Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jQ0TeJsmUPxvXQKIObMoy8QWpBM.roa
File: jQ0TeJsmUPxvXQKIObMoy8QWpBM.roa (raw, json)
Hash identifier: 3EtfzPXlUG77YItWOIpeFaZi82wYEngS4GUvYEho95s=
Subject key identifier: 8D:0D:13:78:9B:26:50:FC:6F:5D:02:88:39:B3:28:CB:C4:16:A4:13
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E8C0DE6D4341DC1A745E830E6BC4BAABE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jQ0TeJsmUPxvXQKIObMoy8QWpBM.roa
Signing time: Fri 29 Mar 2024 21:11:45 +0000
ROA not before: Fri 29 Mar 2024 21:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8c:0d:e6:d4:34:1d:c1:a7:45:e8:30:e6:bc:4b:aa:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 29 21:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d0d13789b2650fc6f5d028839b328cbc416a413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2c:92:1e:00:ee:c5:ea:9a:db:b8:96:85:86:
70:b1:54:b6:6e:3f:02:79:71:d6:44:05:2d:62:b8:
dc:cf:07:57:51:5d:82:9d:55:ae:6d:e7:7e:6b:4f:
61:2b:69:4e:eb:94:69:99:a2:5f:ab:70:93:2f:b7:
7b:36:82:55:10:b9:90:2a:91:cc:43:a6:a6:9d:0d:
7c:ec:c6:c7:bc:b7:88:32:93:70:95:e8:c0:d3:05:
20:c1:cc:02:08:ef:08:99:5b:36:18:e6:4c:39:2c:
b5:76:f6:b7:60:1a:bf:4e:39:52:e2:84:89:bc:91:
46:b6:dd:2f:8f:17:99:9f:53:f7:3f:58:67:c8:07:
9d:5f:59:f2:2d:a9:8d:47:5f:df:89:59:3f:be:2b:
b2:ac:92:20:c7:fb:90:b3:42:44:8b:6c:a4:bb:50:
b5:cc:b4:d8:6b:a8:68:a6:19:a0:e0:cf:21:e8:81:
0b:99:d5:9f:a1:a2:99:7b:c8:b6:f2:89:50:a9:c3:
63:bf:b2:63:01:3c:a5:b6:67:4a:5d:77:99:ec:66:
e7:cc:9e:63:7a:07:ab:2d:48:69:2a:a9:45:78:4d:
57:0e:75:e4:95:a1:7b:7e:7a:97:b7:32:2a:7a:14:
60:c4:66:4b:c1:fe:58:26:8b:22:14:52:89:4d:55:
06:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0D:13:78:9B:26:50:FC:6F:5D:02:88:39:B3:28:CB:C4:16:A4:13
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jQ0TeJsmUPxvXQKIObMoy8QWpBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:1f:56:71:8c:75:78:8e:e8:12:cf:45:67:11:f1:78:9c:32:
5a:d0:e2:38:c9:55:3f:b4:70:27:20:a5:3e:6c:1a:32:ef:be:
5a:cf:12:69:89:5f:7e:80:20:97:39:98:42:a8:f7:d3:51:4a:
2b:12:21:2b:75:76:4f:34:2e:28:26:cf:49:ae:fd:be:df:ff:
4e:a4:1c:e3:32:02:fc:31:7f:ca:b5:e5:b1:c2:44:23:94:05:
3c:f2:54:02:a9:e5:5b:63:de:50:a8:ff:ca:b0:9a:1d:12:31:
60:49:89:a6:81:fa:ce:3d:6e:21:c6:e4:33:0d:81:4a:08:42:
64:8c:ac:77:64:67:79:c3:21:e6:33:83:a8:b2:09:9d:2c:1a:
27:ae:e0:00:3b:3c:4e:cd:4b:b6:2a:58:e2:03:d1:7d:ce:e1:
10:e6:eb:69:5a:fc:4f:8d:d5:78:94:36:5d:49:d4:44:62:da:
f9:54:6f:55:35:23:7c:6e:23:5d:6c:ab:e0:f6:cb:45:fe:8c:
bb:7b:db:97:99:83:c4:e6:82:b4:1f:c7:8f:cc:1b:73:d9:9b:
d4:f4:aa:8c:0a:48:ec:c4:3a:08:11:ce:48:9e:9f:6a:ca:ab:
50:89:a3:b7:b4:c7:18:87:8c:90:33:fe:7a:7c:be:4c:de:c7:
c3:52:03:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org