Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DZizTDQwltvQkrDyiJ8DsZ7t_JM.roa
File: DZizTDQwltvQkrDyiJ8DsZ7t_JM.roa (raw, json)
Hash identifier: 5O+TAcZ6cwEwb5OqOgFN8QSD0B3/IkhYKlLnV9wHvPM=
Subject key identifier: 0D:98:B3:4C:34:30:96:DB:D0:92:B0:F2:88:9F:03:B1:9E:ED:FC:93
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DCECE152127139A52B614AC30123ED379
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DZizTDQwltvQkrDyiJ8DsZ7t_JM.roa
Signing time: Thu 22 Feb 2024 03:13:48 +0000
ROA not before: Thu 22 Feb 2024 03:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ce:ce:15:21:27:13:9a:52:b6:14:ac:30:12:3e:d3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 22 03:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d98b34c343096dbd092b0f2889f03b19eedfc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:33:04:94:3e:f6:fc:f9:a4:bb:fe:ae:f2:67:
9b:83:6d:76:fa:0d:6f:2f:32:4a:99:00:a5:c1:5a:
ea:2c:a5:87:8e:aa:42:0d:17:06:31:54:6a:ee:2f:
80:a2:b3:f1:1b:68:19:12:a1:2a:70:27:9a:76:2e:
e8:6f:08:a4:95:c5:ab:f4:1c:96:39:8b:27:5e:43:
12:e0:6d:26:4e:5d:51:37:b2:ab:a6:98:29:5f:cc:
db:d7:cd:c4:e2:a5:34:9b:90:dc:3b:a8:ba:4b:1e:
17:e1:11:f9:5c:af:5f:a9:3b:ca:89:60:af:36:82:
35:fe:6f:da:3e:dd:05:82:f1:dc:36:36:83:8c:8f:
5c:e7:51:72:22:45:d7:81:2d:c0:f8:79:65:f6:b8:
2d:68:0b:bf:72:d5:a4:5c:d6:62:fc:77:f1:fd:16:
6a:28:b1:04:30:b1:b1:40:13:59:c8:37:87:1c:d4:
c1:7a:e6:5f:bb:f6:37:75:16:b3:19:b8:3a:c4:17:
5a:22:ee:13:6a:13:51:19:d7:60:c3:a6:e1:28:21:
79:7c:60:12:81:d7:83:41:b2:82:bf:d0:3b:26:16:
0f:2d:c9:13:50:8c:63:dd:ff:7e:6e:a4:d7:17:8b:
04:75:dd:17:59:b0:8b:a5:d0:cd:d6:d6:ac:c3:f9:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:98:B3:4C:34:30:96:DB:D0:92:B0:F2:88:9F:03:B1:9E:ED:FC:93
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DZizTDQwltvQkrDyiJ8DsZ7t_JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:36:37:6e:5f:b9:a9:b1:74:22:c2:70:3e:4e:21:f3:e6:99:
d5:08:32:7e:dd:15:94:6b:f7:e2:5c:ff:ca:03:08:88:16:64:
90:06:2b:9f:cc:ab:45:6c:3b:da:a6:fb:9b:8c:7e:43:ce:ed:
cb:58:10:36:4e:82:33:3e:dc:f5:1d:55:3f:0a:33:44:29:25:
0c:ae:51:50:2b:84:38:c4:e4:c4:30:e1:a0:09:9d:b0:2c:f2:
dc:19:57:78:12:33:d9:51:00:ed:32:57:ff:29:56:8b:c6:84:
38:b8:02:38:9e:62:8f:95:00:13:c2:84:ff:66:bf:92:a4:b5:
11:8d:f6:34:ba:05:62:35:f8:69:9b:00:c1:7e:73:a9:95:7d:
7b:65:25:d2:05:88:18:70:4d:5d:2d:4d:a2:57:8a:a7:71:6c:
a3:52:a5:93:88:25:89:71:da:97:ee:e2:66:8e:98:5d:a8:5c:
6b:8d:93:3e:60:7b:e6:78:f1:6d:94:26:13:cd:60:4d:73:77:
61:4e:51:fc:22:84:04:88:d0:df:3b:7b:21:ff:71:ed:ea:52:
b4:6d:15:2e:b0:fb:00:8f:29:ab:bb:ea:c7:82:f1:53:4f:d3:
1d:47:4c:14:2d:ad:ce:d6:6b:7c:a1:a6:da:e6:c2:d3:6c:11:
65:46:0a:3b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3OzhUhJxOaUrYUrDASPtN5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjIyMDMxMzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDk4YjM0YzM0MzA5NmRiZDA5MmIwZjI4ODlmMDNiMTllZWRmYzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDMElD72/Pmku/6u8mebg212+g1v
LzJKmQClwVrqLKWHjqpCDRcGMVRq7i+AorPxG2gZEqEqcCeadi7obwiklcWr9ByW
OYsnXkMS4G0mTl1RN7KrppgpX8zb183E4qU0m5DcO6i6Sx4X4RH5XK9fqTvKiWCv
NoI1/m/aPt0FgvHcNjaDjI9c51FyIkXXgS3A+Hll9rgtaAu/ctWkXNZi/Hfx/RZq
KLEEMLGxQBNZyDeHHNTBeuZfu/Y3dRazGbg6xBdaIu4TahNRGddgw6bhKCF5fGAS
gdeDQbKCv9A7JhYPLckTUIxj3f9+bqTXF4sEdd0XWbCLpdDN1tasw/lBbQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA2Ys0w0MJbb0JKw8oifA7Ge7fyTMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvRFppelREUXdsdHZRa3JEeWlKOERzWjd0X0pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIc2N25fuamxdCLCcD5O
IfPmmdUIMn7dFZRr9+Jc/8oDCIgWZJAGK5/Mq0VsO9qm+5uMfkPO7ctYEDZOgjM+
3PUdVT8KM0QpJQyuUVArhDjE5MQw4aAJnbAs8twZV3gSM9lRAO0yV/8pVovGhDi4
AjieYo+VABPChP9mv5KktRGN9jS6BWI1+GmbAMF+c6mVfXtlJdIFiBhwTV0tTaJX
iqdxbKNSpZOIJYlx2pfu4maOmF2oXGuNkz5ge+Z48W2UJhPNYE1zd2FOUfwihASI
0N87eyH/ce3qUrRtFS6w+wCPKau76seC8VNP0x1HTBQtrc7Wa3yhptrmwtNsEWVG
Cjs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org