Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ChBfluW9MEvHFLjHFctKb5pVaV4.roa
File: ChBfluW9MEvHFLjHFctKb5pVaV4.roa (raw, json)
Hash identifier: rihc3LZWJAOZMOlng92S8yHbAdqI9gSETZx//tDR4YE=
Subject key identifier: 0A:10:5F:96:E5:BD:30:4B:C7:14:B8:C7:15:CB:4A:6F:9A:55:69:5E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE66B1BB07FBB3BA621E3979B5D57C3D9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ChBfluW9MEvHFLjHFctKb5pVaV4.roa
Signing time: Mon 08 Jan 2024 00:13:48 +0000
ROA not before: Mon 08 Jan 2024 00:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e6:6b:1b:b0:7f:bb:3b:a6:21:e3:97:9b:5d:57:c3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 8 00:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a105f96e5bd304bc714b8c715cb4a6f9a55695e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8a:4d:e2:d6:b9:b6:eb:1f:4f:3f:38:31:1f:
51:50:e9:06:dd:51:14:25:59:54:47:10:b7:08:0f:
04:f9:62:cf:85:29:02:03:c7:a7:46:46:8d:c0:32:
6a:7d:b1:af:87:bc:5f:11:c1:1e:8c:fa:2c:fe:52:
a8:d8:5a:11:f6:e6:71:97:18:4b:3a:4f:de:5d:e5:
60:65:b8:ad:df:72:85:53:35:e0:1a:d1:1c:b3:3e:
47:ce:fe:89:b4:a1:75:c2:bb:f0:57:b6:29:8d:62:
62:71:58:f5:93:bc:66:d0:2e:10:16:e2:f8:61:0d:
f1:2a:c7:6e:b5:2d:04:8c:65:da:78:ae:6f:56:93:
27:56:e3:ea:f8:27:38:a6:93:5a:e2:c7:f8:14:46:
40:fd:47:ad:eb:5e:02:2a:80:48:d9:86:07:3f:d1:
84:db:95:05:0f:dc:8e:04:17:22:7a:d5:b6:0a:b7:
25:a8:13:0a:a6:d1:f4:ae:3c:73:03:df:02:03:09:
3c:44:dc:1f:41:5a:69:1c:c1:ff:94:69:ab:fb:3c:
53:c7:02:bf:95:5f:1c:d2:bd:a2:1f:95:54:f2:28:
f6:3b:2d:1c:77:04:b6:d2:8a:1c:0c:47:1e:c3:6a:
9e:53:94:f7:99:6a:cc:27:cd:6d:69:86:53:76:0a:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:10:5F:96:E5:BD:30:4B:C7:14:B8:C7:15:CB:4A:6F:9A:55:69:5E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ChBfluW9MEvHFLjHFctKb5pVaV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:db:6e:b9:19:d9:dd:b4:4e:28:3a:70:42:9d:74:fe:5f:34:
4c:1f:d4:f2:78:19:a9:9f:17:69:da:7a:8c:3d:06:df:27:19:
11:14:ed:cb:d5:25:e6:69:65:b9:31:2d:79:50:fb:ff:1e:bc:
4d:1c:2a:c6:be:2d:9c:fe:cd:71:24:d7:80:b8:32:1b:c8:be:
ff:b7:71:3f:fa:7b:fc:f4:a2:50:ae:00:cb:95:96:0a:49:08:
09:54:43:4c:b5:ff:9e:84:b9:dd:90:56:78:31:e1:d0:5f:9f:
83:f7:ba:43:d0:95:8c:77:05:f6:d9:50:b1:6f:67:b9:a6:8c:
2a:4d:f7:7b:ef:6b:db:8a:74:55:3c:32:72:a0:ae:a2:62:6c:
88:af:8f:9f:4c:fe:ca:74:0b:59:c0:22:dd:f0:d2:cf:0e:8e:
0a:c2:eb:bf:2e:92:4a:57:fa:03:d7:54:cd:e0:fc:c7:e2:8b:
15:64:6d:bd:6a:52:29:7a:8e:82:0b:bc:f7:53:81:49:63:6b:
37:a2:23:f3:4d:dc:7f:76:7b:53:33:24:d6:34:28:a6:c6:02:
6f:73:12:4a:4e:1d:69:31:6e:4b:c4:63:99:f2:a6:74:31:e0:
24:6f:67:55:27:49:e6:3b:46:f6:aa:4e:17:80:e2:6b:14:dc:
bc:de:98:4c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzmaxuwf7s7piHjl5tdV8PZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTA4MDAxMzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTEwNWY5NmU1YmQzMDRiYzcxNGI4YzcxNWNiNGE2ZjlhNTU2OTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4pN4ta5tusfTz84MR9RUOkG3VEU
JVlURxC3CA8E+WLPhSkCA8enRkaNwDJqfbGvh7xfEcEejPos/lKo2FoR9uZxlxhL
Ok/eXeVgZbit33KFUzXgGtEcsz5Hzv6JtKF1wrvwV7YpjWJicVj1k7xm0C4QFuL4
YQ3xKsdutS0EjGXaeK5vVpMnVuPq+Cc4ppNa4sf4FEZA/Uet614CKoBI2YYHP9GE
25UFD9yOBBcietW2CrclqBMKptH0rjxzA98CAwk8RNwfQVppHMH/lGmr+zxTxwK/
lV8c0r2iH5VU8ij2Oy0cdwS20oocDEcew2qeU5T3mWrMJ81taYZTdgrNLQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAoQX5blvTBLxxS4xxXLSm+aVWleMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvQ2hCZmx1VzlNRXZIRkxqSEZjdEtiNXBWYVY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG/bbrkZ2d20Tig6cEKd
dP5fNEwf1PJ4GamfF2naeow9Bt8nGREU7cvVJeZpZbkxLXlQ+/8evE0cKsa+LZz+
zXEk14C4MhvIvv+3cT/6e/z0olCuAMuVlgpJCAlUQ0y1/56Eud2QVngx4dBfn4P3
ukPQlYx3BfbZULFvZ7mmjCpN93vva9uKdFU8MnKgrqJibIivj59M/sp0C1nAIt3w
0s8OjgrC678ukkpX+gPXVM3g/MfiixVkbb1qUil6joILvPdTgUljazeiI/NN3H92
e1MzJNY0KKbGAm9zEkpOHWkxbkvEY5nypnQx4CRvZ1UnSeY7RvaqTheA4msU3Lze
mEw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:30 2024 by rpki-client on console-fra.rpki-client.org