Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3V0KXLrfGAcs1BGSM0bEMrvtx0k.roa
File: 3V0KXLrfGAcs1BGSM0bEMrvtx0k.roa (raw, json)
Hash identifier: f8W/HjcVB2dl70JyQtH67Eno+nDDjXkNNg+fQlmRFV0=
Subject key identifier: DD:5D:0A:5C:BA:DF:18:07:2C:D4:11:92:33:46:C4:32:BB:ED:C7:49
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE28F40D1B19F3E89A3806399A3A95A83
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3V0KXLrfGAcs1BGSM0bEMrvtx0k.roa
Signing time: Sun 07 Jan 2024 06:14:48 +0000
ROA not before: Sun 07 Jan 2024 06:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e2:8f:40:d1:b1:9f:3e:89:a3:80:63:99:a3:a9:5a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 7 06:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd5d0a5cbadf18072cd411923346c432bbedc749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:1a:b9:dc:04:cd:95:d5:42:6c:57:d8:4c:
fc:26:5f:2b:d8:da:fc:f6:1f:93:49:a6:64:35:53:
6e:56:51:f6:9b:34:e5:7a:51:7c:db:5d:bb:9d:d6:
37:8c:ff:87:35:c8:08:f6:e1:e1:56:b1:4f:6a:aa:
11:d3:c8:49:f4:54:7e:ef:28:ee:0a:ac:a9:d9:4c:
70:7f:52:5b:f3:b1:f7:3c:3d:4e:5e:81:fb:ca:ea:
00:00:ba:3d:10:cc:e0:a9:ac:7b:7f:2a:07:e7:7c:
26:b5:ea:3f:fc:3a:98:38:80:c1:97:95:42:17:b2:
7f:6f:6a:eb:d1:03:1e:14:cc:6b:33:89:a5:0e:17:
a0:16:c3:9a:11:b4:59:ed:6b:72:d2:09:76:00:09:
2a:6e:a0:a4:c0:9e:d0:5e:d2:5d:05:9f:b2:d2:8f:
12:8a:74:21:d7:40:fd:c6:bb:b6:fb:82:54:2a:d0:
36:61:cf:9e:1c:b1:04:db:94:43:c6:d4:df:30:b3:
32:72:d5:27:00:cd:ac:c1:ee:39:8f:d5:ad:cd:de:
0a:fb:e0:16:6e:6e:e2:5d:19:8b:5f:a0:67:2c:1b:
ba:2f:85:48:27:96:22:a5:da:8e:a8:13:48:cd:e7:
1c:bd:e7:34:a6:56:ce:94:a9:fc:49:6d:69:c4:6e:
2b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5D:0A:5C:BA:DF:18:07:2C:D4:11:92:33:46:C4:32:BB:ED:C7:49
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3V0KXLrfGAcs1BGSM0bEMrvtx0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:b7:23:bf:f7:33:1e:03:7d:e3:46:2a:e1:d2:55:04:a2:c3:
6d:37:a7:33:6a:5c:03:2e:3f:3a:45:25:8f:7b:99:d7:68:62:
c7:2e:0a:dc:23:85:af:2b:7d:d2:d3:b9:8b:61:e8:f9:ff:98:
d1:3c:fb:c0:05:0c:60:c0:8a:4f:d6:5d:c0:59:c0:5a:7c:30:
ab:4a:57:6b:12:49:94:ad:59:0d:d5:cf:ec:04:55:c1:86:0c:
a0:c0:53:52:ca:f4:e7:7b:d6:75:e7:00:fe:13:c7:66:af:8b:
40:8f:d1:51:36:01:14:23:43:b0:29:25:8d:74:ee:35:8f:64:
cf:1f:d8:cb:fa:4b:1e:fb:e6:a7:3c:0c:fe:c8:f2:08:66:99:
eb:45:69:6b:77:fa:b6:98:fe:94:09:de:28:0f:02:17:02:93:
40:6e:3b:95:42:80:f6:10:a7:82:7f:3e:5e:72:45:39:d0:d5:
81:d0:d7:59:8f:9d:11:74:85:6c:5c:b5:e1:c1:a2:12:1c:7f:
22:81:c3:0f:d1:19:3b:38:4d:9d:8e:0e:1e:56:f3:8e:d8:cd:
ab:3e:56:a0:f3:44:eb:e9:74:a6:41:4f:ca:68:14:e2:a7:c2:
b5:a5:92:ac:92:c5:c5:0d:aa:f4:d7:0f:21:38:da:77:7b:07:
c4:4e:2f:8a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzij0DRsZ8+iaOAY5mjqVqDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTA3MDYxNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDVkMGE1Y2JhZGYxODA3MmNkNDExOTIzMzQ2YzQzMmJiZWRjNzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKAaudwEzZXVQmxX2Ez8Jl8r2Nr8
9h+TSaZkNVNuVlH2mzTlelF82127ndY3jP+HNcgI9uHhVrFPaqoR08hJ9FR+7yju
Cqyp2Uxwf1Jb87H3PD1OXoH7yuoAALo9EMzgqax7fyoH53wmteo//DqYOIDBl5VC
F7J/b2rr0QMeFMxrM4mlDhegFsOaEbRZ7Wty0gl2AAkqbqCkwJ7QXtJdBZ+y0o8S
inQh10D9xru2+4JUKtA2Yc+eHLEE25RDxtTfMLMyctUnAM2swe45j9Wtzd4K++AW
bm7iXRmLX6BnLBu6L4VIJ5YipdqOqBNIzeccvec0plbOlKn8SW1pxG4rfQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN1dCly63xgHLNQRkjNGxDK77cdJMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvM1YwS1hMcmZHQWNzMUJHU00wYkVNcnZ0eDBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA63I7/3Mx4DfeNGKuHS
VQSiw203pzNqXAMuPzpFJY97mddoYscuCtwjha8rfdLTuYth6Pn/mNE8+8AFDGDA
ik/WXcBZwFp8MKtKV2sSSZStWQ3Vz+wEVcGGDKDAU1LK9Od71nXnAP4Tx2avi0CP
0VE2ARQjQ7ApJY107jWPZM8f2Mv6Sx775qc8DP7I8ghmmetFaWt3+raY/pQJ3igP
AhcCk0BuO5VCgPYQp4J/Pl5yRTnQ1YHQ11mPnRF0hWxcteHBohIcfyKBww/RGTs4
TZ2ODh5W847Yzas+VqDzROvpdKZBT8poFOKnwrWlkqySxcUNqvTXDyE42nd7B8RO
L4o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org