Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/r5jEZGOGjvRa_dNL7Skw99vw6v4.roa
File: r5jEZGOGjvRa_dNL7Skw99vw6v4.roa (raw, json)
Hash identifier: e2R6zDunUCry2PbzJgamEhIJp4RubmT6X2wBxwyhR0I=
Subject key identifier: AF:98:C4:64:63:86:8E:F4:5A:FD:D3:4B:ED:29:30:F7:DB:F0:EA:FE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D691BA6650E2F5F9043F36DC6FB7A17BA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/r5jEZGOGjvRa_dNL7Skw99vw6v4.roa
Signing time: Fri 02 Feb 2024 09:17:16 +0000
ROA not before: Fri 02 Feb 2024 09:17:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:69:1b:a6:65:0e:2f:5f:90:43:f3:6d:c6:fb:7a:17:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 2 09:17:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af98c46463868ef45afdd34bed2930f7dbf0eafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:67:25:8c:05:f0:fa:de:ff:5f:93:fd:a0:f8:
5c:73:6f:15:b6:e1:44:d3:c1:74:c6:55:07:44:9e:
5b:b1:ce:bf:ad:97:da:b0:6b:5c:61:98:cf:15:f2:
61:13:cb:c2:81:e4:85:ac:fc:0e:75:55:25:48:86:
1d:81:88:a6:4f:59:d0:d0:b9:f2:ed:e1:a3:c3:62:
3e:2f:b2:ff:3e:b7:28:07:5d:ee:03:33:a7:7d:4b:
80:17:e6:fe:b6:0f:82:a5:1f:fa:49:bf:2d:1f:68:
4b:69:58:cb:45:89:61:50:a7:f0:70:ba:42:6b:24:
51:8f:0e:b2:ec:f5:4e:0f:30:c1:ca:d9:69:75:ce:
da:5d:76:73:6b:8d:53:48:47:1e:51:6d:a9:ec:58:
9c:49:6f:54:88:37:81:28:bd:25:ff:46:48:9e:e7:
02:d4:41:6b:eb:9d:34:3f:c3:98:98:0a:77:4a:65:
35:4a:29:ce:e1:c6:b1:31:9c:3e:68:6c:91:20:4d:
fd:11:4d:0d:9d:62:da:45:b7:45:a6:09:f4:dd:06:
3c:72:b0:1c:16:d2:78:2d:f6:76:8b:9b:b9:c4:c1:
bb:04:84:35:1c:09:c6:24:37:47:fa:f7:31:ca:38:
6c:00:02:45:b3:a5:36:31:53:c6:db:84:46:99:7a:
d4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:98:C4:64:63:86:8E:F4:5A:FD:D3:4B:ED:29:30:F7:DB:F0:EA:FE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/r5jEZGOGjvRa_dNL7Skw99vw6v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:c6:b8:f8:76:40:6d:7c:ad:02:65:ac:c7:f6:4d:52:d2:4c:
59:68:80:53:96:12:e9:48:77:99:aa:bf:a2:bc:f9:2f:32:a3:
cf:cc:fb:33:19:fe:39:99:67:af:05:62:cd:14:03:82:46:ca:
3f:3f:34:4b:ba:17:9c:22:22:22:47:34:d1:fe:38:e7:ab:0f:
d1:93:d8:25:01:3a:c1:52:33:4d:44:9d:64:3c:4b:1e:ce:a7:
fc:b4:61:f1:55:51:d8:28:7f:25:a3:f7:37:43:2a:a7:12:ab:
6f:73:6d:58:4b:cb:30:0e:6a:0b:97:38:ee:a3:9a:53:fa:fc:
78:f4:1a:3b:64:b1:4b:89:f2:23:2d:aa:7a:69:54:eb:c2:d5:
3a:fe:2c:c6:37:f6:8a:ea:6b:2c:d0:b2:ad:c1:44:df:9f:f6:
3d:1c:89:45:de:04:21:65:28:12:23:be:1e:0d:bf:63:95:dc:
ea:f9:61:4a:9f:b5:bd:87:94:18:68:2e:4e:9d:af:18:a7:b3:
33:a2:2c:af:e2:cd:ea:95:e8:0b:98:d1:94:8d:03:17:17:58:
51:49:67:99:93:82:4c:86:16:cc:6c:4f:04:a9:18:51:a5:eb:
69:d3:96:c0:8c:c0:bf:c8:f0:3c:41:65:d1:0a:bb:60:33:a6:
01:f0:d7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:52 2024 by rpki-client on console-ams.rpki-client.org