Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tJfAC8cWmfMV-6Qlac_sw8NV3BA.roa
File: tJfAC8cWmfMV-6Qlac_sw8NV3BA.roa (raw, json)
Hash identifier: dTIHOATHrblz0K0D8f1D1XqJwJfw0pb9CC/asHuYlcw=
Subject key identifier: B4:97:C0:0B:C7:16:99:F3:15:FB:A4:25:69:CF:EC:C3:C3:55:DC:10
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E0BBFC549ACEA4F975BFCBD43CB55844C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tJfAC8cWmfMV-6Qlac_sw8NV3BA.roa
Signing time: Mon 04 Mar 2024 23:15:01 +0000
ROA not before: Mon 04 Mar 2024 23:15:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0b:bf:c5:49:ac:ea:4f:97:5b:fc:bd:43:cb:55:84:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 4 23:15:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b497c00bc71699f315fba42569cfecc3c355dc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:01:ee:17:3f:40:0f:5d:59:bb:cb:cb:dd:
12:92:b5:27:55:f5:ba:ae:4c:e5:01:49:29:d6:12:
00:1a:19:10:bf:93:f2:77:57:06:ea:40:f6:70:d3:
ca:6f:30:90:57:7a:e6:1c:22:ea:ce:2b:55:22:47:
90:1d:d2:63:ef:d1:d4:36:54:5a:84:18:dc:1d:6e:
c7:d1:21:b2:35:03:ba:2f:4d:e1:b8:51:01:aa:1b:
c2:58:b8:5c:ba:1e:9e:ba:f8:c9:99:e9:20:d1:31:
d2:38:22:e6:ab:56:10:ad:c4:09:7e:db:1c:fc:8e:
81:ee:22:2e:91:e2:f0:96:57:6b:de:8d:60:e8:6a:
db:0f:84:ce:28:af:66:84:c6:8e:b7:52:9f:90:d6:
0e:c2:00:a8:f9:56:47:3d:cc:c7:9d:10:d8:f9:fc:
fb:8d:a9:1a:4f:a7:f9:c8:96:8a:0b:5d:56:af:4e:
dc:66:80:e8:ec:7d:2c:73:6d:ef:8b:cc:c9:2b:8f:
eb:e2:22:1a:18:7d:72:08:00:be:73:7f:f0:72:a3:
ef:68:15:39:f6:a7:65:96:2e:d1:12:7a:96:1e:f3:
10:94:a5:bd:0a:4f:01:70:7d:be:03:55:15:f0:4b:
ba:71:e4:c7:e0:6a:91:21:b1:78:40:ce:22:56:00:
e3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:97:C0:0B:C7:16:99:F3:15:FB:A4:25:69:CF:EC:C3:C3:55:DC:10
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tJfAC8cWmfMV-6Qlac_sw8NV3BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:a0:50:4e:ab:42:cc:dc:27:d6:cf:a1:09:a6:1f:f4:20:7c:
11:20:bb:d5:39:97:2c:d9:21:cf:77:e0:df:17:72:e0:5d:f1:
6e:bd:cb:51:2b:6f:91:25:c2:0f:c0:00:44:e1:a4:72:70:d7:
b2:07:9c:3b:b3:67:88:b4:63:9f:fd:13:23:43:4f:2e:c7:89:
ad:8d:6c:d8:34:e1:44:50:fe:fb:02:45:8d:78:1d:f0:93:3c:
f8:45:fb:a5:a7:50:50:e8:71:77:d6:99:bc:a0:8a:c4:b2:4c:
dd:8e:60:da:ab:ad:85:a0:46:8e:37:b5:80:a5:41:7b:81:f8:
13:7e:c4:be:c7:3a:2a:5d:a4:b7:c4:20:ca:87:3c:74:e3:9e:
6e:dd:a0:5c:2f:3b:eb:e4:86:b7:11:de:05:cb:ad:32:de:28:
7a:94:65:a4:8c:87:39:b4:31:32:b3:28:79:e3:01:48:90:53:
94:b8:a3:7f:21:1d:91:e6:31:89:05:71:c3:31:4f:2b:4b:a7:
c6:29:9d:bb:7c:81:81:7f:77:13:ce:96:b7:52:dd:34:c3:1e:
07:e6:9d:6d:dd:4a:27:a0:db:86:4d:0e:06:b9:ff:92:51:34:
f2:43:13:81:da:ab:08:13:ee:3d:10:86:3f:ab:68:65:50:b3:
5e:36:b7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:52 2024 by rpki-client on console-ams.rpki-client.org