Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xW_eFm2SeW_VfzL5b3K3ozdAZic.roa
File: xW_eFm2SeW_VfzL5b3K3ozdAZic.roa (raw, json)
Hash identifier: c/bgvI/QoipXth836TrrB0Zc1is208dyM3HZMcUGpk0=
Subject key identifier: C5:6F:DE:16:6D:92:79:6F:D5:7F:32:F9:6F:72:B7:A3:37:40:66:27
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DD5731FB70E020B67545967D2ABC64882
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xW_eFm2SeW_VfzL5b3K3ozdAZic.roa
Signing time: Fri 23 Feb 2024 10:11:48 +0000
ROA not before: Fri 23 Feb 2024 10:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:73:1f:b7:0e:02:0b:67:54:59:67:d2:ab:c6:48:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 23 10:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c56fde166d92796fd57f32f96f72b7a337406627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:18:e7:75:63:29:2d:9d:84:53:b6:2a:33:1e:
83:6e:9b:36:5e:1c:57:03:4a:8f:43:d1:96:95:44:
23:ac:91:7b:3f:c1:3e:71:eb:76:69:dd:fc:73:a5:
95:95:b0:fe:a1:cf:c7:95:75:c8:3d:c9:41:e9:66:
a1:24:2b:a5:2c:f8:c3:f7:6a:1d:ce:4e:59:8c:ec:
bb:c7:40:34:4f:c2:7e:57:28:da:7e:a2:a2:17:ed:
fc:0e:b6:76:c6:89:63:61:88:b8:5c:9b:d6:03:ad:
98:ae:da:0e:d7:0d:27:80:3f:8f:01:01:18:71:b7:
95:78:ce:16:1d:3d:02:68:33:00:3d:ed:43:45:52:
07:7b:83:d2:3f:fd:7c:35:24:ce:05:c1:ad:80:0e:
eb:ad:d2:00:fd:1f:7d:f7:47:fe:6b:27:35:48:6f:
a2:c8:ef:96:2c:53:5f:4a:8f:fe:24:3b:f1:37:34:
11:18:9c:15:2a:ee:43:28:dd:a3:fd:8f:8f:4d:79:
79:4c:03:e2:65:9d:10:93:01:7d:fe:e4:bc:dc:31:
4e:c8:aa:68:54:9d:69:83:f7:a6:af:44:eb:63:33:
1a:5e:48:8c:dc:24:9e:24:4b:00:ca:9c:37:85:ef:
ff:18:4a:76:f8:e4:e2:74:e6:42:43:07:a6:7d:87:
8b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6F:DE:16:6D:92:79:6F:D5:7F:32:F9:6F:72:B7:A3:37:40:66:27
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xW_eFm2SeW_VfzL5b3K3ozdAZic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:df:9f:7a:71:5a:a9:8a:79:9f:fb:6b:82:b0:39:05:0b:bc:
f0:41:88:01:40:36:81:a9:01:ee:ba:b9:9a:97:49:cb:7e:dd:
13:44:05:56:b4:0d:e7:98:50:e9:4c:59:fe:bc:3f:9c:c8:50:
88:bf:0a:4b:71:db:a1:fe:3d:13:e0:72:03:b0:0b:e5:76:b7:
8d:56:51:2f:ee:73:5a:af:60:b4:83:f9:6d:fa:86:a1:46:d1:
1b:ae:db:86:56:16:dd:2a:b1:21:e6:78:3c:7c:ee:95:e5:cb:
95:b2:4f:92:dd:93:55:1a:42:e9:64:6b:3f:22:54:2c:4c:be:
e8:6e:10:79:ad:d6:f9:9d:f5:9d:3e:b0:ce:28:4d:eb:19:dc:
df:d3:9f:47:0f:30:62:e8:da:96:cc:01:99:aa:f7:97:8b:f5:
f1:03:c8:48:b7:04:fb:5a:ef:ed:74:1d:ad:5e:2a:b1:f5:50:
52:75:8c:9c:18:35:1f:ee:e3:53:9d:04:81:49:11:07:4d:3d:
ea:27:ae:ea:1e:ac:2e:d0:6a:48:a8:06:e2:79:8d:01:d1:91:
cc:a4:b6:9b:aa:f5:d8:ee:3b:fe:7f:76:93:2c:61:47:b9:c4:
b3:c5:64:dd:35:55:94:33:73:8f:f6:a0:74:80:ad:ee:2b:0c:
63:42:29:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org