:d8:03:3a:8c:d0:f0:
59:6d:b7:6f:1b:4e:2d:90:e9:9a:f3:03:bc:50:b4:
59:60:56:3f:29:b1:bb:ef:6b:75:ee:bd:0e:8a:2b:
ec:6b:0b:22:68:da:88:15:9d:7c:ea:33:4d:24:31:
d5:93:13:15:43:2e:d1:8a:84:a4:82:d0:06:db:78:
35:73:a4:8d:a2:3f:88:cd:19:6f:c1:72:5b:ee:5d:
c6:94:69:80:3f:ba:92:7e:8a:dd:96:7c:b0:a3:4a:
0e:11:98:79:31:3f:64:13:1e:01:d5:4d:89:90:e8:
aa:23:31:36:c6:0e:1e:a4:b5:10:51:8f:ea:cd:17:
48:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:83:6A:E9:36:A1:96:19:CC:A0:93:84:06:2D:88:06:FA:B8:D5:C1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/j4Nq6TahlhnMoJOEBi2IBvq41cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:c2:55:5c:bc:ac:40:cf:d2:7f:01:af:cd:35:35:db:08:68:
fa:f9:c3:e4:bd:e1:19:a7:69:95:27:02:7d:c5:dc:7d:78:b6:
04:6a:b7:c3:81:1f:e5:3f:39:21:83:e2:77:5b:19:30:53:86:
15:87:24:28:8c:32:de:cd:a4:16:a0:21:b2:7a:73:ec:1f:d1:
e6:cc:1a:9f:6f:0e:42:18:69:91:6c:d9:53:21:4c:1c:1d:c6:
0e:50:4a:d4:31:5b:68:d6:75:3e:81:8e:c8:6a:0b:e6:55:da:
db:35:1f:e6:22:53:42:53:ed:8b:6a:f8:f2:1d:16:5f:6d:dd:
65:04:b8:b5:d1:9f:21:5b:df:22:f8:95:e5:10:39:e1:a6:36:
ef:9a:f8:10:2e:9e:4d:70:e8:56:86:82:d9:7b:d4:ec:bb:75:
43:8b:3d:83:7d:18:4b:8b:68:86:93:a7:43:3b:93:bc:c6:71:
a2:ae:29:36:37:40:d0:28:a5:47:e8:4d:2b:f1:20:41:f6:f4:
04:8e:86:af:29:bb:8a:19:89:85:54:40:b5:2d:09:6e:22:5f:
74:eb:27:01:50:d1:96:e7:7d:c5:8f:6b:cf:e7:4e:23:39:28:
bd:8b:f9:da:71:a7:52:f0:30:9e:e2:ad:9b:c7:2e:54:2c:67:
15:03:54:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org