Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xJF4PRKTk1_WBcm8eFNBc0TO9Tg.roa
File: xJF4PRKTk1_WBcm8eFNBc0TO9Tg.roa (raw, json)
Hash identifier: tRVTkuuEVVortcYSUpOqyXp2vEQ4nnER25mNHWiEsSI=
Subject key identifier: C4:91:78:3D:12:93:93:5F:D6:05:C9:BC:78:53:41:73:44:CE:F5:38
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D4A9E38FBD2CA818BACBEFBDB1D0EF5BC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xJF4PRKTk1_WBcm8eFNBc0TO9Tg.roa
Signing time: Sat 27 Jan 2024 11:11:39 +0000
ROA not before: Sat 27 Jan 2024 11:11:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4a:9e:38:fb:d2:ca:81:8b:ac:be:fb:db:1d:0e:f5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 27 11:11:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c491783d1293935fd605c9bc7853417344cef538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:d9:b0:a2:f0:fc:7d:ae:5d:9f:61:d1:0f:
bd:03:ae:df:cf:9b:62:06:9a:58:21:5e:98:15:ea:
43:4d:86:0e:45:40:43:a6:14:47:77:a5:68:13:11:
b3:b5:be:e2:53:8d:56:fb:77:85:07:5e:83:4d:c9:
58:36:58:11:86:61:0a:1f:96:7f:03:ec:49:e6:bd:
c4:36:ff:08:32:e5:e9:0c:d6:10:26:94:2d:b4:c2:
ae:46:29:00:0b:4e:08:b1:48:b8:b7:f2:4a:0f:ec:
e2:e4:44:15:54:2e:72:87:cc:5a:ca:1f:cf:b2:fe:
15:2f:75:c9:90:81:c9:bb:70:97:8e:2d:97:82:3e:
90:9a:56:1f:29:85:6a:08:57:6b:b9:21:44:0a:29:
cf:6c:5b:c0:8e:2c:cb:41:1d:fe:13:27:f3:f7:14:
0c:33:90:49:d9:4c:88:11:ee:5d:bc:34:35:1b:0d:
a3:13:9b:30:6d:d6:bd:cd:24:1e:96:04:b4:05:f6:
e9:ea:d2:2f:60:9d:ea:af:b1:4c:54:51:29:75:1d:
15:b1:5a:f0:68:09:60:58:ea:6d:82:15:8e:a6:a8:
11:2d:c3:c4:2d:b1:5a:ae:42:d2:45:5a:13:bf:da:
da:25:c6:ee:cd:c1:c4:7b:fb:8b:9f:2d:dc:2e:bd:
52:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:91:78:3D:12:93:93:5F:D6:05:C9:BC:78:53:41:73:44:CE:F5:38
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xJF4PRKTk1_WBcm8eFNBc0TO9Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:44:90:5e:df:0e:34:fe:77:dc:85:a4:8e:90:5b:eb:30:7e:
07:b3:14:e5:82:1c:47:d3:85:cd:f7:3b:16:ce:f6:6f:8d:cd:
24:c1:89:c0:14:83:c7:a1:7d:e0:c5:d1:15:a3:53:08:d0:af:
3d:df:c3:34:da:47:5b:49:1c:57:91:5a:77:87:54:eb:cf:6b:
38:84:22:62:aa:d1:db:88:16:c4:c7:66:47:ff:f2:ae:54:be:
8d:f7:ae:9f:c2:36:20:e8:e9:b7:97:5f:c0:16:7f:9e:31:67:
ac:b0:ca:64:d9:2b:60:8d:60:1b:b3:82:25:0e:56:f8:2c:75:
ac:19:1f:4b:b1:90:99:e6:6e:7c:f6:a9:5a:51:8a:90:13:a2:
cc:37:d6:5e:28:ff:b2:e6:c8:64:58:c8:f9:2e:94:cf:06:7c:
2c:15:b5:79:c8:b3:1c:d6:2a:e4:56:9e:f7:44:97:65:f3:db:
48:6a:c4:72:dd:b4:95:96:14:55:a1:a5:e0:e7:87:8a:1a:8c:
c8:88:76:99:c5:42:20:12:53:e7:8c:bf:e5:fc:5b:ec:78:09:
47:6f:ca:c9:b0:1a:02:aa:5a:ae:a5:0b:c4:3b:8d:9a:45:32:
e2:ca:e8:5d:d5:5e:45:f6:48:2c:45:27:a9:e4:a7:74:3d:5d:
0d:4f:bd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:52 2024 by rpki-client on console-ams.rpki-client.org