Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/y_pe_195_aMrmmEf8OO-CRIbbHI.roa
File: y_pe_195_aMrmmEf8OO-CRIbbHI.roa (raw, json)
Hash identifier: b0jFqjaW0uPD7qQKw8JbkTTHOOlOSHkNYnqhMet+y4s=
Subject key identifier: CB:FA:5E:FF:5F:79:FD:A3:2B:9A:61:1F:F0:E3:BE:09:12:1B:6C:72
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E0850ABAFF45131C9DD07F6620787494B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/y_pe_195_aMrmmEf8OO-CRIbbHI.roa
Signing time: Mon 04 Mar 2024 07:14:48 +0000
ROA not before: Mon 04 Mar 2024 07:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:08:50:ab:af:f4:51:31:c9:dd:07:f6:62:07:87:49:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 4 07:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbfa5eff5f79fda32b9a611ff0e3be09121b6c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7b:05:a1:e1:64:99:01:64:70:19:6d:66:6e:
ab:a7:56:85:88:3f:4e:4d:bf:ac:4d:0f:dc:66:61:
c6:09:ca:ba:a3:6a:ab:9d:c2:62:e7:11:fe:25:ad:
87:17:c0:96:45:9f:04:30:13:c5:5b:18:f5:28:d9:
ed:e8:ce:51:6b:60:6b:a5:fc:55:0a:55:a0:cf:25:
61:d2:46:6a:6a:58:0a:4a:fc:fc:90:e3:12:f3:ea:
6b:0a:ea:00:9a:f9:25:aa:33:9b:0f:ad:6f:59:98:
07:83:f4:95:f3:3d:f4:13:dc:fe:54:e3:7b:fe:6c:
2f:ae:91:0e:28:9f:a9:ef:14:e0:48:ce:0b:1e:92:
88:11:0e:66:16:9f:cb:b9:69:74:53:41:2e:0d:4d:
9e:01:7a:a0:d6:b5:46:ba:02:b9:48:03:b9:18:67:
7a:40:a1:15:97:4b:80:5d:c6:72:74:ca:fa:d2:9b:
81:c3:92:16:e5:c0:f9:90:e2:de:4f:b7:5b:6e:fe:
aa:ef:ec:42:21:ec:b4:f6:e5:83:fd:f9:82:d4:76:
9d:a4:29:fb:e4:34:b2:4b:c2:af:7f:ba:6a:bd:b1:
e8:bc:8b:25:fa:5e:75:ac:14:42:10:c8:ae:87:d0:
9c:b0:c5:dd:75:89:e0:4a:6c:69:49:a2:f5:2b:79:
f9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FA:5E:FF:5F:79:FD:A3:2B:9A:61:1F:F0:E3:BE:09:12:1B:6C:72
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/y_pe_195_aMrmmEf8OO-CRIbbHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:e0:15:c5:a5:c5:d7:46:e0:66:b1:1f:73:30:01:25:89:7f:
f9:d1:b8:c1:8b:05:db:1c:24:f4:30:0b:1e:2f:51:f4:82:83:
3e:09:77:33:35:90:c4:34:bb:f3:89:7f:ac:08:79:4d:17:d2:
33:06:89:cd:50:9b:9f:fb:e0:34:9e:52:c2:cb:57:b0:ed:2c:
c0:b5:60:b2:26:ff:0c:93:38:bd:f5:9d:1c:d2:61:f3:88:d7:
c0:45:31:f6:b9:d1:ce:9e:11:c5:bd:ce:77:5b:46:b3:a9:08:
27:ef:51:72:59:de:4b:6c:bf:48:6e:db:cd:85:8b:b2:c0:6e:
a5:3a:80:3c:98:ba:2f:52:22:e6:a0:29:a0:db:01:61:8c:44:
53:3c:da:fb:76:30:b1:97:c2:2d:58:00:b1:c5:87:af:aa:ee:
26:cf:f0:09:82:23:d6:b0:51:a0:19:19:c8:16:c9:73:59:9c:
af:3f:ea:61:8d:8b:9c:f9:e8:f4:85:58:8d:06:8d:64:38:df:
17:3e:e7:e7:60:21:db:e5:93:dd:6e:61:95:06:34:ab:90:86:
5f:03:fe:27:b8:0b:3c:ab:1e:8d:f2:24:4e:3f:a0:1f:2c:2c:
bf:f4:99:23:97:84:81:9d:b4:8e:fb:ea:51:41:c3:37:c3:e6:
28:2c:fd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:52 2024 by rpki-client on console-ams.rpki-client.org