Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/umkTzoVphKh3p5dCtA4Y8fHhKf4.roa
File: umkTzoVphKh3p5dCtA4Y8fHhKf4.roa (raw, json)
Hash identifier: FURchD94LSyzjFyfeZv+r6E8eTC3kDad1vBoUrI254Y=
Subject key identifier: BA:69:13:CE:85:69:84:A8:77:A7:97:42:B4:0E:18:F1:F1:E1:29:FE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB2A7536CA3E66F053D97B712F7C8BA75
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/umkTzoVphKh3p5dCtA4Y8fHhKf4.roa
Signing time: Sat 06 Apr 2024 09:04:54 +0000
ROA not before: Sat 06 Apr 2024 09:04:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:b2a6:c360/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b2:a7:53:6c:a3:e6:6f:05:3d:97:b7:12:f7:c8:ba:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 6 09:04:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba6913ce856984a877a79742b40e18f1f1e129fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f7:8d:b0:af:c4:02:ff:90:9f:dc:b2:f5:cf:
ea:47:b5:2b:1c:01:86:fd:9c:fe:f1:12:4c:26:4c:
b8:11:48:aa:0e:92:4e:eb:6e:16:62:2a:61:64:04:
fe:e5:ef:43:f4:27:28:d0:44:ed:05:0d:a2:4d:2c:
f7:85:ab:62:2a:2e:16:8e:ff:64:16:0e:c6:07:53:
5f:65:95:ac:ae:c8:4e:9f:8c:21:36:b0:94:a4:7b:
84:2f:00:5d:db:ea:bd:ff:c7:bb:df:26:0f:c0:b6:
46:de:b2:da:83:c8:26:28:e3:a8:40:9f:d8:b8:c4:
49:7e:4f:92:0d:d5:4b:53:89:be:c3:90:e5:cd:20:
9e:4d:da:75:16:cb:d3:7d:47:34:4b:8c:36:70:e8:
71:a1:d6:ec:69:1d:3f:38:98:94:f8:91:6d:1f:33:
a1:ed:0d:b1:8b:88:93:fb:91:61:9e:cd:f3:73:15:
af:4a:3f:c8:28:20:c2:8d:59:3e:29:30:dc:b0:63:
68:66:c6:39:19:4a:4c:fe:da:c6:f4:da:42:f4:01:
bc:f5:33:b1:b3:93:2f:a0:64:2e:c1:c2:35:f6:69:
8c:ee:7f:bc:76:38:b1:d5:bb:f0:a6:8c:61:3d:4b:
92:2c:0d:e4:cc:fd:cc:eb:2e:78:f0:f2:5c:eb:5d:
fe:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:69:13:CE:85:69:84:A8:77:A7:97:42:B4:0E:18:F1:F1:E1:29:FE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/umkTzoVphKh3p5dCtA4Y8fHhKf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:93:35:02:56:47:37:27:8b:1e:23:a8:1d:d1:f4:23:4d:e6:
1a:81:60:7d:9e:e5:71:99:b9:66:17:5c:be:70:0b:cc:7f:fe:
5a:ef:00:ac:a7:e3:b7:2f:4b:0e:1b:75:3a:35:8c:18:93:1e:
3b:3a:42:3e:aa:c5:f2:34:36:71:33:06:25:79:73:10:88:8b:
cf:e8:46:db:a6:31:05:ad:9a:9e:42:e5:e1:0f:58:c3:59:0b:
91:7b:b9:88:12:be:b6:a3:09:2d:f9:76:fc:c7:b1:2a:08:25:
46:0c:4b:df:b4:c9:dd:5f:f4:09:20:29:5a:49:ff:c8:6f:b2:
90:50:32:08:8b:e5:54:f0:80:10:0a:b3:24:fd:10:63:50:0b:
f1:ac:a1:6d:38:b0:8f:f6:20:78:88:c3:02:96:f8:30:87:b5:
ce:14:64:99:19:7f:0b:75:05:f4:4b:81:27:46:ae:b7:20:b1:
b4:52:01:13:8b:89:b6:2c:96:45:14:23:5e:e3:d5:a4:f1:9a:
f3:bc:6b:06:3b:c4:96:46:12:e9:3d:e8:ac:e8:03:af:d4:bd:
fe:c6:09:c5:3d:2f:ef:4c:d7:62:71:7a:1a:37:28:41:4e:05:
13:f5:07:da:6d:77:01:f6:2f:25:aa:9f:b7:7d:32:5b:6c:ec:
f7:3f:80:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org