Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rhnH6wKO_ViuNId20Lm95EGNQ-M.roa
File: rhnH6wKO_ViuNId20Lm95EGNQ-M.roa (raw, json)
Hash identifier: YgP+2z8aP2QpE2e3om41m4xeWuWSLdciiSNCU9R8jxk=
Subject key identifier: AE:19:C7:EB:02:8E:FD:58:AE:34:87:76:D0:B9:BD:E4:41:8D:43:E3
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E1F1196297E55A8038864C368045F1D4B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rhnH6wKO_ViuNId20Lm95EGNQ-M.roa
Signing time: Fri 08 Mar 2024 17:17:10 +0000
ROA not before: Fri 08 Mar 2024 17:17:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1f:11:96:29:7e:55:a8:03:88:64:c3:68:04:5f:1d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 8 17:17:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae19c7eb028efd58ae348776d0b9bde4418d43e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:66:30:8f:99:aa:68:1e:1f:8b:18:5f:7c:63:
f8:4b:f4:c7:5a:bf:08:26:84:81:2a:46:53:26:0f:
a3:57:4c:de:84:80:ac:43:9b:9c:89:0a:74:a2:62:
a4:fe:01:14:4e:9b:ae:e9:57:95:c4:e9:63:55:3f:
45:b0:28:e1:31:e5:91:f3:61:71:b4:fd:82:7d:a6:
c3:8a:a3:60:ab:d3:fd:59:bb:de:f6:d8:9c:32:c2:
bd:98:dd:3f:f0:26:24:e2:f2:f8:1c:dd:53:9b:4a:
d2:11:62:d1:ca:58:f5:ed:c9:17:09:9f:fb:66:13:
56:e0:c6:db:6b:78:fb:b4:35:12:37:85:a7:6e:4d:
42:d6:af:23:bb:8d:01:f7:01:13:36:da:f9:e1:6d:
72:50:d2:28:27:56:d4:62:a6:b3:45:a2:69:b0:76:
9e:c6:e2:8b:5b:5c:cb:83:54:dc:be:7f:10:08:49:
68:e0:46:6b:ce:ae:5c:90:39:ba:2c:a6:37:59:a5:
6f:f6:7b:4b:61:97:af:53:e0:76:56:3b:02:88:e9:
db:0c:05:3a:30:ca:c2:d5:dc:28:21:39:ae:3b:ee:
12:cd:d5:59:a6:08:0f:43:cf:96:8c:05:57:13:cd:
af:0f:b8:0a:fe:7d:93:42:95:ae:d5:e1:3b:13:34:
5d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:19:C7:EB:02:8E:FD:58:AE:34:87:76:D0:B9:BD:E4:41:8D:43:E3
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rhnH6wKO_ViuNId20Lm95EGNQ-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:65:eb:5c:00:e1:9b:b4:49:7c:1b:ae:fc:4a:53:d9:45:42:
79:3c:05:24:4b:86:60:05:0f:e5:c5:7c:28:55:df:8a:d0:9a:
68:09:42:b4:a4:5e:5e:0d:8e:af:a1:56:a0:69:ae:f3:52:ca:
24:ed:af:57:78:44:0b:6b:84:ab:2b:1e:6f:13:f4:3e:d8:99:
52:df:41:76:1b:d6:9d:c7:7d:5d:7d:20:a2:8b:1d:93:6d:8e:
23:0d:e3:ae:85:23:7d:53:ee:e1:36:76:13:03:74:96:1b:14:
77:49:da:d7:d2:e2:fa:2a:d0:3b:5c:08:32:53:bc:08:b6:f0:
41:7a:2f:65:17:62:25:77:ea:2d:4f:94:9f:4b:46:f9:f8:2f:
41:52:09:06:9c:99:b3:39:41:fa:94:f7:18:07:57:f7:60:43:
37:7d:6a:45:b4:bc:6b:61:ad:ff:d3:e9:d8:dd:0e:75:ec:a9:
b3:02:df:3e:ea:8f:46:de:4d:44:0f:7b:58:60:c9:7d:19:71:
25:08:be:d7:7d:eb:bb:31:9d:4e:43:52:fb:69:85:bb:2e:57:
3b:05:35:14:d6:95:b9:c9:e4:05:10:9f:c6:97:37:62:19:d7:
78:70:75:f7:38:dc:a2:8c:08:21:e8:16:9a:db:4f:f8:6a:a9:
ac:0d:39:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org