Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/17moD0PeBYnaKzn9pkWv25hRFwI.roa
File: 17moD0PeBYnaKzn9pkWv25hRFwI.roa (raw, json)
Hash identifier: oD4QrlpK2054BWn9NhUPXjKgSOw+G29GnPncAJ/cCyE=
Subject key identifier: D7:B9:A8:0F:43:DE:05:89:DA:2B:39:FD:A6:45:AF:DB:98:51:17:02
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D1EA38E596CBE0E07DFA246B3D048645E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/17moD0PeBYnaKzn9pkWv25hRFwI.roa
Signing time: Thu 18 Jan 2024 22:14:11 +0000
ROA not before: Thu 18 Jan 2024 22:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1e:a3:8e:59:6c:be:0e:07:df:a2:46:b3:d0:48:64:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 18 22:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7b9a80f43de0589da2b39fda645afdb98511702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:9c:dd:2b:ae:85:48:25:86:ba:72:69:97:
b0:80:eb:1e:da:72:20:aa:6b:fe:ba:c2:b0:0e:d6:
55:2b:a6:e6:0e:d2:16:65:50:e9:a3:61:2d:71:fd:
26:1f:6d:47:12:41:81:70:a1:d5:cc:86:fe:2a:9a:
e6:6f:91:d2:a9:b1:03:7a:2a:37:0a:62:c0:3d:ef:
64:8d:f9:55:bd:a4:af:c8:b5:5d:06:ad:3e:5b:6a:
41:97:47:04:0c:b1:8d:65:c5:cf:95:9b:c1:b0:9a:
e3:d8:6c:e1:2d:0e:1c:69:ca:b3:3e:a9:96:cf:e9:
85:f5:ef:38:26:cf:96:05:0f:95:27:0d:d6:68:64:
fd:01:73:37:b1:80:c4:4f:43:cd:16:4b:c9:da:21:
27:68:ea:5f:63:b9:dd:44:b2:ba:74:f4:c5:6d:9e:
0d:3e:44:7e:48:47:0e:fd:5a:29:cd:a2:0b:e2:2b:
de:1e:76:3b:9e:bc:04:a0:e6:7f:44:c1:96:f9:16:
b3:d7:4f:50:2a:f3:93:a1:f2:c4:2c:b9:65:b0:6f:
27:90:b8:dc:7e:cf:15:55:9c:cc:52:0b:49:0a:e8:
8e:e9:08:8b:b7:44:10:49:c1:a5:8f:c3:86:d5:13:
02:10:97:95:02:6c:00:dc:ca:ef:75:61:77:6d:e0:
2a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B9:A8:0F:43:DE:05:89:DA:2B:39:FD:A6:45:AF:DB:98:51:17:02
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/17moD0PeBYnaKzn9pkWv25hRFwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:67:7e:ab:90:70:35:fb:6e:33:e1:ab:f1:bf:ef:89:53:ad:
a2:2b:5c:3b:5a:b0:ca:9c:a7:b9:26:06:a6:95:42:f5:59:37:
ff:99:cc:8d:c9:29:98:e3:9b:e9:f6:5a:5a:d2:65:0f:c4:e6:
47:8f:76:93:f5:4c:c3:70:92:56:b8:ba:72:45:e1:3b:96:bd:
04:8d:99:44:15:8c:34:5c:0b:89:02:3e:e9:8b:46:99:07:4a:
d2:81:ea:e1:9b:6d:ce:72:ec:31:ab:6e:18:51:a4:ce:5a:cd:
eb:ac:0e:2a:59:6e:b4:d5:73:eb:78:54:61:97:62:4f:35:53:
6d:43:1a:aa:1f:81:3b:1b:51:99:5e:4d:6f:af:d5:7b:bc:99:
f5:b1:5c:58:40:42:f0:c1:ec:bc:50:40:c4:40:22:e2:91:4e:
a6:d8:c2:dc:27:d1:af:cd:24:02:7c:46:9e:bf:8b:b6:71:76:
9d:de:f6:9f:2b:58:8b:83:41:1c:c2:10:60:ae:24:f2:63:01:
d9:2c:4f:2c:80:60:f1:aa:71:88:bc:13:55:2f:db:d8:2e:c5:
a5:61:0e:47:03:d7:8f:1f:f1:e7:92:b8:54:11:83:e2:e7:13:
6a:35:31:95:ec:eb:70:d3:0e:b4:bf:df:72:f8:49:df:8e:d8:
f7:30:9b:f5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY0eo45ZbL4OB9+iRrPQSGReMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTE4MjIxNDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2I5YTgwZjQzZGUwNTg5ZGEyYjM5ZmRhNjQ1YWZkYjk4NTExNzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxyc3SuuhUglhrpyaZewgOse2nIg
qmv+usKwDtZVK6bmDtIWZVDpo2Etcf0mH21HEkGBcKHVzIb+Kprmb5HSqbEDeio3
CmLAPe9kjflVvaSvyLVdBq0+W2pBl0cEDLGNZcXPlZvBsJrj2GzhLQ4cacqzPqmW
z+mF9e84Js+WBQ+VJw3WaGT9AXM3sYDET0PNFkvJ2iEnaOpfY7ndRLK6dPTFbZ4N
PkR+SEcO/VopzaIL4iveHnY7nrwEoOZ/RMGW+Raz109QKvOTofLELLllsG8nkLjc
fs8VVZzMUgtJCuiO6QiLt0QQScGlj8OG1RMCEJeVAmwA3MrvdWF3beAq2QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNe5qA9D3gWJ2is5/aZFr9uYURcCMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvMTdtb0QwUGVCWW5hS3puOXBrV3YyNWhSRndJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFpnfquQcDX7bjPhq/G/
74lTraIrXDtasMqcp7kmBqaVQvVZN/+ZzI3JKZjjm+n2WlrSZQ/E5kePdpP1TMNw
kla4unJF4TuWvQSNmUQVjDRcC4kCPumLRpkHStKB6uGbbc5y7DGrbhhRpM5azeus
DipZbrTVc+t4VGGXYk81U21DGqofgTsbUZleTW+v1Xu8mfWxXFhAQvDB7LxQQMRA
IuKRTqbYwtwn0a/NJAJ8Rp6/i7Zxdp3e9p8rWIuDQRzCEGCuJPJjAdksTyyAYPGq
cYi8E1Uv29guxaVhDkcD148f8eeSuFQRg+LnE2o1MZXs63DTDrS/33L4Sd+O2Pcw
m/U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org