Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/m92ZR-5obejpozrye_jro9uvOd0.roa
File: m92ZR-5obejpozrye_jro9uvOd0.roa (raw, json)
Hash identifier: lajxoebpeEBygZP1ND8dedxzAWW/98aBS2JlCLeCsb4=
Subject key identifier: 9B:DD:99:47:EE:68:6D:E8:E9:A3:3A:F2:7B:F8:EB:A3:DB:AF:39:DD
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E9AA5408F92592B0AACDBBF27A2407C44
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/m92ZR-5obejpozrye_jro9uvOd0.roa
Signing time: Mon 01 Apr 2024 17:11:44 +0000
ROA not before: Mon 01 Apr 2024 17:11:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9a:a5:40:8f:92:59:2b:0a:ac:db:bf:27:a2:40:7c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 1 17:11:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bdd9947ee686de8e9a33af27bf8eba3dbaf39dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:a8:ea:f1:c8:15:f6:19:d9:a5:65:1e:27:
6c:81:54:b2:a6:1e:fe:13:d0:3a:29:76:54:a6:f3:
a1:2c:b5:57:d7:f8:26:24:7c:69:56:b4:57:a0:c5:
c3:c0:d3:d9:d9:d4:23:53:bf:e4:37:86:8a:60:f8:
42:1b:1a:7a:4c:a4:89:f8:0a:04:d4:40:fc:a5:b3:
4f:c1:48:d8:9f:1a:2b:98:69:e3:d1:d4:f0:3a:98:
2a:cd:55:79:e2:36:76:e7:42:8b:88:52:d7:d8:07:
d4:94:a7:30:14:8f:c9:18:5b:8c:13:fe:35:57:23:
ac:08:43:ad:48:58:86:a6:67:86:71:20:9f:cf:c4:
f5:1f:2f:54:72:2f:12:83:dd:5a:b8:23:8a:99:b6:
e7:b5:78:7b:cc:95:3d:88:49:a5:7b:50:e0:54:51:
19:99:b6:8a:48:d0:4c:59:f5:47:cb:c5:66:a4:c2:
84:43:61:fe:b1:b7:df:25:d5:b4:78:bf:b5:79:53:
06:70:0b:60:e8:dd:81:95:2a:7e:67:41:08:37:e4:
f6:88:71:6a:f9:f3:ce:52:bd:23:f8:96:cb:ba:df:
57:86:7f:f1:58:2f:79:f5:2f:a5:2c:c0:2c:65:7f:
df:b8:8b:59:0c:8c:7d:94:4e:02:8e:24:1c:96:06:
18:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DD:99:47:EE:68:6D:E8:E9:A3:3A:F2:7B:F8:EB:A3:DB:AF:39:DD
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/m92ZR-5obejpozrye_jro9uvOd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:dc:fb:9b:29:45:a9:2c:0d:e3:3d:ed:5d:90:d8:3f:35:33:
5f:e6:9c:f8:45:0f:48:a1:59:74:8f:0d:89:fc:3d:b2:49:ca:
db:82:a1:ab:d5:d8:0c:42:3a:ca:35:aa:05:a1:72:37:79:70:
3b:f4:37:b2:75:61:69:c8:bb:86:d7:0a:ce:d6:e4:2a:35:e5:
da:f6:71:f6:d2:78:7a:cb:2a:2b:02:4a:4a:a3:95:98:3c:0f:
c4:5e:72:42:7c:e3:3c:60:af:49:ab:cb:6e:cf:e2:16:df:7e:
29:b9:fb:39:6b:97:83:4f:7e:d6:40:76:98:a2:14:d6:d5:c6:
e7:44:27:62:4e:66:94:38:2f:f9:0a:87:7d:56:11:0d:0e:7b:
0b:28:0d:4e:4f:44:c1:c5:2c:b6:77:3a:b7:24:17:14:62:1f:
8a:2d:40:e3:4c:f7:6c:d0:fd:51:2d:ab:a2:1e:99:f7:3f:a5:
ee:e3:6b:b0:fa:25:35:cb:46:19:45:8f:5e:bf:98:9a:61:01:
3b:84:75:66:88:b1:21:f8:e0:aa:e8:2b:9d:84:d4:5c:d9:e2:
fd:c3:12:2e:d7:88:1a:b3:d3:b0:4d:78:40:37:5c:00:15:d7:
83:17:63:6a:84:eb:3b:88:04:f3:9c:0e:c5:6e:27:fc:d5:c5:
71:73:7a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org