Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/wZVN0pYGwo2s6eB3vmvauDFLpzs.roa
File: wZVN0pYGwo2s6eB3vmvauDFLpzs.roa (raw, json)
Hash identifier: ywsyNSmMQaou0zpq9rnOgwvmnnHZvIbFTGuSdtsFgXQ=
Subject key identifier: C1:95:4D:D2:96:06:C2:8D:AC:E9:E0:77:BE:6B:DA:B8:31:4B:A7:3B
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F464DD4D3201DCDB4B9C8CA5FB34FFD32
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/wZVN0pYGwo2s6eB3vmvauDFLpzs.roa
Signing time: Sun 05 May 2024 01:10:56 +0000
ROA not before: Sun 05 May 2024 01:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:46:4d:d4:d3:20:1d:cd:b4:b9:c8:ca:5f:b3:4f:fd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 5 01:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1954dd29606c28dace9e077be6bdab8314ba73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:df:b7:6a:f9:93:ae:3a:d2:d5:f7:5a:cc:78:
e1:d2:83:27:b8:43:a0:6f:94:38:11:50:0b:ec:fa:
c2:80:d6:2f:c0:0a:47:da:12:60:92:72:b7:5c:c8:
16:c3:ed:13:f8:2b:6a:25:95:d8:40:a0:bb:7f:1e:
57:fe:7a:2d:bf:de:fc:11:fd:5d:e7:b0:15:4f:1c:
b8:ea:28:8c:5c:7e:b0:77:9a:45:cb:15:72:c5:05:
40:09:55:61:f4:56:fa:41:5d:42:2b:b4:5d:28:8b:
b3:bf:e7:64:80:a4:d2:8e:89:fd:fe:8f:3b:9b:8c:
40:9f:c0:13:b8:f3:a7:18:2e:88:66:51:2d:ef:97:
b4:cc:b5:cb:e0:71:e6:7a:cf:b7:00:29:bf:a8:a0:
c9:cf:27:a9:ee:5c:ee:20:5b:6b:18:1b:e5:66:5f:
4f:06:9a:73:9e:0a:90:87:ab:7e:8f:f6:1c:25:7a:
7a:db:5a:be:46:ca:95:19:af:9b:9a:a0:79:81:f2:
13:8a:5c:56:ae:79:32:d9:5d:ac:08:46:90:1e:3d:
5c:53:a3:9d:90:f6:06:9a:e0:bf:3b:3a:87:64:34:
06:21:b0:19:85:f9:87:93:16:9d:0a:e7:86:4d:d4:
bd:cf:7a:6e:37:01:bf:52:11:10:8b:75:8c:42:14:
4b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:95:4D:D2:96:06:C2:8D:AC:E9:E0:77:BE:6B:DA:B8:31:4B:A7:3B
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/wZVN0pYGwo2s6eB3vmvauDFLpzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:24:4b:fe:a6:09:46:15:ae:50:70:5b:cf:cb:46:08:8d:de:
d0:4f:e3:1d:42:eb:0c:09:58:1f:29:c0:34:9e:51:c7:77:37:
bf:b4:79:25:33:1e:bc:66:b8:a9:c9:f9:d6:e4:31:13:ee:e2:
20:4b:21:27:5d:ae:e7:18:91:3b:2e:a9:62:6b:6b:25:46:d9:
dd:c1:18:6b:af:98:3a:dd:06:a1:8d:57:71:e7:36:f5:92:c8:
b6:d8:9b:00:41:5a:5c:4c:59:c8:fe:7f:99:22:d8:e1:1e:c6:
3e:87:f6:35:c0:5f:61:45:3c:75:cd:16:72:ec:f6:a5:95:a3:
84:92:4f:ad:86:13:db:ce:a7:6d:e8:2a:e0:f5:15:bb:a1:f2:
4e:41:e5:62:16:41:44:d2:72:11:ea:88:4f:47:5d:03:b9:d9:
36:a7:f1:84:ab:c1:c4:e1:b1:60:66:3d:1c:cf:07:7f:ef:01:
a4:96:9e:dc:78:f2:be:36:4e:73:34:c5:11:85:8d:cf:e6:44:
fd:21:27:0e:67:94:0a:e3:33:98:a6:9a:9c:c6:4c:41:bd:a0:
8d:58:c3:62:04:09:fe:87:7d:5d:5a:4e:02:b4:f8:92:38:db:
8f:63:65:83:0c:b5:ab:a8:65:08:49:c4:82:9c:b4:d1:4a:ff:
30:2d:a2:94
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9GTdTTIB3NtLnIyl+zT/0yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTA1MDExMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTk1NGRkMjk2MDZjMjhkYWNlOWUwNzdiZTZiZGFiODMxNGJhNzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6t+3avmTrjrS1fdazHjh0oMnuEOg
b5Q4EVAL7PrCgNYvwApH2hJgknK3XMgWw+0T+CtqJZXYQKC7fx5X/notv978Ef1d
57AVTxy46iiMXH6wd5pFyxVyxQVACVVh9Fb6QV1CK7RdKIuzv+dkgKTSjon9/o87
m4xAn8ATuPOnGC6IZlEt75e0zLXL4HHmes+3ACm/qKDJzyep7lzuIFtrGBvlZl9P
BppzngqQh6t+j/YcJXp621q+RsqVGa+bmqB5gfITilxWrnky2V2sCEaQHj1cU6Od
kPYGmuC/OzqHZDQGIbAZhfmHkxadCueGTdS9z3puNwG/UhEQi3WMQhRL0wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMGVTdKWBsKNrOngd75r2rgxS6c7MB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvd1pWTjBwWUd3bzJzNmVCM3ZtdmF1REZMcHpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFskS/6mCUYVrlBwW8/L
RgiN3tBP4x1C6wwJWB8pwDSeUcd3N7+0eSUzHrxmuKnJ+dbkMRPu4iBLISddrucY
kTsuqWJrayVG2d3BGGuvmDrdBqGNV3HnNvWSyLbYmwBBWlxMWcj+f5ki2OEexj6H
9jXAX2FFPHXNFnLs9qWVo4SST62GE9vOp23oKuD1Fbuh8k5B5WIWQUTSchHqiE9H
XQO52Tan8YSrwcThsWBmPRzPB3/vAaSWntx48r42TnM0xRGFjc/mRP0hJw5nlArj
M5immpzGTEG9oI1Yw2IECf6HfV1aTgK0+JI4249jZYMMtauoZQhJxIKctNFK/zAt
opQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org