Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/B-yqUdbhhHBbKizEo07W4jI0S1E.roa
File: B-yqUdbhhHBbKizEo07W4jI0S1E.roa (raw, json)
Hash identifier: Bo9TPo31bf36GE8v9s0JSKlwQ4+HgRUDIUDpc/ZjrJg=
Subject key identifier: 07:EC:AA:51:D6:E1:84:70:5B:2A:2C:C4:A3:4E:D6:E2:32:34:4B:51
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D3B2D76B4DDCF4256BEE398A609A61C97
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/B-yqUdbhhHBbKizEo07W4jI0S1E.roa
Signing time: Wed 24 Jan 2024 11:14:11 +0000
ROA not before: Wed 24 Jan 2024 11:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:2d:76:b4:dd:cf:42:56:be:e3:98:a6:09:a6:1c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 24 11:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07ecaa51d6e184705b2a2cc4a34ed6e232344b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:86:fe:3c:d8:d7:53:9d:0e:c0:aa:57:d1:2b:
79:6e:ee:1a:82:e2:5f:0a:15:12:81:c1:d6:bb:a9:
56:c1:99:d6:90:da:10:48:90:86:b9:78:7b:d4:71:
c9:fb:a2:4e:f5:07:37:b8:df:e0:af:97:84:ea:30:
ce:0d:36:03:79:02:e5:9b:94:5a:5e:a8:5f:36:35:
5b:cd:c7:96:da:d8:a0:4e:12:9a:ef:03:e5:7d:27:
49:ad:96:2b:a8:ed:3e:2b:8a:4a:10:df:03:e5:86:
89:08:1d:a8:ae:a0:b7:b0:b5:96:08:4c:8b:81:82:
b0:1d:5b:87:5d:4d:3b:e4:2c:f9:7e:e6:8a:d2:1c:
d5:2d:f0:bf:f7:15:48:95:f9:e9:f7:4c:54:c0:f1:
18:0e:82:0e:4e:50:99:85:e5:08:e0:78:43:2b:3b:
ad:aa:4c:30:63:46:73:63:4f:6e:87:86:ef:0b:8b:
31:a7:f8:df:10:53:19:53:7a:5a:47:59:b5:cb:71:
3e:15:de:66:e2:37:a1:09:3b:e5:6d:c0:45:bc:12:
b0:31:6f:bd:48:b3:0a:27:c5:85:13:f8:53:e9:4c:
60:86:bf:62:da:19:7a:63:7e:4a:d4:71:38:15:57:
65:29:66:67:4e:17:60:a5:ce:4e:8d:55:53:7c:a5:
37:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EC:AA:51:D6:E1:84:70:5B:2A:2C:C4:A3:4E:D6:E2:32:34:4B:51
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/B-yqUdbhhHBbKizEo07W4jI0S1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:0a:95:12:0a:b5:47:dc:54:2f:6e:84:43:a0:ac:18:d0:9a:
71:f6:f4:3a:2c:de:4a:9d:96:00:f7:02:83:f7:f6:ec:55:6e:
31:1c:5d:87:02:91:47:79:7b:b2:5a:75:57:66:8f:99:d4:a7:
d4:97:57:25:52:58:e0:02:e9:62:d9:59:0b:2e:cf:df:a7:f3:
b7:8e:42:38:da:77:bd:ac:7b:06:c0:f6:57:78:e0:63:cc:ec:
f5:2c:a4:c1:6b:9f:c5:6e:6c:ee:51:5c:92:b3:d4:14:e2:9c:
b4:56:41:cb:42:81:54:3e:51:b2:44:8a:78:c8:04:59:47:d5:
ea:ad:95:b0:85:ba:b7:2b:52:74:44:80:c5:c8:39:7e:82:af:
af:ab:47:41:ba:19:c5:92:94:c6:da:71:60:2d:a5:d6:f2:77:
41:22:8d:b6:6b:9e:07:48:c5:ee:9b:7e:e5:e7:ed:b6:4f:c5:
71:be:66:13:f6:92:79:cd:2a:fa:a3:ca:7f:71:25:cc:8c:c8:
c2:5b:33:aa:df:5d:47:b8:87:2e:47:be:9c:a0:ad:be:01:0a:
f3:ab:e9:b7:b2:53:44:99:84:87:7e:0d:c8:f7:81:23:c6:5e:
ed:58:88:54:11:ce:66:00:24:e9:bc:2d:46:e4:c8:25:80:6d:
42:7f:a5:9f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY07LXa03c9CVr7jmKYJphyXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTI0MTExNDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2VjYWE1MWQ2ZTE4NDcwNWIyYTJjYzRhMzRlZDZlMjMyMzQ0YjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4b+PNjXU50OwKpX0St5bu4aguJf
ChUSgcHWu6lWwZnWkNoQSJCGuXh71HHJ+6JO9Qc3uN/gr5eE6jDODTYDeQLlm5Ra
XqhfNjVbzceW2tigThKa7wPlfSdJrZYrqO0+K4pKEN8D5YaJCB2orqC3sLWWCEyL
gYKwHVuHXU075Cz5fuaK0hzVLfC/9xVIlfnp90xUwPEYDoIOTlCZheUI4HhDKzut
qkwwY0ZzY09uh4bvC4sxp/jfEFMZU3paR1m1y3E+Fd5m4jehCTvlbcBFvBKwMW+9
SLMKJ8WFE/hT6Uxghr9i2hl6Y35K1HE4FVdlKWZnThdgpc5OjVVTfKU3EwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAfsqlHW4YRwWyosxKNO1uIyNEtRMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvQi15cVVkYmhoSEJiS2l6RW8wN1c0akkwUzFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIkKlRIKtUfcVC9uhEOg
rBjQmnH29Dos3kqdlgD3AoP39uxVbjEcXYcCkUd5e7JadVdmj5nUp9SXVyVSWOAC
6WLZWQsuz9+n87eOQjjad72sewbA9ld44GPM7PUspMFrn8VubO5RXJKz1BTinLRW
QctCgVQ+UbJEinjIBFlH1eqtlbCFurcrUnREgMXIOX6Cr6+rR0G6GcWSlMbacWAt
pdbyd0EijbZrngdIxe6bfuXn7bZPxXG+ZhP2knnNKvqjyn9xJcyMyMJbM6rfXUe4
hy5Hvpygrb4BCvOr6beyU0SZhId+Dcj3gSPGXu1YiFQRzmYAJOm8LUbkyCWAbUJ/
pZ8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org