Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5j386oOppgehR-L5iKRslcOvXsM.roa
File: 5j386oOppgehR-L5iKRslcOvXsM.roa (raw, json)
Hash identifier: jVhJhj9MtXtKtFPNqHnqcSr6Y41/3/LBfNWl7MCkw8Y=
Subject key identifier: E6:3D:FC:EA:83:A9:A6:07:A1:47:E2:F9:88:A4:6C:95:C3:AF:5E:C3
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CFCBA0D6E57D485FF777DFBDF1F9CC060
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5j386oOppgehR-L5iKRslcOvXsM.roa
Signing time: Fri 12 Jan 2024 08:11:40 +0000
ROA not before: Fri 12 Jan 2024 08:11:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fc:ba:0d:6e:57:d4:85:ff:77:7d:fb:df:1f:9c:c0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 12 08:11:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e63dfcea83a9a607a147e2f988a46c95c3af5ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:49:9a:1c:f1:d4:07:68:6a:d0:78:59:bf:
f8:fb:a7:58:43:cb:5b:0e:89:a6:3b:9c:fd:1a:b9:
75:3f:49:b1:44:03:65:05:06:38:b1:e6:f0:65:6f:
fa:32:4f:4b:36:3c:c8:2a:b1:58:71:c1:a8:85:b1:
5b:82:fb:cd:66:2b:b6:6a:ea:1b:db:2b:c5:1a:6c:
68:36:bc:96:57:a6:e9:be:7a:98:ad:c7:fa:3d:7f:
df:52:56:a9:07:6d:45:63:5d:64:21:6b:a5:a5:27:
00:16:3d:42:da:d3:41:73:c4:33:46:7d:b0:6b:ff:
d2:bc:32:87:64:c6:b5:8b:f0:2b:32:63:44:0b:86:
6a:f3:40:e9:e9:74:a7:62:65:30:b4:53:8c:52:d5:
6b:68:b0:65:4a:ea:02:67:e3:43:35:07:db:3a:08:
e2:c0:8d:c2:a8:1f:79:4f:81:77:5e:6b:ef:19:bf:
9d:e9:14:fb:41:51:b6:13:af:39:64:ab:27:21:e9:
6e:49:e9:44:2b:35:2e:ca:00:5b:bb:b4:68:05:e3:
2d:e1:d5:19:57:e0:f9:08:50:72:ec:7f:69:d4:5f:
b2:53:25:4f:89:30:09:9f:0f:41:3f:0a:27:14:29:
70:34:db:dd:58:d9:42:21:f1:4f:00:4b:70:05:18:
b0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3D:FC:EA:83:A9:A6:07:A1:47:E2:F9:88:A4:6C:95:C3:AF:5E:C3
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5j386oOppgehR-L5iKRslcOvXsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:9a:45:87:4d:c6:68:60:87:be:a3:d0:6c:b8:07:55:00:14:
c4:c2:31:1d:13:1d:e8:6f:24:15:38:e3:2d:8b:0d:7a:38:56:
51:da:e1:6e:a1:8b:cb:da:a1:f3:d8:20:69:91:44:7e:f3:38:
e2:6c:a4:75:b0:92:42:9b:6d:04:07:1b:fa:a7:af:55:37:a8:
44:fb:e5:79:60:9b:67:82:ea:a7:bb:08:c6:65:2a:79:33:b8:
6d:07:51:f3:18:d2:b0:98:ba:60:5a:ee:52:65:f0:f6:81:fd:
18:9e:22:b7:66:e0:ef:4d:90:7e:39:8f:07:fa:49:c9:3e:28:
92:06:cb:a4:52:23:dc:56:3b:61:29:61:77:9d:4b:09:5e:52:
68:95:96:e9:47:40:20:ac:e9:68:cd:33:4c:b8:b9:87:2c:2c:
b0:84:f6:2e:72:20:e3:10:b1:34:4a:af:27:b3:a3:a2:98:7b:
a8:2c:87:c6:76:e9:f4:93:b8:e2:ea:3d:30:8b:b9:6e:4d:56:
6e:ae:19:c7:09:67:62:47:6a:8e:47:0d:35:40:51:86:d1:06:
6e:7c:27:2e:b5:86:94:06:ef:2d:b0:00:73:18:0d:18:42:23:
ac:41:77:6b:ef:1f:b7:db:1f:8b:24:b5:94:2a:6d:e4:14:a8:
3a:9e:53:c1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYz8ug1uV9SF/3d9+98fnMBgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTEyMDgxMTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjNkZmNlYTgzYTlhNjA3YTE0N2UyZjk4OGE0NmM5NWMzYWY1ZWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7ZJmhzx1AdoatB4Wb/4+6dYQ8tb
DommO5z9Grl1P0mxRANlBQY4sebwZW/6Mk9LNjzIKrFYccGohbFbgvvNZiu2auob
2yvFGmxoNryWV6bpvnqYrcf6PX/fUlapB21FY11kIWulpScAFj1C2tNBc8QzRn2w
a//SvDKHZMa1i/ArMmNEC4Zq80Dp6XSnYmUwtFOMUtVraLBlSuoCZ+NDNQfbOgji
wI3CqB95T4F3XmvvGb+d6RT7QVG2E685ZKsnIeluSelEKzUuygBbu7RoBeMt4dUZ
V+D5CFBy7H9p1F+yUyVPiTAJnw9BPwonFClwNNvdWNlCIfFPAEtwBRiwuQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOY9/OqDqaYHoUfi+YikbJXDr17DMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvNWozODZvT3BwZ2VoUi1MNWlLUnNsY092WHNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADeaRYdNxmhgh76j0Gy4
B1UAFMTCMR0THehvJBU44y2LDXo4VlHa4W6hi8vaofPYIGmRRH7zOOJspHWwkkKb
bQQHG/qnr1U3qET75Xlgm2eC6qe7CMZlKnkzuG0HUfMY0rCYumBa7lJl8PaB/Rie
Irdm4O9NkH45jwf6Sck+KJIGy6RSI9xWO2EpYXedSwleUmiVlulHQCCs6WjNM0y4
uYcsLLCE9i5yIOMQsTRKryezo6KYe6gsh8Z26fSTuOLqPTCLuW5NVm6uGccJZ2JH
ao5HDTVAUYbRBm58Jy61hpQG7y2wAHMYDRhCI6xBd2vvH7fbH4sktZQqbeQUqDqe
U8E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org