Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rParLHey586K_KJ4rkpo2_B7SGU.roa
File: rParLHey586K_KJ4rkpo2_B7SGU.roa (raw, json)
Hash identifier: WH/SHirvzeHDpVj6IWYWlnfev/cA9lMf/qnB/H7ZWzQ=
Subject key identifier: AC:F6:AB:2C:77:B2:E7:CE:8A:FC:A2:78:AE:4A:68:DB:F0:7B:48:65
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D5222A8C8572135089FEA4E9B283F9B65
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rParLHey586K_KJ4rkpo2_B7SGU.roa
Signing time: Sun 28 Jan 2024 22:13:39 +0000
ROA not before: Sun 28 Jan 2024 22:13:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:52:22:a8:c8:57:21:35:08:9f:ea:4e:9b:28:3f:9b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 28 22:13:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acf6ab2c77b2e7ce8afca278ae4a68dbf07b4865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cd:62:fb:c5:17:a0:24:11:49:23:bb:76:99:
d3:40:ad:54:19:ae:93:cd:a1:6d:f2:33:8b:81:cc:
09:34:25:a3:c1:4a:53:d4:1e:a2:3f:7a:56:31:d1:
89:eb:03:52:38:67:fd:e6:21:37:43:72:91:46:07:
95:6c:63:6c:93:ac:e1:2d:38:6d:1d:dc:b7:5e:93:
1c:81:c3:bc:1c:8f:48:bd:f5:55:46:03:6a:f8:51:
f2:04:7c:c7:8a:61:46:c6:20:85:a7:d8:0f:32:51:
48:cc:4c:4f:f3:f4:28:4f:3a:a6:3f:04:9b:09:a0:
46:3d:08:45:a6:5e:86:4e:73:c2:1e:93:18:93:25:
a1:b6:b4:91:05:7b:da:ff:a5:b3:52:4d:30:6d:a4:
a9:c4:af:16:ca:0a:0a:b8:ba:22:81:c7:80:5b:e0:
48:19:e0:9b:5a:7e:15:89:ef:52:be:44:bd:42:7e:
eb:38:b8:0b:0a:19:6a:fb:e8:05:e5:b5:d0:2a:a8:
35:4e:0b:34:2f:78:3b:29:47:df:a5:4c:83:cc:73:
a8:2d:a1:f1:05:c0:27:85:4b:47:4c:bb:a8:9c:f1:
dc:35:94:da:58:46:ab:0c:80:83:07:b6:71:c3:78:
fa:e1:8d:8a:3f:51:2a:10:a7:1c:8d:eb:2d:f9:75:
72:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F6:AB:2C:77:B2:E7:CE:8A:FC:A2:78:AE:4A:68:DB:F0:7B:48:65
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rParLHey586K_KJ4rkpo2_B7SGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:82:21:58:ec:d6:30:f4:0e:6c:09:74:ee:dd:07:52:5d:8f:
f7:e0:f1:22:d8:1b:9a:17:03:25:c6:21:18:e2:43:32:b9:81:
06:84:d3:c3:33:e9:9d:c7:e9:5c:6a:dc:3a:7a:f7:fc:8b:43:
ca:44:f3:97:3d:17:39:3b:23:d7:73:2e:53:88:64:68:a4:49:
64:f3:64:ef:a0:0a:54:98:a8:80:b3:c1:c0:44:62:ab:59:d1:
e4:50:28:b8:0b:96:5a:5c:a2:f8:c7:e0:30:39:eb:85:db:b7:
63:37:10:27:94:15:42:1a:d6:fd:96:3d:65:03:4d:ed:32:5a:
f2:a7:c4:0f:6a:73:92:c4:26:7c:5f:4a:ef:79:bb:1c:5e:a4:
b9:44:86:c5:03:27:b4:f2:98:65:c7:0f:50:e5:88:f8:cc:5f:
a9:83:3c:7d:84:85:ba:96:68:22:a6:12:c2:8c:2a:56:8d:14:
a3:07:55:08:13:a1:31:f4:34:3d:9d:b8:5a:a0:47:8d:d8:93:
dd:d8:87:4e:65:ac:f0:8a:52:17:fa:f2:95:1d:0e:dc:e6:a8:
40:0b:69:cb:af:b0:41:07:84:9d:aa:bd:9d:80:dd:20:41:70:
50:f4:08:e1:39:9b:1d:b2:d2:2f:fd:1d:13:cf:e5:fe:0b:a8:
d4:b0:8d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:52 2024 by rpki-client on console-ams.rpki-client.org