Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/n3wEwRn6GjwfWzBBB_YaQzA61Kk.roa
File: n3wEwRn6GjwfWzBBB_YaQzA61Kk.roa (raw, json)
Hash identifier: aRk8qOtOmzrsQSkVQAj6yuEX3Onc1GC4OXMJ/s3ZvVk=
Subject key identifier: 9F:7C:04:C1:19:FA:1A:3C:1F:5B:30:41:07:F6:1A:43:30:3A:D4:A9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E7475404AE26EF8D49B59A7A607AE8446
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/n3wEwRn6GjwfWzBBB_YaQzA61Kk.roa
Signing time: Mon 25 Mar 2024 07:13:44 +0000
ROA not before: Mon 25 Mar 2024 07:13:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:75:40:4a:e2:6e:f8:d4:9b:59:a7:a6:07:ae:84:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 25 07:13:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f7c04c119fa1a3c1f5b304107f61a43303ad4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:c6:bc:0e:b0:e1:df:9e:47:ce:c0:86:36:
4a:b4:f0:12:5d:7d:b0:2d:98:99:f6:7c:73:3d:34:
a4:e6:5e:b9:52:72:59:03:77:a4:0b:f7:91:58:cc:
1c:31:da:b0:d3:94:6d:20:0c:e9:1f:86:f5:8f:bd:
3c:9a:92:8d:84:ef:ca:f4:a4:e7:b5:24:65:48:22:
54:28:01:e8:8c:b5:03:dc:ca:3a:61:b8:1e:be:29:
b5:a3:ee:9b:5c:00:96:ed:f9:5e:b6:b7:46:e3:9c:
97:97:f0:98:b6:b9:0d:8b:aa:37:80:ea:94:11:e9:
02:28:58:66:25:99:a8:af:ed:cd:43:bf:7d:3a:f7:
09:31:d6:e8:00:d2:44:3c:18:72:6e:3c:e6:08:11:
a7:72:6b:36:44:9b:a4:e7:b6:06:95:6c:ca:4f:a2:
1f:f2:38:ab:3c:5b:76:2b:18:7e:72:db:fa:8f:9e:
a8:ea:3c:c5:0c:9d:2f:b4:90:15:60:b6:f0:2f:bb:
81:11:be:5f:20:f1:e4:24:69:c8:52:75:27:b8:b4:
33:f9:c9:3b:51:ee:53:77:10:00:21:ce:1c:44:9a:
de:16:a4:fc:a6:b2:d2:f0:25:ab:3e:98:31:da:6e:
da:3a:19:f0:e7:bf:41:37:97:74:99:06:05:cd:51:
3b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7C:04:C1:19:FA:1A:3C:1F:5B:30:41:07:F6:1A:43:30:3A:D4:A9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/n3wEwRn6GjwfWzBBB_YaQzA61Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:02:56:a4:9c:2b:c4:69:98:fb:23:3d:1d:4c:33:31:16:af:
21:a2:1a:44:ab:d3:cd:00:b1:14:4e:75:cd:8a:cb:cb:01:ee:
b4:16:e3:db:21:a5:92:dc:fe:d2:dc:ae:03:a3:f2:b1:7a:2e:
ef:4f:88:7c:5e:5a:ff:b0:6d:b8:c7:33:9e:ea:4a:4a:d1:77:
56:21:ed:dd:af:8f:52:2a:d9:b4:24:4a:fa:7e:17:a5:36:1b:
4d:a7:e2:52:d6:00:b0:21:4a:2a:e5:7b:f9:a7:7a:f5:79:a6:
88:99:c1:45:77:aa:98:dc:03:d5:83:89:6b:a2:4d:77:ff:56:
d4:12:9f:f3:f9:9e:55:90:9f:9a:36:59:d3:e6:30:4f:55:b9:
74:e2:87:88:b6:9d:9e:46:a8:e1:fd:59:87:2c:9f:4c:96:61:
24:ff:00:cb:30:05:59:e4:36:38:40:a5:81:94:f0:a9:f3:fc:
3e:54:58:6d:04:db:5c:00:5e:14:5c:2a:c7:b5:ac:5a:fa:a9:
e7:5f:9c:52:41:c5:eb:3f:2f:00:ce:0b:bb:b8:09:f3:7a:99:
55:fc:04:1b:05:96:a0:48:32:66:13:85:57:33:1d:45:41:33:
8e:d7:02:b9:ed:51:de:b5:d2:a6:a6:14:a5:63:54:14:c9:bb:
dc:5e:5c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:52 2024 by rpki-client on console-ams.rpki-client.org