Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BxwW-vsX1WmllbdL9pXUL2biXV8.roa
File: BxwW-vsX1WmllbdL9pXUL2biXV8.roa (raw, json)
Hash identifier: sPUyzxRbnW+3czhL7tCFSbiszNNbVcVriogWIIARNFo=
Subject key identifier: 07:1C:16:FA:FB:17:D5:69:A5:95:B7:4B:F6:95:D4:2F:66:E2:5D:5F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E4129D84B8C29F852E99E0EE1E6B682B2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BxwW-vsX1WmllbdL9pXUL2biXV8.roa
Signing time: Fri 15 Mar 2024 08:10:44 +0000
ROA not before: Fri 15 Mar 2024 08:10:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:29:d8:4b:8c:29:f8:52:e9:9e:0e:e1:e6:b6:82:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 15 08:10:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=071c16fafb17d569a595b74bf695d42f66e25d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:11:6d:75:46:25:a6:97:e0:c4:a7:65:44:5d:
40:75:de:45:18:51:b3:bc:0c:d2:64:6f:e2:62:d0:
0b:c5:2f:a3:ae:8e:5e:d1:81:88:38:56:a7:68:50:
c2:7a:bb:f8:04:10:94:17:bb:47:86:e3:a5:eb:ab:
63:e7:9e:6b:21:eb:61:46:bf:e2:02:05:89:68:ef:
2a:54:d8:3a:3f:90:ab:52:2c:a0:45:23:dd:e8:b0:
b1:1f:f1:4d:78:3c:a4:f7:bf:cf:a3:63:06:51:23:
07:b7:c0:4d:e1:f9:2e:6f:24:65:5a:3b:be:ca:ec:
98:73:1b:97:87:66:65:4d:90:c1:19:04:89:04:b9:
f0:cc:59:92:8f:e6:16:8c:b6:8c:d6:23:92:9f:52:
2d:48:6e:b6:42:e8:2f:e8:1c:31:2f:02:17:b5:7d:
70:8f:fc:0e:9c:1e:b4:60:a0:93:cf:23:2b:7c:43:
ad:97:28:9d:da:5f:2b:0c:6b:b0:02:aa:d6:24:5a:
75:c3:58:57:5d:45:98:78:b6:d9:33:a7:3c:94:75:
48:c9:98:e0:8c:bb:c3:c8:12:19:7c:eb:b6:1e:cc:
cb:ad:4d:4c:6d:9e:a3:d9:14:18:27:74:9d:cc:9f:
00:55:1f:1f:d3:ee:12:67:3c:74:92:a6:11:ab:47:
44:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1C:16:FA:FB:17:D5:69:A5:95:B7:4B:F6:95:D4:2F:66:E2:5D:5F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BxwW-vsX1WmllbdL9pXUL2biXV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:7b:48:7c:ed:99:aa:ce:03:de:1d:60:ca:9e:11:68:f4:05:
b2:35:9a:55:fd:77:d8:c7:33:c7:35:4c:ce:0e:df:91:ed:ff:
d0:d2:c8:d7:96:6e:0c:61:60:eb:9b:5b:f6:29:b2:2e:cf:57:
b8:20:54:e5:7a:57:4c:55:d9:18:36:29:f5:96:05:2b:1a:dc:
6e:e5:d1:0c:4d:0a:d9:6d:0c:1c:c0:e2:0b:7f:ad:bd:ae:20:
06:6f:08:4e:ae:bb:dc:72:09:6a:8f:ca:f9:a9:12:eb:ab:3e:
be:e7:29:f0:f3:65:e3:ec:a9:76:e6:0c:df:27:95:d6:2e:d0:
33:02:12:83:00:94:69:ff:4c:e5:47:41:1d:3c:06:bb:42:65:
12:f8:c0:f6:c0:d0:f4:50:ad:e1:df:10:ed:62:a8:89:39:26:
d3:4c:70:15:6b:79:f0:6e:a1:6a:bd:31:5c:6e:a6:74:51:a1:
f3:5b:ba:e1:10:0a:3f:1e:f3:a1:c2:77:a5:8f:b9:13:65:5c:
c6:09:76:29:80:99:1d:7a:af:81:99:1f:c6:4a:40:25:ed:c9:
b6:99:b9:53:09:58:5e:50:7d:a3:0c:4d:7b:42:7f:a1:ae:75:
a2:03:bb:c8:ce:2c:0a:ed:6d:b9:66:3e:a2:59:8c:37:bb:12:
7b:d8:82:88
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5BKdhLjCn4UumeDuHmtoKyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzE1MDgxMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzFjMTZmYWZiMTdkNTY5YTU5NWI3NGJmNjk1ZDQyZjY2ZTI1ZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghFtdUYlppfgxKdlRF1Add5FGFGz
vAzSZG/iYtALxS+jro5e0YGIOFanaFDCerv4BBCUF7tHhuOl66tj555rIethRr/i
AgWJaO8qVNg6P5CrUiygRSPd6LCxH/FNeDyk97/Po2MGUSMHt8BN4fkubyRlWju+
yuyYcxuXh2ZlTZDBGQSJBLnwzFmSj+YWjLaM1iOSn1ItSG62Qugv6BwxLwIXtX1w
j/wOnB60YKCTzyMrfEOtlyid2l8rDGuwAqrWJFp1w1hXXUWYeLbZM6c8lHVIyZjg
jLvDyBIZfOu2HszLrU1MbZ6j2RQYJ3SdzJ8AVR8f0+4SZzx0kqYRq0dEKwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAccFvr7F9VppZW3S/aV1C9m4l1fMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvQnh3Vy12c1gxV21sbGJkTDlwWFVMMmJpWFY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAp7SHztmarOA94dYMqe
EWj0BbI1mlX9d9jHM8c1TM4O35Ht/9DSyNeWbgxhYOubW/Ypsi7PV7ggVOV6V0xV
2Rg2KfWWBSsa3G7l0QxNCtltDBzA4gt/rb2uIAZvCE6uu9xyCWqPyvmpEuurPr7n
KfDzZePsqXbmDN8nldYu0DMCEoMAlGn/TOVHQR08BrtCZRL4wPbA0PRQreHfEO1i
qIk5JtNMcBVrefBuoWq9MVxupnRRofNbuuEQCj8e86HCd6WPuRNlXMYJdimAmR16
r4GZH8ZKQCXtybaZuVMJWF5QfaMMTXtCf6GudaIDu8jOLArtbblmPqJZjDe7EnvY
gog=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org