Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZD3zfdWUWlkV65pmyT0FhoPfXds.roa
File: ZD3zfdWUWlkV65pmyT0FhoPfXds.roa (raw, json)
Hash identifier: sRhQomg4C1anM14DULW8z3jD9MK2R9qNF0Y35Hd4nk0=
Subject key identifier: 64:3D:F3:7D:D5:94:5A:59:15:EB:9A:66:C9:3D:05:86:83:DF:5D:DB
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F32C69D7B1012999D0987EB830712D432
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZD3zfdWUWlkV65pmyT0FhoPfXds.roa
Signing time: Wed 01 May 2024 06:10:28 +0000
ROA not before: Wed 01 May 2024 06:10:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:32:c6:9d:7b:10:12:99:9d:09:87:eb:83:07:12:d4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 1 06:10:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=643df37dd5945a5915eb9a66c93d058683df5ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:fb:39:1f:a7:c5:c9:d9:d6:88:42:41:ec:
b9:13:ee:83:95:a5:22:5b:f7:a7:16:44:bb:47:5f:
d2:bb:82:6f:a6:4e:22:5a:55:7a:a5:57:30:46:7a:
0c:59:e1:e0:8d:0b:fc:ce:25:bf:9a:80:6f:55:48:
69:da:5f:3d:5e:78:4c:f0:d6:39:5f:cb:55:8b:e2:
ef:d8:7c:5a:64:09:4f:20:b6:ab:5a:6b:dc:00:39:
96:8c:20:79:8c:6f:eb:c7:c1:10:1d:5a:6b:41:46:
17:41:44:4d:00:f4:b3:64:ca:dc:e6:cb:f1:2f:d1:
d1:65:30:90:8e:b0:ca:d0:4f:fc:2a:09:5b:38:f4:
a9:6d:02:db:09:19:d1:e3:1b:47:c2:b3:5d:2c:fb:
77:e3:29:cc:57:63:68:3a:7b:13:c4:37:c8:8f:04:
d0:89:5b:6d:2d:5e:ca:e7:fd:40:42:97:5b:7c:bf:
7c:2f:6d:30:0f:55:79:78:92:56:a5:cd:84:f6:36:
7d:20:37:7f:3d:39:31:48:92:5c:da:82:e5:d1:46:
c7:4d:f1:ff:ef:57:94:54:90:8a:1b:51:7f:7a:43:
5b:d3:36:d5:51:78:02:74:5c:1e:3d:8a:44:cf:6e:
84:3d:a8:80:b7:e7:1f:3c:58:76:ca:c0:51:cb:43:
28:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3D:F3:7D:D5:94:5A:59:15:EB:9A:66:C9:3D:05:86:83:DF:5D:DB
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZD3zfdWUWlkV65pmyT0FhoPfXds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:e8:7a:f5:f9:b4:68:d1:cb:cb:ec:ab:f2:c9:c0:59:26:95:
46:ee:a3:9c:3f:e0:98:1a:d4:f7:45:62:72:dd:ff:21:37:ae:
45:a3:5a:6f:1a:36:62:84:d4:dd:89:c6:d7:21:84:db:51:cd:
26:9b:7e:18:b8:e0:0f:9c:e2:d0:34:9a:0f:d3:36:ea:89:1e:
e0:4b:e9:63:dc:31:48:30:53:9e:39:b7:0d:cc:fa:6f:19:92:
3d:14:e1:b5:b3:4b:88:3e:07:65:d2:9b:d7:03:36:36:71:38:
cc:29:40:ff:80:f1:87:7a:d2:8e:88:22:d0:72:0d:96:38:a4:
5c:e3:49:f7:6d:e8:03:87:c7:81:3e:68:80:01:59:e4:a8:cb:
24:21:8b:cf:17:dc:5b:ce:1a:8d:ca:6a:1a:e8:77:51:54:f9:
66:3a:f8:7b:6b:7d:cf:c3:22:08:ba:08:2d:3e:aa:0b:47:74:
04:8f:5a:5a:ab:5e:e8:bc:16:8a:f1:ed:df:be:9d:28:fe:43:
44:2d:c6:0a:91:af:5c:a6:83:3f:7d:65:cb:b7:5a:56:2e:e4:
ff:b4:22:ce:48:6d:af:27:da:33:b7:4c:6a:ed:43:1c:09:3a:
4d:29:ca:cd:3e:3e:fd:e3:bf:2e:ed:58:69:ff:d5:36:67:b1:
bb:1a:12:06
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY8yxp17EBKZnQmH64MHEtQyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTAxMDYxMDI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDNkZjM3ZGQ1OTQ1YTU5MTVlYjlhNjZjOTNkMDU4NjgzZGY1ZGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOb7OR+nxcnZ1ohCQey5E+6DlaUi
W/enFkS7R1/Su4Jvpk4iWlV6pVcwRnoMWeHgjQv8ziW/moBvVUhp2l89XnhM8NY5
X8tVi+Lv2HxaZAlPILarWmvcADmWjCB5jG/rx8EQHVprQUYXQURNAPSzZMrc5svx
L9HRZTCQjrDK0E/8KglbOPSpbQLbCRnR4xtHwrNdLPt34ynMV2NoOnsTxDfIjwTQ
iVttLV7K5/1AQpdbfL98L20wD1V5eJJWpc2E9jZ9IDd/PTkxSJJc2oLl0UbHTfH/
71eUVJCKG1F/ekNb0zbVUXgCdFwePYpEz26EPaiAt+cfPFh2ysBRy0MoJQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGQ9833VlFpZFeuaZsk9BYaD313bMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvWkQzemZkV1VXbGtWNjVwbXlUMEZob1BmWGRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJboevX5tGjRy8vsq/LJ
wFkmlUbuo5w/4Jga1PdFYnLd/yE3rkWjWm8aNmKE1N2JxtchhNtRzSabfhi44A+c
4tA0mg/TNuqJHuBL6WPcMUgwU545tw3M+m8Zkj0U4bWzS4g+B2XSm9cDNjZxOMwp
QP+A8Yd60o6IItByDZY4pFzjSfdt6AOHx4E+aIABWeSoyyQhi88X3FvOGo3Kahro
d1FU+WY6+Htrfc/DIgi6CC0+qgtHdASPWlqrXui8Forx7d++nSj+Q0QtxgqRr1ym
gz99Zcu3WlYu5P+0Is5Iba8n2jO3TGrtQxwJOk0pys0+Pv3jvy7tWGn/1TZnsbsa
EgY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:59 2024 by rpki-client on console-ams.rpki-client.org