Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/noXSaPJi73tZk8TQW5wVUcx81ik.roa
File: noXSaPJi73tZk8TQW5wVUcx81ik.roa (raw, json)
Hash identifier: wy4sOsYH5cgPr7AeZ/5OWGi28RuA/B5tgLiVQGDNLNA=
Subject key identifier: 9E:85:D2:68:F2:62:EF:7B:59:93:C4:D0:5B:9C:15:51:CC:7C:D6:29
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DFE390DC0B49DF5F2C5B1B2A4F98325D2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/noXSaPJi73tZk8TQW5wVUcx81ik.roa
Signing time: Sat 02 Mar 2024 08:12:48 +0000
ROA not before: Sat 02 Mar 2024 08:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fe:39:0d:c0:b4:9d:f5:f2:c5:b1:b2:a4:f9:83:25:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 2 08:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e85d268f262ef7b5993c4d05b9c1551cc7cd629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:89:81:52:c8:95:31:e7:78:6a:78:1a:1f:57:
79:71:f7:ef:bc:0e:04:c4:2b:a3:2e:d3:ff:18:2d:
cf:6e:ed:e4:c4:e4:53:5b:7b:79:b0:8e:e8:65:22:
13:bc:c5:4e:98:00:d7:68:bc:ff:02:2b:ee:8b:2d:
c2:25:85:67:c5:0f:d3:23:8d:ed:25:e9:94:05:90:
8c:ed:4d:f6:09:53:e8:a6:be:0a:be:74:b9:c0:8b:
1a:14:53:f7:50:c8:e0:e8:ed:f4:5e:36:a8:e9:fa:
9e:be:f2:fe:cf:55:03:bc:6d:bd:49:fe:cd:1b:61:
ac:86:59:0a:b4:a5:3c:05:e7:95:3d:1b:3e:ca:ea:
86:62:f6:48:1d:7a:ce:12:c2:4a:8a:a0:f7:75:06:
a6:43:2e:45:3e:e5:83:8b:e0:7b:51:60:1d:08:6a:
be:7f:6f:80:18:c5:66:d4:d6:db:60:0e:35:12:44:
2d:f8:a3:34:0e:c5:60:3d:24:28:12:bc:d3:3e:75:
43:85:9c:08:c9:0e:0e:46:d0:85:4c:0c:e8:37:89:
df:04:35:1c:8e:ac:8f:54:e6:99:d2:3c:58:f1:c6:
8a:58:84:0a:92:46:d5:66:e6:a0:67:b3:37:35:2f:
a1:8b:9b:93:52:d9:7b:1d:c0:83:e0:71:91:91:15:
c1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:85:D2:68:F2:62:EF:7B:59:93:C4:D0:5B:9C:15:51:CC:7C:D6:29
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/noXSaPJi73tZk8TQW5wVUcx81ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:72:b5:90:ba:f0:54:46:8d:1b:8b:d0:4e:28:26:d2:b4:a0:
be:be:c8:25:1b:c1:f0:5d:5a:23:04:55:db:67:74:7b:20:f1:
52:17:ff:e9:66:43:fe:01:a6:26:a9:ef:cd:84:d0:e9:21:53:
27:f7:45:c0:3c:8a:a4:7f:f3:b9:2d:d7:74:36:b7:1a:8e:6d:
75:ce:8d:04:ac:26:4d:4a:46:1c:97:d0:91:0a:88:32:48:44:
18:4a:eb:0a:4f:ff:ea:a6:fd:f8:21:cc:e4:63:82:5f:36:6a:
38:d6:88:b3:c5:1e:3e:8f:d6:4e:17:6e:d9:ac:c4:ef:8e:bf:
19:3c:52:56:ef:2d:56:94:f0:8c:4d:7d:e1:d8:37:08:a9:2b:
e7:09:50:61:d8:04:e2:13:0b:9c:67:93:fb:b3:8e:5d:c3:30:
95:17:99:d4:7d:55:b6:34:d8:46:c9:3f:f3:b3:04:e7:88:e8:
b8:ce:c5:e9:7c:b3:4a:b0:84:a9:3b:ea:c5:e6:bb:20:5f:0a:
4c:7e:55:9e:f3:56:03:61:8c:4c:85:bb:b7:6b:39:02:61:02:
c9:30:49:42:62:5b:51:c6:1e:42:30:7a:c0:26:6e:07:9c:ca:
71:4e:ce:2c:ca:0a:43:f3:30:b8:d8:f7:5e:c7:a7:cc:78:54:
48:3b:08:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org