Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/o-IHNnjHua5udl4-yaw0JLgFbDs.roa
File: o-IHNnjHua5udl4-yaw0JLgFbDs.roa (raw, json)
Hash identifier: TJVAiwF/PlWSsCGk/G6ZMs1mvv53CIM5G7cPTAkfcao=
Subject key identifier: A3:E2:07:36:78:C7:B9:AE:6E:76:5E:3E:C9:AC:34:24:B8:05:6C:3B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C99D194C906BF5A1C7713A865F5790D1F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/o-IHNnjHua5udl4-yaw0JLgFbDs.roa
Signing time: Sun 24 Dec 2023 03:14:58 +0000
ROA not before: Sun 24 Dec 2023 03:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:99:d1:94:c9:06:bf:5a:1c:77:13:a8:65:f5:79:0d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 24 03:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3e2073678c7b9ae6e765e3ec9ac3424b8056c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5a:28:ec:b2:9f:4e:2a:5d:18:a9:2a:1e:92:
e6:1d:83:7f:82:a8:c9:63:cd:3d:37:6d:28:33:c4:
6f:f2:07:45:89:90:7e:9b:3a:36:ed:4f:e7:03:14:
38:de:47:58:31:40:83:bd:f3:4e:b7:4e:d0:80:2b:
23:4d:b7:77:fc:be:97:a0:63:0f:ed:60:08:9c:24:
65:c2:cf:7a:13:1a:6a:f5:1d:af:f6:75:15:09:93:
0d:c4:b3:c9:22:09:7a:a3:47:ec:b2:ef:8c:31:30:
cd:f8:9f:0c:3e:ee:62:cf:b5:c6:2f:37:e2:fb:98:
65:4b:95:e1:9d:44:f7:5f:6f:f1:c4:0b:c9:33:47:
d5:d2:ff:75:69:0d:3c:21:b1:67:f1:0a:d4:0c:f8:
2d:9c:ba:8e:2d:f6:5b:ea:f0:0c:6d:45:73:0d:7b:
13:78:29:c7:9a:b9:e2:71:fc:9d:dc:5c:84:49:72:
be:6a:99:2a:07:80:c5:05:9b:b5:03:b7:35:ca:7e:
ee:01:8c:c1:46:a2:07:7f:0c:2a:62:e1:41:21:38:
5c:c4:d2:8c:52:c7:6e:f1:3d:08:10:bb:4a:2d:00:
20:c1:89:d4:4b:b1:89:56:4d:ed:af:14:e9:3a:69:
1c:08:d5:f7:3d:1f:f8:d1:4f:7d:e9:86:51:60:e1:
76:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E2:07:36:78:C7:B9:AE:6E:76:5E:3E:C9:AC:34:24:B8:05:6C:3B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/o-IHNnjHua5udl4-yaw0JLgFbDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:4e:d3:79:3e:6b:3b:0c:d7:c1:f6:04:09:62:bb:b8:aa:fe:
b7:9a:d7:d4:a9:98:dc:b4:01:6d:1f:86:71:41:25:ef:16:a4:
31:35:35:a8:48:d5:57:88:62:e8:6c:50:9f:24:ea:44:98:4a:
9f:49:fa:55:a1:40:63:72:82:55:23:f0:fe:16:35:05:6c:3d:
e7:85:71:d3:59:9a:37:d9:68:31:4b:e7:cc:b2:8b:c7:49:e5:
45:92:6c:f9:17:a9:21:6b:66:2e:af:30:75:a6:96:49:8d:a5:
69:98:43:24:6a:d4:f8:3f:91:ba:9e:f1:40:64:9a:a0:c2:1c:
c5:de:be:dd:19:1c:a6:ab:1d:76:0a:69:7b:90:64:3b:cf:43:
b2:68:73:08:d1:f6:f2:a0:44:fb:db:01:93:56:c5:51:7f:80:
84:b8:cd:18:ce:d8:59:d7:22:dd:0d:ea:8b:e9:b1:e1:62:e5:
7d:92:5f:c5:5a:27:af:21:53:47:48:1a:c4:93:6e:bb:5f:de:
60:89:ac:2a:fa:72:c2:ee:09:73:b9:6f:d2:f2:4d:de:45:d6:
af:80:76:82:52:0b:1e:2d:59:ca:1d:a5:61:9b:3d:85:2f:df:
3f:c7:05:8c:0e:bb:0e:ee:76:06:34:a0:fb:9e:f2:57:78:34:
55:dc:43:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:52 2024 by rpki-client on console-ams.rpki-client.org