Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3jfHl_grq98yrN6o08ASywjqxK4.roa
File: 3jfHl_grq98yrN6o08ASywjqxK4.roa (raw, json)
Hash identifier: BmSsxiFlXsVcdorV/I7bGRajgydLMCuOC9hLfss/t6Y=
Subject key identifier: DE:37:C7:97:F8:2B:AB:DF:32:AC:DE:A8:D3:C0:12:CB:08:EA:C4:AE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D438CB6A26F1CB981E60D676FE24567CC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3jfHl_grq98yrN6o08ASywjqxK4.roa
Signing time: Fri 26 Jan 2024 02:15:11 +0000
ROA not before: Fri 26 Jan 2024 02:15:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:43:8c:b6:a2:6f:1c:b9:81:e6:0d:67:6f:e2:45:67:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 26 02:15:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de37c797f82babdf32acdea8d3c012cb08eac4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:0f:15:ee:66:83:ec:3f:63:17:22:78:ef:
58:7d:fb:9c:d4:18:00:59:c2:2d:89:25:83:1a:d1:
c0:c1:0c:91:35:59:30:da:33:9a:82:a0:ba:12:8c:
91:3e:a9:c9:8d:7c:03:c2:f0:16:19:64:f1:51:b8:
5e:8a:a8:f9:de:3a:72:27:01:28:4f:fe:ec:41:65:
e7:13:64:4e:b7:91:5d:fe:f4:3d:16:76:f8:af:d4:
8a:b5:a9:08:12:e9:10:9a:0e:b4:01:b8:6d:39:d7:
6a:32:ac:37:a7:ce:6f:ea:32:ea:40:68:b6:3f:17:
be:0c:3a:41:fe:9a:3e:86:29:f4:b3:f6:90:0c:f5:
5a:90:5a:7f:57:54:6a:1d:d4:d3:f9:d1:03:c8:14:
1e:b5:ec:b6:d5:f4:d8:82:c1:a2:64:dc:32:d6:d9:
6e:e1:86:f5:2a:ba:45:b6:e3:16:42:77:b5:70:42:
7d:1d:ae:c2:a6:a9:e9:4f:0e:0f:6c:dc:77:1b:8a:
0b:07:43:11:ec:14:3a:d2:0c:ca:fb:9f:10:c5:f5:
de:18:fc:4d:6f:0e:f6:43:6a:2a:a7:9e:d1:e6:96:
13:1b:b8:d2:96:b7:f3:32:e7:ca:1d:98:84:14:41:
70:72:d1:9d:30:be:ec:3f:2a:83:b8:22:f7:e5:1e:
0a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:37:C7:97:F8:2B:AB:DF:32:AC:DE:A8:D3:C0:12:CB:08:EA:C4:AE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3jfHl_grq98yrN6o08ASywjqxK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:a4:20:22:a5:c4:92:bb:b2:cb:ac:f3:7a:75:7b:be:de:43:
58:2d:42:c5:4c:d2:f1:45:6c:02:bd:1f:64:1c:44:00:a6:28:
d2:9e:7c:8c:1a:ef:82:a6:19:e9:7d:4b:3e:43:e0:c9:fe:ca:
64:3d:fc:3d:92:1c:db:57:6c:79:ff:88:9c:e1:9d:3f:0e:3e:
67:2c:81:e5:03:6a:70:f9:d2:57:80:ec:56:71:47:79:5c:ff:
23:78:64:d4:84:d5:39:5d:0a:20:a4:2e:c4:b2:1c:b0:19:30:
70:47:ae:18:f8:a0:d7:df:2c:03:9c:65:ab:11:db:7f:a9:b6:
6c:3b:0b:23:60:5b:a3:82:ce:00:13:04:d2:dd:f1:aa:ec:34:
5d:7a:3a:30:e0:4e:09:09:a5:7c:29:d4:ff:44:c9:c6:eb:62:
c6:06:0b:6a:78:90:9a:a2:75:37:09:ea:6c:3f:3f:cd:05:27:
39:a8:e3:36:a2:a6:29:cd:8f:f7:b2:21:fc:0a:03:0b:39:9d:
ed:79:ea:1a:4e:2f:c5:da:1e:1c:8c:cd:bc:80:4a:82:8e:fa:
42:c4:08:f8:94:97:58:82:10:10:6d:19:a2:cd:a8:78:a0:d6:
8c:3b:17:9a:b1:e0:03:c3:c7:42:8f:8a:4e:e8:c4:7f:94:32:
10:8c:1a:5b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY1DjLaibxy5geYNZ2/iRWfMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTI2MDIxNTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTM3Yzc5N2Y4MmJhYmRmMzJhY2RlYThkM2MwMTJjYjA4ZWFjNGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEIPFe5mg+w/YxcieO9Yffuc1BgA
WcItiSWDGtHAwQyRNVkw2jOagqC6EoyRPqnJjXwDwvAWGWTxUbheiqj53jpyJwEo
T/7sQWXnE2ROt5Fd/vQ9Fnb4r9SKtakIEukQmg60AbhtOddqMqw3p85v6jLqQGi2
Pxe+DDpB/po+hin0s/aQDPVakFp/V1RqHdTT+dEDyBQetey21fTYgsGiZNwy1tlu
4Yb1KrpFtuMWQne1cEJ9Ha7CpqnpTw4PbNx3G4oLB0MR7BQ60gzK+58QxfXeGPxN
bw72Q2oqp57R5pYTG7jSlrfzMufKHZiEFEFwctGdML7sPyqDuCL35R4KwQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN43x5f4K6vfMqzeqNPAEssI6sSuMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvM2pmSGxfZ3JxOTh5ck42bzA4QVN5d2pxeEs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAD2kICKlxJK7ssus83p1
e77eQ1gtQsVM0vFFbAK9H2QcRACmKNKefIwa74KmGel9Sz5D4Mn+ymQ9/D2SHNtX
bHn/iJzhnT8OPmcsgeUDanD50leA7FZxR3lc/yN4ZNSE1TldCiCkLsSyHLAZMHBH
rhj4oNffLAOcZasR23+ptmw7CyNgW6OCzgATBNLd8arsNF16OjDgTgkJpXwp1P9E
ycbrYsYGC2p4kJqidTcJ6mw/P80FJzmo4zaipinNj/eyIfwKAws5ne156hpOL8Xa
HhyMzbyASoKO+kLECPiUl1iCEBBtGaLNqHig1ow7F5qx4APDx0KPik7oxH+UMhCM
Gls=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org