Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rvHlZn0uZ5KkJmaSwU5zSFIqqtQ.roa
File: rvHlZn0uZ5KkJmaSwU5zSFIqqtQ.roa (raw, json)
Hash identifier: y0kkchNFxouBm2otnQHmv1HzpaVXO2KpW0cm4FhgkWU=
Subject key identifier: AE:F1:E5:66:7D:2E:67:92:A4:26:66:92:C1:4E:73:48:52:2A:AA:D4
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E773C9DD16F0431B32EAF2C68765EECE5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rvHlZn0uZ5KkJmaSwU5zSFIqqtQ.roa
Signing time: Mon 25 Mar 2024 20:10:45 +0000
ROA not before: Mon 25 Mar 2024 20:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:77:3c:9d:d1:6f:04:31:b3:2e:af:2c:68:76:5e:ec:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 25 20:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aef1e5667d2e6792a4266692c14e7348522aaad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:74:d2:56:0a:46:e2:2f:22:4a:c6:b4:2c:
8f:e2:be:1c:9a:02:ef:dd:fd:4a:c1:af:b8:02:39:
94:7c:0e:08:d4:38:47:50:68:fe:54:41:e8:bc:93:
c5:06:35:6c:4f:8d:02:5a:3d:ed:39:52:63:4c:11:
5f:20:11:9a:54:02:dc:aa:a3:6f:50:dd:31:2d:48:
5f:0e:8f:d7:9d:62:28:1e:41:1d:6a:f2:82:e1:91:
f6:1e:f8:8b:38:9d:8d:3b:15:5f:80:00:42:6e:fe:
24:df:b8:2a:ce:de:bc:28:d9:9b:a9:80:63:f4:37:
06:88:08:8e:94:11:42:d7:39:c4:0b:60:ca:3e:aa:
30:08:ee:83:1a:46:2c:bb:d3:06:e9:5c:44:41:6c:
cf:3c:c1:f7:fa:8d:67:6c:72:fc:bf:6a:85:2f:45:
64:cb:7f:2d:76:0f:ac:59:9a:03:7f:06:b8:a7:14:
84:4d:6f:35:92:a5:0d:16:53:e4:34:9d:62:e8:e7:
9d:bc:b9:d3:6d:af:df:43:6b:c6:bf:ff:c6:bb:82:
c5:18:b9:fb:18:a8:77:2a:ec:ca:e5:b6:6e:da:65:
30:50:39:df:7d:57:20:14:63:46:8c:ec:89:c8:ef:
84:a2:40:11:b0:95:86:f6:bb:cd:c9:13:45:63:62:
6b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F1:E5:66:7D:2E:67:92:A4:26:66:92:C1:4E:73:48:52:2A:AA:D4
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/rvHlZn0uZ5KkJmaSwU5zSFIqqtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:b1:92:d3:83:8c:e9:d1:b3:b0:16:aa:19:22:e1:e1:42:d5:
ee:9c:71:ee:19:d5:e9:7b:39:78:c0:c8:69:91:d5:fe:e6:da:
6a:67:ef:8d:ed:0e:f8:36:4c:d4:b6:b1:f2:f8:73:dd:98:4d:
ba:8d:29:21:fa:b8:75:46:db:75:35:e1:c7:a4:83:db:56:1d:
ed:83:2a:2d:a9:eb:d3:72:41:50:cd:e3:5c:4f:d9:c3:ad:c4:
ab:f2:b3:dd:9f:e7:52:be:cb:ab:20:88:d6:ad:48:81:0d:52:
fb:4a:ba:1f:e2:04:64:d3:8b:ab:e6:64:85:dc:44:6a:e9:b0:
a6:7f:1c:12:4d:75:f7:77:9b:e8:3f:87:71:f7:90:05:ef:df:
ca:6b:ff:02:40:6e:78:b5:d9:02:3a:b2:58:ca:50:3d:87:51:
00:2a:ac:be:1e:0e:2e:13:67:a2:f5:73:6d:87:11:2a:0b:ca:
b7:93:d8:77:73:6a:fe:ac:67:5c:19:c0:32:67:cc:60:14:20:
12:92:10:0b:2f:63:6f:7a:c6:2f:2f:66:5e:d1:34:ee:8f:55:
ed:0c:40:d0:e5:dd:51:09:84:52:85:ce:e2:62:0d:4b:88:95:
6a:63:73:d1:2a:cf:3d:fd:2f:a2:a0:33:9b:18:03:12:de:8c:
4b:78:81:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:52 2024 by rpki-client on console-ams.rpki-client.org