Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZxX8-RuCXizVp0ix-xWcB_cNuVo.roa
File: ZxX8-RuCXizVp0ix-xWcB_cNuVo.roa (raw, json)
Hash identifier: qvVpkkYmtJLFaGec8qgYzoKnw7T4Sz3TBQst9Ub6QMI=
Subject key identifier: 67:15:FC:F9:1B:82:5E:2C:D5:A7:48:B1:FB:15:9C:07:F7:0D:B9:5A
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F280EB239EAED92B9F6C6C8540872CCCE
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZxX8-RuCXizVp0ix-xWcB_cNuVo.roa
Signing time: Mon 29 Apr 2024 04:13:22 +0000
ROA not before: Mon 29 Apr 2024 04:13:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:28:0e:b2:39:ea:ed:92:b9:f6:c6:c8:54:08:72:cc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 29 04:13:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6715fcf91b825e2cd5a748b1fb159c07f70db95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:47:bc:b6:5c:fc:a3:cf:6b:f3:bc:f8:ed:
27:8f:2d:cf:62:a6:ec:93:61:be:8a:eb:41:bc:64:
18:69:37:10:b9:22:73:cc:8e:58:ff:44:be:88:2c:
39:a0:fc:7d:94:b4:ac:91:f5:1c:b1:42:8d:41:c6:
a8:6c:64:2b:43:65:eb:29:5f:10:91:be:8a:f9:ed:
22:32:51:5e:50:14:24:c1:42:39:1f:67:c1:33:8f:
d3:26:b0:d1:2b:2e:33:38:03:15:44:4b:81:b9:66:
41:fa:73:2f:3e:2a:fb:53:15:83:00:07:db:bc:c8:
96:6b:45:fd:f9:32:07:3b:80:a4:e9:6c:ff:32:47:
61:09:b8:76:04:4e:f5:c4:14:91:9f:0a:bb:4f:da:
24:e3:e2:45:c5:cb:8c:5d:35:ca:55:5f:ce:00:4f:
5d:6e:6d:b5:9c:25:2a:3b:cd:5a:50:76:34:4c:ae:
c8:44:3c:34:51:a6:6d:43:0d:8e:50:6b:c4:ed:28:
32:3d:c1:cf:39:3c:2f:93:73:ce:d9:c4:46:32:db:
95:66:1f:2a:55:34:2d:b8:f0:45:e8:97:49:6d:61:
3c:7a:48:ee:7f:28:6c:08:54:b5:e3:11:60:c0:73:
fb:bf:01:42:00:55:61:d9:dc:82:c1:c1:86:47:14:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:15:FC:F9:1B:82:5E:2C:D5:A7:48:B1:FB:15:9C:07:F7:0D:B9:5A
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZxX8-RuCXizVp0ix-xWcB_cNuVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
Signature Algorithm: sha256WithRSAEncryption
91:c3:4c:27:62:1f:ef:d1:1d:a2:50:3b:98:a5:e7:a0:f8:ab:
a7:d6:56:45:dd:d7:b2:bf:26:f3:2d:20:84:ac:68:a1:1f:f4:
de:fe:b1:64:4c:e9:5b:c1:89:5c:24:fd:88:06:3c:72:58:de:
c0:3b:c6:9b:c7:5b:30:5b:86:8f:14:ae:05:43:d8:c7:72:79:
68:38:91:90:d5:32:f2:9e:b0:c0:cd:f0:df:87:60:3a:46:2b:
ca:04:db:fe:7e:32:fe:d5:e5:fe:75:57:50:5c:66:0d:e1:58:
83:f8:cf:73:a4:a6:3e:47:74:b7:74:c6:54:3e:04:48:07:5c:
c9:cf:87:e3:41:56:14:a2:cc:af:c7:09:3d:55:98:6d:b0:20:
44:0f:50:ad:ea:f5:20:ac:3d:72:46:a1:f3:2d:16:30:f9:82:
35:ea:72:d7:42:68:b8:92:4a:a4:3c:b6:2b:53:93:ba:d8:6a:
37:73:b8:86:5a:49:dd:88:da:10:1c:90:78:a5:ae:a5:47:98:
65:1b:49:dc:7f:61:5e:6d:1d:51:45:83:b7:65:8a:ad:d8:6b:
51:64:d1:ff:68:b9:30:8b:ca:2c:2e:72:fa:33:c4:65:93:72:
a5:4f:5c:dd:6e:0e:28:62:80:9b:81:74:d2:b5:e6:d5:e8:87:
14:89:b9:83
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAY8oDrI56u2SufbGyFQIcszOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNDI5MDQxMzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzE1ZmNmOTFiODI1ZTJjZDVhNzQ4YjFmYjE1OWMwN2Y3MGRiOTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLFHvLZc/KPPa/O8+O0njy3PYqbs
k2G+iutBvGQYaTcQuSJzzI5Y/0S+iCw5oPx9lLSskfUcsUKNQcaobGQrQ2XrKV8Q
kb6K+e0iMlFeUBQkwUI5H2fBM4/TJrDRKy4zOAMVREuBuWZB+nMvPir7UxWDAAfb
vMiWa0X9+TIHO4Ck6Wz/MkdhCbh2BE71xBSRnwq7T9ok4+JFxcuMXTXKVV/OAE9d
bm21nCUqO81aUHY0TK7IRDw0UaZtQw2OUGvE7SgyPcHPOTwvk3PO2cRGMtuVZh8q
VTQtuPBF6JdJbWE8ekjufyhsCFS14xFgwHP7vwFCAFVh2dyCwcGGRxR9PwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFGcV/Pkbgl4s1adIsfsVnAf3DblaMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvWnhYOC1SdUNYaXpWcDBpeC14V2NCX2NOdVZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAMBAIAATAGAwQDwQAYMBkE
AgACMBMDEQAgAQZ8AGT//wAAAY8FQ55BMA0GCSqGSIb3DQEBCwUAA4IBAQCRw0wn
Yh/v0R2iUDuYpeeg+Kun1lZF3deyvybzLSCErGihH/Te/rFkTOlbwYlcJP2IBjxy
WN7AO8abx1swW4aPFK4FQ9jHcnloOJGQ1TLynrDAzfDfh2A6RivKBNv+fjL+1eX+
dVdQXGYN4ViD+M9zpKY+R3S3dMZUPgRIB1zJz4fjQVYUosyvxwk9VZhtsCBED1Ct
6vUgrD1yRqHzLRYw+YI16nLXQmi4kkqkPLYrU5O62Go3c7iGWkndiNoQHJB4pa6l
R5hlG0ncf2FebR1RRYO3ZYqt2GtRZNH/aLkwi8osLnL6M8Rlk3KlT1zdbg4oYoCb
gXTStebV6IcUibmD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org