Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tWZRFUpHmZys7mdC4hMUlrEt0OY.roa
File: tWZRFUpHmZys7mdC4hMUlrEt0OY.roa (raw, json)
Hash identifier: ahTS/C05BhblJhLBkMyvhe4cttrOFK0BqI2hK0S6rBY=
Subject key identifier: B5:66:51:15:4A:47:99:9C:AC:EE:67:42:E2:13:14:96:B1:2D:D0:E6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E2B80E07ACBE01BE95CBBAEB39924D8BB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tWZRFUpHmZys7mdC4hMUlrEt0OY.roa
Signing time: Mon 11 Mar 2024 03:14:10 +0000
ROA not before: Mon 11 Mar 2024 03:14:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2b:80:e0:7a:cb:e0:1b:e9:5c:bb:ae:b3:99:24:d8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 11 03:14:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b56651154a47999cacee6742e2131496b12dd0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0e:f2:9b:ae:a9:95:73:e5:c3:f6:eb:83:90:
2b:a3:f9:f4:d2:53:ff:35:98:7a:63:bb:78:96:da:
bc:01:c8:e1:16:e4:0f:e3:00:63:16:6c:7d:36:c8:
74:47:cd:4a:11:50:fa:59:68:0c:35:ae:40:dc:e5:
d2:51:c7:db:d2:ad:4d:08:21:9f:7b:12:dd:4f:ea:
d6:b3:72:58:90:4d:4c:8b:bd:6f:4f:e6:8e:5c:47:
13:14:8b:3b:80:83:6e:a5:79:b0:08:f1:90:a1:4b:
a1:6c:a7:d1:ce:5e:99:f0:e5:6d:9f:65:3a:f5:12:
56:4d:9c:0d:1a:88:7c:da:dc:ee:03:71:34:44:09:
00:22:96:92:a4:f7:a4:e0:90:2f:3a:87:4a:0f:4e:
35:62:01:db:e1:7d:b6:b5:09:a6:58:18:d5:29:03:
26:b0:7c:0a:2a:9d:15:94:e3:a1:2f:46:14:c4:04:
32:40:b7:33:bf:0e:36:ad:73:01:dd:35:34:9a:b9:
fb:d3:e1:42:7b:84:53:88:75:d7:1c:49:16:52:3f:
12:4a:2e:db:0c:cb:74:b4:a0:34:52:59:52:04:5c:
b9:ee:86:16:3d:71:c6:45:8c:4c:06:c4:2b:ae:5a:
a0:d1:2e:12:58:a9:85:6e:c0:7c:4b:e2:62:24:52:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:66:51:15:4A:47:99:9C:AC:EE:67:42:E2:13:14:96:B1:2D:D0:E6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tWZRFUpHmZys7mdC4hMUlrEt0OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:9e:0c:d7:57:b1:81:e0:9f:e0:65:16:59:0c:3b:b1:5a:33:
5e:07:54:ab:0d:b2:23:ca:8a:66:53:bd:eb:1d:89:56:fe:c4:
e5:51:dc:e6:ac:9f:74:70:94:1f:8e:75:a3:b0:40:6c:73:fe:
7e:c8:6a:d9:a7:62:1f:e9:ad:f2:87:e9:91:13:8c:e2:2a:e5:
a0:d4:eb:81:84:42:96:6f:3d:15:14:cb:6b:54:5e:f3:02:e8:
fe:b4:dd:13:b9:22:05:99:de:1e:06:4d:f8:80:aa:fb:6e:bf:
f9:1a:3c:97:b5:16:be:21:0d:36:af:2a:5e:5c:1f:72:fc:9e:
04:2f:98:de:49:cd:73:de:92:85:8e:19:7e:a5:a1:df:a0:b4:
60:8f:80:70:00:5e:04:55:08:47:0b:d7:60:2d:1f:f8:39:f3:
c1:56:19:65:8a:b5:ce:6e:8d:c3:1b:77:55:69:7f:5d:85:34:
42:69:a3:06:cf:19:c5:12:8c:85:f5:f1:3e:0e:31:60:2a:fa:
d3:44:3c:68:8d:00:01:b1:af:f3:17:71:b8:82:c2:04:ba:04:
e8:55:16:72:0c:e1:88:42:69:99:6e:b4:ba:81:36:4d:6c:f1:
d5:30:4b:78:1a:e9:86:b0:d0:c8:01:60:af:88:43:87:c2:f3:
4b:e4:81:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org