Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lKgoDepiMN45q6jXMYmDIGziaKg.roa
File: lKgoDepiMN45q6jXMYmDIGziaKg.roa (raw, json)
Hash identifier: N2T0BgVb8rXpqgs4kBo643AXXr5SKof3ehwl8jfOjk4=
Subject key identifier: 94:A8:28:0D:EA:62:30:DE:39:AB:A8:D7:31:89:83:20:6C:E2:68:A8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E11C0068E8FBE628E2C55659C9CFEE240
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lKgoDepiMN45q6jXMYmDIGziaKg.roa
Signing time: Wed 06 Mar 2024 03:13:01 +0000
ROA not before: Wed 06 Mar 2024 03:13:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:11:c0:06:8e:8f:be:62:8e:2c:55:65:9c:9c:fe:e2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 6 03:13:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94a8280dea6230de39aba8d7318983206ce268a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:06:3d:d2:f6:98:1b:a9:d7:fc:ac:09:bc:
68:6a:2d:40:90:13:17:d8:95:ac:89:09:79:31:10:
be:0d:59:3e:93:68:47:4c:d9:22:b3:b6:31:5e:4c:
29:e2:cc:17:3b:e8:0d:b8:2d:36:a5:97:e1:bb:42:
6d:00:58:79:7b:40:47:eb:de:ce:65:66:cf:a8:7f:
1e:ed:35:d3:62:ca:2a:11:d4:4f:5d:38:dc:2c:ba:
b4:1b:fd:5e:90:32:c0:ef:7c:05:de:af:cb:50:eb:
17:22:80:7f:d9:1d:d1:66:3a:9b:28:76:9b:e7:09:
39:19:8c:d5:f6:a0:0c:6a:c7:86:cb:b3:11:bd:d2:
c9:ff:56:68:29:ca:c7:dd:d3:09:1f:5d:05:21:6d:
4b:21:8c:71:08:f6:7b:d9:36:d5:2b:95:94:75:b8:
25:69:9e:c5:ca:b1:ac:04:8f:99:fe:9a:9e:5c:1e:
a9:c5:19:73:4e:14:48:81:ca:61:05:5d:ca:d4:f0:
28:fa:be:65:23:a8:a4:77:34:05:51:f6:e8:83:99:
f8:4b:ca:ae:57:b9:e6:b4:f9:15:a4:64:c4:7d:0c:
b6:cf:90:bb:aa:63:06:f0:e3:e8:eb:59:a9:98:4a:
60:d3:6f:0f:6c:26:59:f5:7e:b4:b2:cd:94:98:3b:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A8:28:0D:EA:62:30:DE:39:AB:A8:D7:31:89:83:20:6C:E2:68:A8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lKgoDepiMN45q6jXMYmDIGziaKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:39:54:b6:41:0b:bd:c0:50:43:56:22:90:04:26:bb:7b:99:
03:b0:d5:bf:52:d4:ce:c1:42:33:97:0a:7f:6f:d0:1c:1a:b1:
a7:28:80:1d:da:46:0a:f8:fa:7b:d9:04:f3:c4:58:d7:1c:12:
24:7d:02:53:db:ba:19:6e:3e:5b:af:19:c9:ea:55:e9:a7:25:
8a:04:31:4c:c2:8d:34:c8:55:d7:bc:d1:ca:13:7a:bf:ab:5c:
f8:b3:22:1c:24:80:14:2e:06:ec:d6:88:43:49:92:3c:e4:3c:
3a:f7:da:15:0f:fe:67:ae:e1:ba:7c:55:45:41:92:57:97:14:
2d:1c:cb:74:39:25:1c:a7:2f:df:2c:00:fe:55:59:25:6c:71:
e3:45:f2:ee:99:f0:7e:d4:4f:fa:c6:84:55:10:d2:93:18:ef:
58:3f:a7:f5:36:4a:fd:29:77:f6:8c:71:1f:6f:e8:71:69:60:
9b:50:14:6b:26:8d:44:ed:d0:1e:6a:7b:8f:d1:be:bc:6a:ea:
ab:be:32:cd:83:d7:69:e7:7f:8a:6b:3f:02:9d:f0:af:3a:ab:
2f:1e:7e:59:35:0b:88:e4:eb:b1:11:a1:21:62:99:21:b1:61:
bf:a1:a4:f9:a0:b2:87:ec:fb:30:10:d7:70:20:2c:35:28:90:
e6:c6:9e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:52 2024 by rpki-client on console-ams.rpki-client.org