Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mDeipfaCqGOr2ywNuzbU_mrQEUY.roa
File: mDeipfaCqGOr2ywNuzbU_mrQEUY.roa (raw, json)
Hash identifier: 1DC/blZ8ywKQFd4CnzWGLMsMCySSOkaFJGEDZEeiJpI=
Subject key identifier: 98:37:A2:A5:F6:82:A8:63:AB:DB:2C:0D:BB:36:D4:FE:6A:D0:11:46
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DD9BDC28498886E78A6A1477CF50D68B3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mDeipfaCqGOr2ywNuzbU_mrQEUY.roa
Signing time: Sat 24 Feb 2024 06:11:48 +0000
ROA not before: Sat 24 Feb 2024 06:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d9:bd:c2:84:98:88:6e:78:a6:a1:47:7c:f5:0d:68:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 24 06:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9837a2a5f682a863abdb2c0dbb36d4fe6ad01146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:18:1c:74:60:2e:78:cb:49:90:69:ed:f1:
ae:cb:a2:66:53:b7:df:c6:ba:88:14:3c:50:9a:92:
d2:b8:3d:e8:37:cf:95:09:79:d3:c0:3a:35:f8:36:
4d:16:71:19:17:c3:70:4e:82:18:12:75:26:d7:4b:
c5:45:8a:fc:96:e9:63:82:f0:02:7d:b0:7c:b8:d7:
75:94:58:e7:06:f5:c6:d9:a1:c2:d1:e4:93:f0:d9:
65:c4:0f:92:18:75:0d:54:3d:8d:10:ec:ac:c3:a5:
55:5a:8b:21:7c:8e:34:77:67:88:d6:ce:11:4b:a1:
09:82:2d:37:34:db:33:f5:67:97:ca:5f:0b:ce:82:
e1:42:fb:50:f5:e6:46:ab:e8:9b:e6:08:cc:4d:ef:
7b:18:f9:e8:35:a7:a4:06:55:79:d8:d0:2a:c8:13:
17:e2:cc:0a:af:6e:f1:c6:e1:79:1a:a7:e5:d4:59:
79:dd:be:d5:33:da:3b:f5:cb:11:fe:98:a1:28:5a:
12:b0:42:ea:ec:5b:a5:a7:78:99:9b:94:e3:58:2f:
81:43:8e:13:1d:2e:57:9f:8d:8e:a5:45:ed:c6:26:
19:1b:3e:f2:f3:4a:9a:78:02:45:3e:d8:f8:34:9d:
c7:24:f4:89:51:ee:0d:b1:a0:5a:c8:56:1c:d8:6f:
02:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:37:A2:A5:F6:82:A8:63:AB:DB:2C:0D:BB:36:D4:FE:6A:D0:11:46
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mDeipfaCqGOr2ywNuzbU_mrQEUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:78:d2:9e:0d:85:f0:c4:a4:49:d1:cb:5f:66:75:ff:13:e7:
c6:b7:5c:f7:2a:3d:ac:7a:30:c3:15:28:39:f0:6e:d2:cf:dd:
4c:b4:2e:42:c0:a9:4e:65:68:a1:0f:b5:e7:6b:0f:68:1c:69:
8c:18:9e:e4:e9:b3:ce:51:4c:95:65:66:83:87:5e:d2:26:e7:
0d:aa:93:30:7a:4d:89:f1:21:89:2f:ac:a6:a9:d4:ee:78:fb:
dc:e0:7a:6b:a6:28:16:0b:be:b3:87:24:9b:2a:65:3c:c8:7a:
12:4b:07:12:43:8c:21:b5:30:69:dd:a7:0c:03:e9:99:b7:6d:
c2:7d:5b:6d:cb:c1:47:47:be:30:2f:ed:fb:5c:3d:40:02:cf:
8e:72:86:ba:5e:d9:12:12:e9:3e:13:11:f5:03:10:5e:16:12:
75:ab:90:18:d3:e2:60:1b:eb:73:6c:ee:10:53:80:80:26:c7:
c3:a5:a4:ae:b3:05:81:ed:2f:f7:85:ff:b9:3e:01:47:03:08:
b8:6b:fe:be:64:38:1e:11:18:24:92:e8:65:c9:38:0d:2f:45:
d8:d1:72:d8:a4:bd:7a:1e:ca:50:53:b0:0a:0a:c2:dd:db:b7:
27:51:38:73:48:45:22:ef:1e:57:3c:5e:46:3b:25:8f:dc:e2:
d4:f2:53:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org