Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6RuceN3UpsnO0rSZaP8OJnYGNHQ.roa
File: 6RuceN3UpsnO0rSZaP8OJnYGNHQ.roa (raw, json)
Hash identifier: NflKjD7b6XaZi4copfP3DXuDqMLL6fIhpykCQ5fEfIU=
Subject key identifier: E9:1B:9C:78:DD:D4:A6:C9:CE:D2:B4:99:68:FF:0E:26:76:06:34:74
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E24A5CFC6AD2E5C752B75157B80E9A6D5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6RuceN3UpsnO0rSZaP8OJnYGNHQ.roa
Signing time: Sat 09 Mar 2024 19:17:10 +0000
ROA not before: Sat 09 Mar 2024 19:17:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:24:a5:cf:c6:ad:2e:5c:75:2b:75:15:7b:80:e9:a6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 9 19:17:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e91b9c78ddd4a6c9ced2b49968ff0e2676063474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:fd:2e:c8:0f:cf:e9:31:f9:10:40:19:77:
ad:f5:f4:93:30:a6:23:fb:44:09:f8:5d:b3:c8:69:
1b:66:2b:57:e7:00:76:1f:82:a9:f4:18:92:0c:1e:
60:bf:d8:b2:6a:dc:fa:71:cd:60:5f:5d:80:32:df:
34:7a:03:3e:db:4f:d2:9b:93:45:9e:c1:ae:2b:01:
3a:2d:e1:df:97:90:09:88:b0:f4:b7:19:ef:16:89:
26:4e:35:c3:2d:cc:0f:22:d5:00:35:fd:cb:6a:af:
1e:b9:eb:f4:e4:1d:27:e5:f6:9f:62:57:bb:aa:42:
54:94:26:1d:4e:30:1c:7c:af:b5:66:4b:a8:cc:b8:
b0:05:1d:12:2f:8d:6c:31:5f:05:dc:09:c3:92:9f:
8e:86:29:21:70:61:aa:05:05:a3:21:30:80:3b:53:
71:6b:aa:52:73:a4:e9:69:d9:07:8b:72:b3:16:11:
b8:e4:00:36:9f:94:b0:9c:b1:de:bd:e2:82:59:c4:
a1:17:55:6a:7d:80:09:98:48:5d:db:a6:46:62:19:
44:a8:61:91:29:bf:6b:19:34:51:c7:87:57:ff:26:
fa:0f:d1:36:a0:c6:f2:42:fd:a8:08:d4:54:23:8f:
3a:86:a2:81:da:66:63:25:50:c1:8f:b5:33:4a:fe:
d7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1B:9C:78:DD:D4:A6:C9:CE:D2:B4:99:68:FF:0E:26:76:06:34:74
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6RuceN3UpsnO0rSZaP8OJnYGNHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:de:f6:c8:65:66:9f:c0:32:74:03:e7:0f:5c:24:20:2a:4a:
c6:a5:ca:f1:b7:24:58:d9:69:53:dc:fa:29:9d:61:8f:56:f8:
1f:aa:dd:24:e0:9a:2a:96:44:7f:da:3c:33:73:95:c3:99:40:
1f:39:2c:d0:f2:69:ac:ba:5f:3e:b3:b9:ac:d8:03:d6:1f:f9:
1c:41:cd:63:7a:31:d3:ce:af:25:cc:2a:3c:b2:61:4e:bc:05:
58:95:74:8d:fc:e4:0f:de:ea:20:2f:9c:4a:c5:8e:14:f2:9e:
c7:79:7d:2d:9a:61:a5:23:b7:39:95:01:25:6d:ba:70:08:ea:
12:1f:48:ec:4d:7e:a8:e6:6a:2b:34:a2:37:af:57:e7:aa:45:
ea:ae:c7:0b:5c:28:7c:d0:14:97:71:e1:e0:de:39:71:9e:74:
f9:50:77:88:9d:d1:36:60:4e:70:cb:00:c9:21:1e:20:95:43:
fd:37:cd:08:11:18:c8:a7:44:36:09:e1:bc:14:21:b1:64:55:
4d:c3:9d:df:b9:c3:3c:37:65:7f:77:4d:40:d7:75:90:45:58:
8a:d7:ba:31:99:5d:ff:6b:3d:16:49:c8:fc:1f:82:a9:3d:0d:
33:79:7d:47:39:a4:0f:0a:85:55:62:4c:62:3f:9a:ab:3e:6a:
27:17:b9:55
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY4kpc/GrS5cdSt1FXuA6abVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzA5MTkxNzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTFiOWM3OGRkZDRhNmM5Y2VkMmI0OTk2OGZmMGUyNjc2MDYzNDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1P9LsgPz+kx+RBAGXet9fSTMKYj
+0QJ+F2zyGkbZitX5wB2H4Kp9BiSDB5gv9iyatz6cc1gX12AMt80egM+20/Sm5NF
nsGuKwE6LeHfl5AJiLD0txnvFokmTjXDLcwPItUANf3Laq8euev05B0n5fafYle7
qkJUlCYdTjAcfK+1ZkuozLiwBR0SL41sMV8F3AnDkp+OhikhcGGqBQWjITCAO1Nx
a6pSc6TpadkHi3KzFhG45AA2n5SwnLHeveKCWcShF1VqfYAJmEhd26ZGYhlEqGGR
Kb9rGTRRx4dX/yb6D9E2oMbyQv2oCNRUI486hqKB2mZjJVDBj7UzSv7XPwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOkbnHjd1KbJztK0mWj/DiZ2BjR0MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvNlJ1Y2VOM1Vwc25PMHJTWmFQOE9KbllHTkhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKbe9shlZp/AMnQD5w9c
JCAqSsalyvG3JFjZaVPc+imdYY9W+B+q3STgmiqWRH/aPDNzlcOZQB85LNDyaay6
Xz6zuazYA9Yf+RxBzWN6MdPOryXMKjyyYU68BViVdI385A/e6iAvnErFjhTynsd5
fS2aYaUjtzmVASVtunAI6hIfSOxNfqjmais0ojevV+eqRequxwtcKHzQFJdx4eDe
OXGedPlQd4id0TZgTnDLAMkhHiCVQ/03zQgRGMinRDYJ4bwUIbFkVU3Dnd+5wzw3
ZX93TUDXdZBFWIrXujGZXf9rPRZJyPwfgqk9DTN5fUc5pA8KhVViTGI/mqs+aicX
uVU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org