Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4eJITQ8VhA-wzbFqhJJY0vtpYRM.roa
File: 4eJITQ8VhA-wzbFqhJJY0vtpYRM.roa (raw, json)
Hash identifier: nql2Gf25iHUMHtis9N6gm+4BQUOW3OVqFwT55PIBeAs=
Subject key identifier: E1:E2:48:4D:0F:15:84:0F:B0:CD:B1:6A:84:92:58:D2:FB:69:61:13
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D34EC34BA2FFE858484E6C358793976F5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4eJITQ8VhA-wzbFqhJJY0vtpYRM.roa
Signing time: Tue 23 Jan 2024 06:05:11 +0000
ROA not before: Tue 23 Jan 2024 06:05:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:34eb:6fcc/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:34:ec:34:ba:2f:fe:85:84:84:e6:c3:58:79:39:76:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 23 06:05:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1e2484d0f15840fb0cdb16a849258d2fb696113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:69:e5:9e:17:88:a0:c1:7b:29:1e:df:57:4b:
80:10:8d:92:80:c0:b5:f5:ae:96:5c:0c:30:4a:4f:
c0:fe:86:de:11:34:18:90:d7:85:e2:2c:4e:cd:5c:
15:ca:d6:c0:da:83:f6:c9:fa:51:ed:b2:55:65:62:
1d:77:32:4d:55:7b:6b:02:0d:47:71:97:ee:f7:00:
dd:85:cc:7d:b1:55:41:79:27:00:ad:d1:f5:7d:bb:
e2:87:7e:b1:8d:f5:53:61:61:7c:ad:4b:01:1a:ad:
69:5b:61:0b:99:f3:c4:40:80:52:95:92:57:2d:a8:
3e:27:dd:3e:f4:78:32:ee:8e:6b:68:c5:b3:72:fa:
52:78:e4:d9:08:dd:0c:53:1a:4d:22:a1:5a:1f:ee:
e1:a3:80:86:09:b2:5c:95:66:99:a9:7f:55:f4:3c:
64:47:02:3a:0f:bf:12:23:9e:d9:0f:e2:8a:57:8e:
fe:70:ec:f1:2c:33:6e:4d:50:46:a3:b3:28:bc:1f:
b2:fb:25:ca:76:2b:32:73:b4:db:66:1b:a5:94:a2:
dd:d2:7a:db:f0:19:ba:c2:d2:1d:97:9a:ac:6d:10:
b6:08:64:8e:dc:2f:36:03:7e:f0:5c:30:ea:96:c5:
67:c7:74:a6:14:37:d7:e7:4b:c7:d7:d4:ea:0e:dc:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E2:48:4D:0F:15:84:0F:B0:CD:B1:6A:84:92:58:D2:FB:69:61:13
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/4eJITQ8VhA-wzbFqhJJY0vtpYRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:cc:2f:a4:1d:24:e2:60:2c:1f:cb:98:a1:23:8d:4b:76:69:
2a:24:07:0e:10:1f:e8:ce:6e:a7:20:39:b8:d7:a2:fe:21:0f:
1d:82:7d:f6:27:93:e3:3e:3a:ee:82:d1:c1:6f:ed:ae:1c:89:
bb:c4:c1:f9:9a:aa:f8:1e:aa:9d:ab:cd:5b:00:df:5a:27:79:
d8:79:c8:70:ba:68:5f:f6:6c:3e:72:b8:44:70:ef:19:e7:6b:
06:f0:5b:81:e4:c3:40:1e:d5:a5:01:a6:17:d2:9d:bd:e2:3b:
cb:01:b5:47:ed:b3:43:13:dc:70:e4:7e:fd:df:11:2a:58:27:
fe:0a:14:d9:d5:67:08:64:0f:b8:33:f9:ae:1f:d1:73:90:8c:
b0:6a:af:14:cb:52:8a:10:27:4b:56:af:53:5f:bc:f8:ea:bb:
de:cb:e8:3c:cb:fa:db:66:63:e7:57:c9:0e:96:9a:ad:43:d5:
95:ab:ae:97:34:b7:16:22:8c:ca:6b:52:83:19:47:6c:82:6d:
4a:ee:68:ae:39:f9:75:cd:8e:f6:a7:5c:35:97:1f:2b:59:c4:
15:7c:37:a7:1f:14:a4:0c:4f:67:d6:c5:fb:23:86:1a:be:ba:
2e:5d:94:13:13:0e:96:f0:3e:2f:94:1c:05:d4:6d:3e:a8:23:
1d:ca:8a:43
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY007DS6L/6FhITmw1h5OXb1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTIzMDYwNTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWUyNDg0ZDBmMTU4NDBmYjBjZGIxNmE4NDkyNThkMmZiNjk2MTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmnlnheIoMF7KR7fV0uAEI2SgMC1
9a6WXAwwSk/A/obeETQYkNeF4ixOzVwVytbA2oP2yfpR7bJVZWIddzJNVXtrAg1H
cZfu9wDdhcx9sVVBeScArdH1fbvih36xjfVTYWF8rUsBGq1pW2ELmfPEQIBSlZJX
Lag+J90+9Hgy7o5raMWzcvpSeOTZCN0MUxpNIqFaH+7ho4CGCbJclWaZqX9V9Dxk
RwI6D78SI57ZD+KKV47+cOzxLDNuTVBGo7MovB+y+yXKdisyc7TbZhullKLd0nrb
8Bm6wtIdl5qsbRC2CGSO3C82A37wXDDqlsVnx3SmFDfX50vH19TqDtyiAQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOHiSE0PFYQPsM2xaoSSWNL7aWETMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvNGVKSVRROFZoQS13emJGcWhKSlkwdnRwWVJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB3ML6QdJOJgLB/LmKEj
jUt2aSokBw4QH+jObqcgObjXov4hDx2CffYnk+M+Ou6C0cFv7a4cibvEwfmaqvge
qp2rzVsA31onedh5yHC6aF/2bD5yuERw7xnnawbwW4Hkw0Ae1aUBphfSnb3iO8sB
tUfts0MT3HDkfv3fESpYJ/4KFNnVZwhkD7gz+a4f0XOQjLBqrxTLUooQJ0tWr1Nf
vPjqu97L6DzL+ttmY+dXyQ6Wmq1D1ZWrrpc0txYijMprUoMZR2yCbUruaK45+XXN
jvanXDWXHytZxBV8N6cfFKQMT2fWxfsjhhq+ui5dlBMTDpbwPi+UHAXUbT6oIx3K
ikM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org