Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/v-T_jz4vnp0bYPY7JVmPfatW9dI.roa
File: v-T_jz4vnp0bYPY7JVmPfatW9dI.roa (raw, json)
Hash identifier: ZZKe+Am5NRu/aQ+2yuo1diQ0jYvMdKMz4fzzYzQB9dc=
Subject key identifier: BF:E4:FF:8F:3E:2F:9E:9D:1B:60:F6:3B:25:59:8F:7D:AB:56:F5:D2
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C95BDE1376B8ACD59A05336DC247E45B7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/v-T_jz4vnp0bYPY7JVmPfatW9dI.roa
Signing time: Sat 23 Dec 2023 08:14:58 +0000
ROA not before: Sat 23 Dec 2023 08:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:95:bd:e1:37:6b:8a:cd:59:a0:53:36:dc:24:7e:45:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 23 08:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfe4ff8f3e2f9e9d1b60f63b25598f7dab56f5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:34:1a:c0:60:2d:ff:8f:e0:67:51:23:dd:42:
7c:77:25:4f:7f:2b:6b:ad:28:38:31:78:06:ac:c5:
5d:d6:0b:59:4d:a1:a3:c5:8f:4f:2d:db:0e:40:a8:
d1:45:cf:01:ee:9b:14:e7:30:be:a6:c5:ae:6e:7a:
7f:f3:d0:3f:6f:56:d5:de:0f:39:8f:dd:f0:9d:6c:
bf:2e:55:19:fa:b0:45:82:a5:dd:ba:7d:48:78:b1:
7c:e1:a5:58:f0:58:fa:46:c2:21:fd:2a:70:09:0d:
2f:6e:69:45:f2:2d:c9:b6:f2:41:94:02:40:ce:41:
6f:2d:c3:e1:56:b1:62:90:94:ac:25:88:b1:d7:a4:
97:be:a7:25:ce:cc:c4:c4:67:ba:24:95:e4:b2:26:
12:99:38:af:09:e8:41:f7:3f:0a:62:21:de:89:36:
62:83:83:4f:c2:12:3f:73:d9:51:9e:39:9c:ea:2d:
be:de:7c:db:ca:cf:a1:33:1b:60:85:88:d3:88:1e:
0b:67:00:9e:5c:b1:28:37:f8:71:7f:ef:5c:20:11:
1d:48:b2:85:88:a9:02:9f:7b:d8:59:6c:44:a2:da:
34:ed:75:51:39:d0:f0:bf:2a:33:04:62:35:36:e3:
41:ad:5a:be:e1:3e:74:e6:a6:5d:af:5a:f8:18:fa:
0a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E4:FF:8F:3E:2F:9E:9D:1B:60:F6:3B:25:59:8F:7D:AB:56:F5:D2
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/v-T_jz4vnp0bYPY7JVmPfatW9dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:2e:76:7f:7c:5b:ff:3f:38:4e:b4:87:de:e9:03:eb:09:82:
75:28:3f:0b:de:1e:ab:f2:54:f6:52:18:bd:34:33:26:b5:31:
e3:1b:3d:45:49:66:ca:93:99:6b:4a:7a:0b:39:ed:1f:44:5c:
f7:27:2c:73:15:32:2f:a7:71:4c:dd:6e:f7:a6:01:cd:10:54:
38:d2:5a:77:4e:b2:52:69:c8:bb:f0:ba:f8:10:a5:05:fe:b1:
f8:cf:cf:ee:7b:d8:2f:bd:e7:53:0e:ed:ac:95:03:b2:4d:83:
dc:3d:d4:83:e3:e4:41:29:4d:cf:4b:a9:50:81:4f:3e:13:cd:
e1:50:b1:47:b3:08:a8:71:0f:e6:d2:c3:33:66:dd:8e:a0:00:
27:96:12:2e:56:d5:11:b7:5a:49:c4:be:7d:87:20:8b:d7:4b:
29:73:45:94:b6:c7:b4:34:b3:1d:d7:2e:63:55:58:1d:9c:5f:
27:e5:2b:4e:a7:f5:03:28:6a:d3:89:8c:86:07:30:81:ea:67:
65:cc:8e:dc:d6:c2:a5:04:45:92:b0:00:92:fc:07:e5:e0:02:
be:a9:24:ce:8a:39:aa:cb:06:07:4a:de:7a:9f:ab:14:91:01:
68:72:cb:99:22:a8:10:36:5c:af:80:f7:5d:5b:72:6a:cd:20:
91:19:36:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org