Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nKtBAexKsjz27PMQ5o9akn_hxQs.roa
File: nKtBAexKsjz27PMQ5o9akn_hxQs.roa (raw, json)
Hash identifier: CpCojvKHiBKOEN/FuUyZIgBw6cHRHxcfZo6lEzDpU0c=
Subject key identifier: 9C:AB:41:01:EC:4A:B2:3C:F6:EC:F3:10:E6:8F:5A:92:7F:E1:C5:0B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D82D8B05C2323715D206625AA462C7383
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nKtBAexKsjz27PMQ5o9akn_hxQs.roa
Signing time: Wed 07 Feb 2024 09:14:15 +0000
ROA not before: Wed 07 Feb 2024 09:14:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:82:d8:b0:5c:23:23:71:5d:20:66:25:aa:46:2c:73:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 7 09:14:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cab4101ec4ab23cf6ecf310e68f5a927fe1c50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6c:17:b6:8b:25:20:2f:c2:f0:63:70:84:08:
b1:bc:1a:c4:86:92:35:f6:5b:b8:4e:e9:e7:5c:b3:
9b:fa:6d:cc:65:6b:fb:c3:95:65:78:14:75:11:59:
b0:2a:c2:b7:50:d5:d0:5e:9f:59:5d:32:49:c9:4f:
c4:1a:1f:6b:e0:18:b4:78:72:fa:e0:e4:c1:a5:38:
ce:9a:2f:b8:19:a1:23:b6:c1:01:ce:73:e5:cb:9c:
3c:ac:60:52:57:db:cc:e5:53:c3:5b:8f:bb:fa:7c:
d5:19:7a:e9:ea:26:dc:7f:14:8f:12:44:4a:1b:85:
95:8e:f1:2c:bb:82:71:ee:6f:18:02:51:3a:2b:e3:
86:b4:b0:16:1f:88:ad:36:17:e2:7a:fb:9f:78:79:
7b:96:64:21:26:13:a6:8d:98:8b:1f:d0:42:6d:ac:
3b:57:ee:f4:6b:ad:f7:14:eb:d9:2e:e4:96:8f:da:
69:f6:98:5f:f2:42:fe:71:ef:a5:85:d3:aa:bb:98:
7a:1e:2b:8e:6a:2b:28:8c:64:34:d3:d3:4b:ed:30:
0c:49:9f:9a:c3:e1:2a:f2:cb:cc:1d:f5:03:b0:c4:
c9:76:4b:98:c6:09:b5:91:33:f7:ee:37:89:09:b7:
48:61:27:1f:6c:42:f4:c1:ea:0d:80:8c:cc:de:25:
1b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AB:41:01:EC:4A:B2:3C:F6:EC:F3:10:E6:8F:5A:92:7F:E1:C5:0B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nKtBAexKsjz27PMQ5o9akn_hxQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:43:9c:23:81:81:7a:dc:72:c5:5f:19:0d:32:6e:ef:60:dc:
28:4f:9d:31:d6:b6:fa:32:17:51:22:a1:f6:cf:a9:86:cb:42:
81:4c:b9:f3:af:9c:ad:11:c9:81:78:d7:26:c1:d4:33:13:e1:
9d:d9:dd:a5:4c:f3:99:7f:65:69:8c:9f:0f:9d:81:87:fb:7b:
67:c5:41:0d:f8:63:3a:67:1b:5c:89:43:9e:15:1a:40:2b:5c:
dd:25:88:b4:d9:4f:90:bc:62:5a:66:7a:ed:02:c1:7d:ba:62:
7c:8a:96:93:49:a9:63:5e:e2:c8:42:45:58:66:b0:af:02:12:
1e:17:35:5f:2b:0d:5d:54:7f:3b:53:5d:14:8d:9a:c8:99:5f:
57:cf:54:c4:45:95:81:b2:7a:9d:6a:26:c2:79:0a:de:aa:ac:
7c:a4:33:b6:ee:d4:84:87:3b:ba:6e:ea:87:6d:de:d6:6b:3e:
30:80:a2:a9:89:ac:06:80:4c:69:01:73:db:9b:db:ca:6e:a3:
5a:06:e3:a5:6f:e6:95:38:60:c3:40:7f:e3:6c:36:b6:a7:49:
60:ee:ab:88:74:7f:e8:21:30:12:5e:5b:1d:54:7a:e8:e0:e6:
a8:65:a3:49:54:c8:71:2b:80:b0:3d:16:89:db:b2:57:07:1a:
34:ca:80:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:52 2024 by rpki-client on console-ams.rpki-client.org