Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3LKSO0pWD9sb05RdiNKMqs76A08.roa
File: 3LKSO0pWD9sb05RdiNKMqs76A08.roa (raw, json)
Hash identifier: 5s2NaaEUYMzZjXO5iiAk64Dnnx5uZlHbb9B22cbvyN8=
Subject key identifier: DC:B2:92:3B:4A:56:0F:DB:1B:D3:94:5D:88:D2:8C:AA:CE:FA:03:4F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CD84373A28CE84E863BEB730F2CCC6919
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3LKSO0pWD9sb05RdiNKMqs76A08.roa
Signing time: Fri 05 Jan 2024 06:15:48 +0000
ROA not before: Fri 05 Jan 2024 06:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d8:43:73:a2:8c:e8:4e:86:3b:eb:73:0f:2c:cc:69:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 5 06:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcb2923b4a560fdb1bd3945d88d28caacefa034f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:ec:7d:8a:a5:2b:ee:56:13:39:cf:1a:2b:
7c:5d:24:2c:0f:3c:b9:75:7f:e6:44:60:77:b0:8c:
68:d1:c4:ac:3c:d8:53:e9:3d:9b:c0:88:80:e5:b5:
dd:3b:a6:df:3c:0c:d9:0d:59:5b:46:12:1a:3b:01:
69:cb:da:43:46:dc:35:aa:38:1f:1d:5d:6a:c5:a7:
ca:00:f4:e7:54:a4:16:e0:71:a7:70:c0:91:7f:e8:
91:2c:e2:08:29:22:6f:1e:8e:c6:21:30:eb:b4:b0:
e3:ae:a2:62:67:d4:02:40:69:d2:db:6c:b1:ce:6c:
4b:59:b7:3b:92:19:e3:4c:76:ad:80:9f:22:7e:65:
e4:ce:c8:eb:bd:b2:a5:23:86:6d:bc:40:3f:f8:08:
e1:e9:9e:f0:cf:a6:7d:ff:c3:9b:da:9b:ae:ae:c7:
51:c7:ec:af:f3:ff:b5:2d:ed:5e:fe:cd:65:ec:93:
66:88:ff:6f:55:28:bd:d2:5f:bf:6c:ab:ab:32:4a:
5d:4b:03:1c:0d:dc:ee:f1:8a:9e:bb:21:32:6e:3c:
ec:6c:81:8f:2b:89:88:0f:43:75:a3:9c:07:d4:50:
d3:a6:40:fc:ac:30:ef:0e:f8:5e:c0:e7:83:13:a0:
c0:bb:15:82:2c:bf:ee:46:87:40:59:56:ce:15:f1:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B2:92:3B:4A:56:0F:DB:1B:D3:94:5D:88:D2:8C:AA:CE:FA:03:4F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3LKSO0pWD9sb05RdiNKMqs76A08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:4f:67:86:26:7d:56:03:4c:dd:fe:dc:e8:68:e8:30:b6:70:
6f:20:e7:c1:fd:02:ad:8b:4c:79:13:22:77:41:ec:b9:bb:65:
94:2b:f0:c1:2b:28:7a:ea:2b:06:9d:18:02:7a:e5:48:4b:e9:
2f:6b:01:a2:69:1e:8b:8d:7d:09:c5:60:92:97:bb:62:6e:26:
d9:9a:d7:03:9d:0e:df:5e:fb:05:80:26:dd:c8:b2:5e:b9:2c:
e4:aa:5b:9a:5f:ba:bb:4d:b0:bb:98:83:48:aa:e8:06:5c:7b:
e3:bc:9d:8b:c3:a7:ad:99:e6:77:73:e7:2b:a2:2e:8a:f2:81:
51:06:83:1d:e2:ae:8f:be:ab:41:8a:aa:12:37:f0:0b:68:08:
06:a5:e8:ee:94:d5:ed:1a:d6:59:64:c8:d0:07:29:dd:d8:d3:
a9:29:8a:0f:d3:fc:70:14:4c:eb:d1:a0:35:ed:e3:0f:7c:9e:
a2:8f:0a:46:21:43:38:f8:e6:de:25:9a:cb:06:f9:06:09:d9:
70:ca:09:d8:6d:e1:22:c1:4a:20:50:f2:4f:ec:d4:51:ef:7d:
d1:05:b9:8c:0c:33:a9:73:3b:6a:be:a3:a8:63:8f:99:69:ec:
80:3b:56:13:cf:44:cd:12:9d:e6:6f:17:e8:ff:60:75:99:8d:
c8:9d:3b:44
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzYQ3OijOhOhjvrcw8szGkZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTA1MDYxNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2IyOTIzYjRhNTYwZmRiMWJkMzk0NWQ4OGQyOGNhYWNlZmEwMzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiTsfYqlK+5WEznPGit8XSQsDzy5
dX/mRGB3sIxo0cSsPNhT6T2bwIiA5bXdO6bfPAzZDVlbRhIaOwFpy9pDRtw1qjgf
HV1qxafKAPTnVKQW4HGncMCRf+iRLOIIKSJvHo7GITDrtLDjrqJiZ9QCQGnS22yx
zmxLWbc7khnjTHatgJ8ifmXkzsjrvbKlI4ZtvEA/+Ajh6Z7wz6Z9/8Ob2puursdR
x+yv8/+1Le1e/s1l7JNmiP9vVSi90l+/bKurMkpdSwMcDdzu8YqeuyEybjzsbIGP
K4mID0N1o5wH1FDTpkD8rDDvDvhewOeDE6DAuxWCLL/uRodAWVbOFfHNlQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNyykjtKVg/bG9OUXYjSjKrO+gNPMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvM0xLU08wcFdEOXNiMDVSZGlOS01xczc2QTA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGdPZ4YmfVYDTN3+3Oho
6DC2cG8g58H9Aq2LTHkTIndB7Lm7ZZQr8MErKHrqKwadGAJ65UhL6S9rAaJpHouN
fQnFYJKXu2JuJtma1wOdDt9e+wWAJt3Isl65LOSqW5pfurtNsLuYg0iq6AZce+O8
nYvDp62Z5ndz5yuiLorygVEGgx3iro++q0GKqhI38AtoCAal6O6U1e0a1llkyNAH
Kd3Y06kpig/T/HAUTOvRoDXt4w98nqKPCkYhQzj45t4lmssG+QYJ2XDKCdht4SLB
SiBQ8k/s1FHvfdEFuYwMM6lzO2q+o6hjj5lp7IA7VhPPRM0SneZvF+j/YHWZjcid
O0Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org