Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Dfyfqqdl2_gaYzSwuyLyWSMrai4.roa
File: Dfyfqqdl2_gaYzSwuyLyWSMrai4.roa (raw, json)
Hash identifier: lEHCkE19LzyvByrGGQGVQjXRFN1a8IDoPc3HlATVJmE=
Subject key identifier: 0D:FC:9F:AA:A7:65:DB:F8:1A:63:34:B0:BB:22:F2:59:23:2B:6A:2E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E4D9DB5B0DFDA084522F9F07AE45B5B97
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Dfyfqqdl2_gaYzSwuyLyWSMrai4.roa
Signing time: Sun 17 Mar 2024 18:12:45 +0000
ROA not before: Sun 17 Mar 2024 18:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4d:9d:b5:b0:df:da:08:45:22:f9:f0:7a:e4:5b:5b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 17 18:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dfc9faaa765dbf81a6334b0bb22f259232b6a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:76:6c:a4:02:ac:b8:0b:64:c3:7a:04:84:bb:
74:ae:cd:32:c2:06:87:5e:da:36:cb:cb:c6:14:89:
f5:8e:0f:a3:6c:ba:d4:06:27:a1:63:56:ba:70:ec:
05:57:7a:dd:9d:30:d1:8c:36:6a:a3:7f:e9:05:fd:
92:e0:a3:eb:78:bf:f5:cd:b5:d0:34:39:0a:da:9c:
22:48:d4:a6:af:3d:ba:20:43:1c:11:f4:bf:f2:5b:
81:2c:69:4d:12:c6:39:2e:5c:2e:22:4a:35:2c:58:
4e:70:4e:f8:80:de:ea:14:48:76:7c:57:a0:76:c5:
ae:1a:66:e6:f4:47:12:d9:3c:da:23:d8:b1:a7:bf:
a6:13:54:10:77:9a:d7:09:72:e0:88:88:49:50:34:
35:93:94:bb:be:de:9a:bb:83:7a:09:4d:50:30:3a:
36:64:e4:e1:6b:51:d6:58:09:55:81:bd:96:b6:94:
f8:89:cd:bf:d4:57:2d:7b:98:3d:a3:01:2a:00:b5:
42:94:ca:82:fb:d5:ee:d7:92:c8:6f:09:cc:38:ac:
99:fe:61:ed:ea:6c:9c:a6:16:82:99:df:61:ff:6f:
12:9b:e8:00:3f:de:d4:0c:9e:57:c8:e1:36:70:39:
48:b2:ed:48:e3:4c:77:9d:77:68:a7:de:d2:5f:80:
01:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FC:9F:AA:A7:65:DB:F8:1A:63:34:B0:BB:22:F2:59:23:2B:6A:2E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Dfyfqqdl2_gaYzSwuyLyWSMrai4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:4d:64:f1:1b:2e:f9:8e:e3:5a:af:84:b4:43:21:47:32:23:
de:42:fa:df:2f:37:3a:45:22:7e:9e:10:60:19:e5:4d:60:5f:
54:27:46:fb:cf:ad:d7:07:dc:52:be:07:24:e9:af:fb:78:0d:
47:56:67:bf:09:fb:b4:e7:57:1b:da:1e:54:a8:05:51:3e:78:
5d:83:53:80:27:27:db:f7:2d:b9:f3:bb:f2:f4:b0:60:e5:ee:
d0:57:d9:b5:bc:91:14:50:d6:fb:1e:4c:3b:20:fc:22:aa:3c:
92:d4:d9:12:31:76:a6:82:8f:5a:9c:52:5f:ce:24:b3:4d:65:
d2:23:0a:34:b3:9c:82:de:25:7d:64:95:c6:97:3e:52:d4:4c:
9a:68:af:85:0c:5c:64:8f:37:3a:6e:a5:6c:fd:06:62:95:77:
b5:68:a2:ad:2c:23:6e:9d:0c:c4:3c:08:2c:57:5b:ed:97:be:
a8:7b:78:d2:cf:66:ec:24:61:bf:5d:61:d6:3d:e8:f8:a8:fe:
64:d4:01:bc:17:46:c0:30:42:0d:e3:38:c6:00:4d:a0:18:53:
2c:0d:73:0a:62:4f:a1:be:10:d4:d4:85:d1:e6:e1:7e:2a:84:
0d:18:78:30:16:55:b4:c5:e6:e4:d7:ac:8c:f3:fd:5a:b4:73:
74:86:34:89
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5NnbWw39oIRSL58HrkW1uXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzE3MTgxMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGZjOWZhYWE3NjVkYmY4MWE2MzM0YjBiYjIyZjI1OTIzMmI2YTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonZspAKsuAtkw3oEhLt0rs0ywgaH
Xto2y8vGFIn1jg+jbLrUBiehY1a6cOwFV3rdnTDRjDZqo3/pBf2S4KPreL/1zbXQ
NDkK2pwiSNSmrz26IEMcEfS/8luBLGlNEsY5LlwuIko1LFhOcE74gN7qFEh2fFeg
dsWuGmbm9EcS2TzaI9ixp7+mE1QQd5rXCXLgiIhJUDQ1k5S7vt6au4N6CU1QMDo2
ZOTha1HWWAlVgb2WtpT4ic2/1Fcte5g9owEqALVClMqC+9Xu15LIbwnMOKyZ/mHt
6mycphaCmd9h/28Sm+gAP97UDJ5XyOE2cDlIsu1I40x3nXdop97SX4ABIQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA38n6qnZdv4GmM0sLsi8lkjK2ouMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvRGZ5ZnFxZGwyX2dhWXpTd3V5THlXU01yYWk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGRNZPEbLvmO41qvhLRD
IUcyI95C+t8vNzpFIn6eEGAZ5U1gX1QnRvvPrdcH3FK+ByTpr/t4DUdWZ78J+7Tn
VxvaHlSoBVE+eF2DU4AnJ9v3Lbnzu/L0sGDl7tBX2bW8kRRQ1vseTDsg/CKqPJLU
2RIxdqaCj1qcUl/OJLNNZdIjCjSznILeJX1klcaXPlLUTJpor4UMXGSPNzpupWz9
BmKVd7Vooq0sI26dDMQ8CCxXW+2Xvqh7eNLPZuwkYb9dYdY96Pio/mTUAbwXRsAw
Qg3jOMYATaAYUywNcwpiT6G+ENTUhdHm4X4qhA0YeDAWVbTF5uTXrIzz/Vq0c3SG
NIk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org