Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BgRiVdh6W1_FbZKItpRMamW0KWI.roa
File: BgRiVdh6W1_FbZKItpRMamW0KWI.roa (raw, json)
Hash identifier: VjDsjOzQZJmoD2+uDKdCgJ2KoODbpkMI0FpxzZmquVw=
Subject key identifier: 06:04:62:55:D8:7A:5B:5F:C5:6D:92:88:B6:94:4C:6A:65:B4:29:62
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E9A6D6830355A1F913FABB664BBFA1D89
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BgRiVdh6W1_FbZKItpRMamW0KWI.roa
Signing time: Mon 01 Apr 2024 16:10:45 +0000
ROA not before: Mon 01 Apr 2024 16:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9a:6d:68:30:35:5a:1f:91:3f:ab:b6:64:bb:fa:1d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 1 16:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06046255d87a5b5fc56d9288b6944c6a65b42962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:aa:80:3b:95:47:a5:12:7f:52:0f:2d:5c:
89:e8:1d:62:04:31:da:a5:93:93:e1:5f:be:02:af:
d1:f9:3f:87:ff:47:40:c1:f8:f6:8d:f5:6d:5e:87:
f6:29:26:eb:f8:b0:75:c2:ad:1a:50:82:4a:59:af:
7a:31:3b:0b:1e:1a:93:2e:55:e5:b3:d4:ee:6c:f3:
a9:cb:19:95:92:3b:36:34:98:bb:15:00:f8:82:20:
42:32:2f:72:ad:99:b3:54:6a:ec:85:70:93:4c:e9:
d5:49:bf:d9:f9:44:d1:62:74:b9:38:06:0d:c1:0a:
c8:d5:af:e6:19:db:88:73:27:e2:48:93:e1:f9:3b:
4c:7f:bf:96:0a:b0:0d:08:79:d8:17:d1:c2:6e:04:
1b:36:61:53:35:27:61:12:08:5c:0f:d9:d3:ed:55:
54:b2:19:e1:cb:23:b6:36:f1:c0:31:12:e6:e9:77:
34:64:af:42:03:b1:59:c7:19:f2:69:e0:ad:c8:50:
5c:c9:37:6e:cb:b6:9e:9b:e5:e8:61:d8:d1:e1:a8:
e3:37:ee:3d:a4:52:34:9d:f9:32:fd:11:c0:5a:cd:
f6:09:ab:6d:83:0e:7b:98:cb:e6:e4:c9:c3:45:c3:
4a:c6:09:76:3c:b9:77:70:e5:d8:0b:52:42:c0:7a:
08:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:04:62:55:D8:7A:5B:5F:C5:6D:92:88:B6:94:4C:6A:65:B4:29:62
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BgRiVdh6W1_FbZKItpRMamW0KWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:36:1f:9c:31:1c:3f:5e:b9:56:8f:cc:88:0c:ea:56:c0:a2:
27:12:fc:c4:0a:5a:67:d9:54:42:05:c4:a1:f2:4a:97:4f:9d:
77:00:54:5f:0d:a0:37:21:97:4a:a5:bb:ab:e3:71:f0:c4:9a:
e5:93:a6:c8:35:61:80:52:27:90:5f:91:ab:28:5c:13:34:60:
48:68:ba:50:b5:d9:68:00:c4:1c:ea:b5:97:9a:ef:e4:5e:88:
ff:30:ef:9c:f2:6b:cb:ea:27:48:03:af:97:ca:19:60:de:d4:
98:70:6d:4e:49:42:46:e1:f8:d9:74:24:f6:a5:3c:0e:c6:9b:
32:7a:0d:df:f2:8a:28:98:02:7e:5a:fb:44:4b:3e:0e:2d:b4:
3c:f9:41:bf:48:14:0c:62:c7:f5:2d:bc:1c:b0:d1:4a:66:c8:
70:bf:48:be:23:cc:a7:76:4d:87:ad:b8:de:20:9f:35:f3:97:
36:f6:0c:f5:30:c1:02:ab:f8:63:23:44:92:d6:5a:67:57:1b:
fd:0f:67:aa:82:31:61:3f:49:0b:ef:77:b4:04:65:6d:45:50:
45:77:69:ec:52:66:08:6a:a5:b4:a1:9a:1b:df:6c:7e:8b:53:
d4:27:ff:0c:8e:87:1c:99:b3:b4:47:6e:49:83:40:f4:16:ec:
d8:70:35:67
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6abWgwNVofkT+rtmS7+h2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDAxMTYxMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjA0NjI1NWQ4N2E1YjVmYzU2ZDkyODhiNjk0NGM2YTY1YjQyOTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYmqgDuVR6USf1IPLVyJ6B1iBDHa
pZOT4V++Aq/R+T+H/0dAwfj2jfVtXof2KSbr+LB1wq0aUIJKWa96MTsLHhqTLlXl
s9TubPOpyxmVkjs2NJi7FQD4giBCMi9yrZmzVGrshXCTTOnVSb/Z+UTRYnS5OAYN
wQrI1a/mGduIcyfiSJPh+TtMf7+WCrANCHnYF9HCbgQbNmFTNSdhEghcD9nT7VVU
shnhyyO2NvHAMRLm6Xc0ZK9CA7FZxxnyaeCtyFBcyTduy7aem+XoYdjR4ajjN+49
pFI0nfky/RHAWs32Cattgw57mMvm5MnDRcNKxgl2PLl3cOXYC1JCwHoIRQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAYEYlXYeltfxW2SiLaUTGpltCliMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvQmdSaVZkaDZXMV9GYlpLSXRwUk1hbVcwS1dJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAI2H5wxHD9euVaPzIgM
6lbAoicS/MQKWmfZVEIFxKHySpdPnXcAVF8NoDchl0qlu6vjcfDEmuWTpsg1YYBS
J5BfkasoXBM0YEhoulC12WgAxBzqtZea7+ReiP8w75zya8vqJ0gDr5fKGWDe1Jhw
bU5JQkbh+Nl0JPalPA7GmzJ6Dd/yiiiYAn5a+0RLPg4ttDz5Qb9IFAxix/UtvByw
0UpmyHC/SL4jzKd2TYetuN4gnzXzlzb2DPUwwQKr+GMjRJLWWmdXG/0PZ6qCMWE/
SQvvd7QEZW1FUEV3aexSZghqpbShmhvfbH6LU9Qn/wyOhxyZs7RHbkmDQPQW7Nhw
NWc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org