Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/B9jNJllsjpafapjQpGv_9MtP32E.roa
File: B9jNJllsjpafapjQpGv_9MtP32E.roa (raw, json)
Hash identifier: gRPqt802zPLwWwe02fgmy1RkjwmDXyJlMmpErFoH5eQ=
Subject key identifier: 07:D8:CD:26:59:6C:8E:96:9F:6A:98:D0:A4:6B:FF:F4:CB:4F:DF:61
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA18A34DB32E9D44FC0804E7B92EF623D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/B9jNJllsjpafapjQpGv_9MtP32E.roa
Signing time: Mon 25 Dec 2023 15:13:58 +0000
ROA not before: Mon 25 Dec 2023 15:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a1:8a:34:db:32:e9:d4:4f:c0:80:4e:7b:92:ef:62:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 25 15:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07d8cd26596c8e969f6a98d0a46bfff4cb4fdf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:97:70:83:94:7b:c8:b4:41:ef:ed:c0:a6:
ef:dd:c6:af:ea:aa:22:81:25:25:20:ac:63:74:c1:
b6:df:a0:25:24:36:2b:8d:89:7b:6b:5c:55:31:d7:
f6:3c:f7:6b:ed:e2:7d:92:40:6c:59:25:6f:22:d0:
f2:aa:3e:ff:ea:68:f1:b5:98:c6:60:af:94:96:26:
9d:be:17:22:6f:07:85:07:76:27:92:cb:65:8e:3c:
4b:21:e9:9a:c0:62:45:4d:c8:cf:2f:94:6e:49:be:
2d:17:b8:8c:b1:93:91:ea:d9:6f:ce:b5:33:da:dd:
6a:b2:cb:66:a9:26:cd:e1:4b:32:98:92:c8:4b:70:
3b:11:88:a8:6c:c6:28:12:84:3e:e3:38:74:ef:e6:
c7:14:f5:2f:81:99:97:3f:a6:90:54:1d:5e:50:2b:
b0:02:82:23:fa:bc:c3:6f:25:0d:66:ca:83:bb:3b:
b0:70:8b:66:b3:4f:e2:54:20:48:0a:b6:d3:bc:5f:
5b:44:9f:9b:d4:e3:fe:55:7b:f7:d7:9a:43:b8:d9:
36:af:93:5d:e4:67:30:5e:b6:d2:a6:a4:6e:94:4d:
08:e7:8e:3e:bb:e6:57:fe:b8:04:bf:b1:0a:67:e7:
1b:31:c3:c7:7c:28:45:aa:6c:de:4e:fc:01:c8:a0:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D8:CD:26:59:6C:8E:96:9F:6A:98:D0:A4:6B:FF:F4:CB:4F:DF:61
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/B9jNJllsjpafapjQpGv_9MtP32E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:57:6d:93:1a:5d:b7:90:f1:d5:6e:cc:ce:e6:7a:b2:d3:c2:
46:25:14:84:f6:1c:0e:cb:c9:24:bb:8d:53:84:24:54:ab:c7:
27:cc:53:87:e5:f7:1d:d5:a3:8a:1b:54:b8:91:01:94:58:9f:
4c:da:63:46:ab:15:da:00:51:29:2f:ea:00:51:eb:c9:09:bf:
8d:54:aa:fd:cb:9d:23:ae:8f:76:21:1f:55:a8:28:36:fe:1d:
0d:bc:54:3b:77:21:f3:4d:13:dc:5a:8d:06:ef:e8:48:aa:17:
38:f0:c1:2e:f1:2c:25:89:f5:1f:b1:32:2b:e1:02:f8:09:5e:
54:35:51:85:aa:9d:40:3f:ca:c1:bb:4e:b7:b6:54:29:67:fb:
b7:5c:07:56:3e:93:87:fa:e2:fa:b3:7f:2a:db:fa:ad:09:99:
c5:15:5b:61:1b:cd:e9:a6:5c:66:eb:f9:bd:f4:2a:71:8c:c4:
3f:4c:e1:ff:d8:7f:2f:07:73:39:eb:fe:02:82:8c:de:88:4f:
47:bf:b3:1a:0d:bf:c1:5f:ca:2e:47:a7:57:7a:4a:41:12:b5:
e0:47:25:5d:2d:34:ee:37:7f:de:5d:ea:dc:3f:15:4d:06:0f:
70:ad:85:43:d6:63:0d:e3:f7:f7:f0:be:ae:1f:ee:e5:76:9e:
59:27:60:fd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYyhijTbMunUT8CATnuS72I9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjI1MTUxMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2Q4Y2QyNjU5NmM4ZTk2OWY2YTk4ZDBhNDZiZmZmNGNiNGZkZjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPeXcIOUe8i0Qe/twKbv3cav6qoi
gSUlIKxjdMG236AlJDYrjYl7a1xVMdf2PPdr7eJ9kkBsWSVvItDyqj7/6mjxtZjG
YK+UliadvhcibweFB3YnkstljjxLIemawGJFTcjPL5RuSb4tF7iMsZOR6tlvzrUz
2t1qsstmqSbN4UsymJLIS3A7EYiobMYoEoQ+4zh07+bHFPUvgZmXP6aQVB1eUCuw
AoIj+rzDbyUNZsqDuzuwcItms0/iVCBICrbTvF9bRJ+b1OP+VXv315pDuNk2r5Nd
5GcwXrbSpqRulE0I544+u+ZX/rgEv7EKZ+cbMcPHfChFqmzeTvwByKDn4wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAfYzSZZbI6Wn2qY0KRr//TLT99hMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvQjlqTkpsbHNqcGFmYXBqUXBHdl85TXRQMzJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEpXbZMaXbeQ8dVuzM7m
erLTwkYlFIT2HA7LySS7jVOEJFSrxyfMU4fl9x3Vo4obVLiRAZRYn0zaY0arFdoA
USkv6gBR68kJv41Uqv3LnSOuj3YhH1WoKDb+HQ28VDt3IfNNE9xajQbv6EiqFzjw
wS7xLCWJ9R+xMivhAvgJXlQ1UYWqnUA/ysG7Tre2VCln+7dcB1Y+k4f64vqzfyrb
+q0JmcUVW2EbzemmXGbr+b30KnGMxD9M4f/Yfy8Hcznr/gKCjN6IT0e/sxoNv8Ff
yi5Hp1d6SkESteBHJV0tNO43f95d6tw/FU0GD3CthUPWYw3j9/fwvq4f7uV2nlkn
YP0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org