Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rpvXcmISDxmsV_AQoZnMvjx40E0.roa
File: rpvXcmISDxmsV_AQoZnMvjx40E0.roa (raw, json)
Hash identifier: ELlSJ2tNFu0q/oOtLI1Mmwk/cnzi0D/IlYYUSz4VAp0=
Subject key identifier: AE:9B:D7:72:62:12:0F:19:AC:57:F0:10:A1:99:CC:BE:3C:78:D0:4D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D8A940F129D1351FBA0EB5A7F54414D3B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rpvXcmISDxmsV_AQoZnMvjx40E0.roa
Signing time: Thu 08 Feb 2024 21:16:15 +0000
ROA not before: Thu 08 Feb 2024 21:16:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8a:94:0f:12:9d:13:51:fb:a0:eb:5a:7f:54:41:4d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 8 21:16:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae9bd77262120f19ac57f010a199ccbe3c78d04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:b9:3a:aa:20:14:62:80:65:7c:30:08:a8:
73:1a:cd:f8:61:a1:74:7c:dc:66:43:d4:5a:9a:e5:
f6:73:e1:7d:b1:37:b3:10:fe:c7:06:6d:bc:bf:37:
17:a5:51:8f:54:d3:62:e1:ee:0b:ee:58:9d:55:7d:
27:cf:9e:4d:b3:7d:d9:58:cd:de:8f:24:8d:1d:ac:
aa:8e:62:9d:0f:0f:6a:64:34:b1:3b:18:26:26:00:
5e:97:91:a0:e3:77:29:72:6e:8c:e8:76:96:12:b4:
c3:28:cb:2d:67:eb:e2:6c:e0:93:db:c5:27:45:ea:
2e:fa:f9:4e:74:7d:8a:c4:65:02:a3:66:80:35:83:
34:53:ad:f5:27:1b:90:4d:0b:72:cf:0b:10:f8:f0:
90:9a:9f:9f:5c:62:9e:d7:92:07:7c:63:cb:da:39:
c7:9b:88:05:da:40:3b:40:d5:0b:b9:1b:07:54:10:
eb:20:97:2a:91:74:33:38:3e:4a:f1:b0:25:34:7c:
e3:29:b3:39:90:bb:49:69:9a:2f:c3:1f:0c:48:70:
34:b6:eb:7f:7e:ff:84:3d:a1:cd:b7:22:45:c8:cd:
d7:86:03:d4:79:12:8f:7c:b4:a2:77:46:fc:5f:8b:
ee:0e:14:17:cc:f9:f3:28:73:0c:a9:c8:3d:56:15:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9B:D7:72:62:12:0F:19:AC:57:F0:10:A1:99:CC:BE:3C:78:D0:4D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rpvXcmISDxmsV_AQoZnMvjx40E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:14:a7:d3:61:14:ee:bc:34:b5:34:c0:3d:81:a6:b9:5f:63:
c5:69:66:63:b4:7f:93:e0:94:68:d1:3b:7e:46:f3:9a:33:16:
3f:84:6f:06:98:1c:5a:d7:62:b9:80:ef:cb:5c:d2:c2:f8:47:
29:21:9d:8a:29:c5:6e:68:ea:ad:7e:58:65:2e:51:66:45:2d:
3c:b7:8c:93:76:05:0c:f2:b3:3e:8a:f7:84:54:36:5c:89:70:
bd:b0:33:6c:95:a6:41:66:6e:62:b7:17:9e:9f:eb:69:9e:25:
b1:db:f3:eb:24:d9:72:53:ad:84:6c:93:69:ce:84:cb:48:c5:
92:5d:77:87:9d:9f:ff:7d:19:11:34:da:76:fb:da:f6:07:5e:
c6:88:95:db:7b:ac:f8:2e:de:80:ff:01:a5:09:65:9c:f9:a6:
2d:d7:aa:2e:2d:28:82:60:0e:cc:04:93:26:b2:71:bc:18:7f:
5a:f6:3d:3b:8d:32:e8:a8:24:95:ef:76:44:1e:25:a6:e0:0f:
39:90:b5:22:6f:39:b0:1f:3b:41:e0:e6:6e:e5:fe:25:e4:5c:
14:55:eb:47:09:20:8b:e0:fc:93:a4:75:87:26:71:8d:bf:5f:
78:f6:bb:51:91:93:03:48:ba:5b:e1:94:55:84:cb:20:bf:63:
3e:b0:14:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org