Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Dv8s_cjDIPycKevZBq9WwIiSclM.roa
File: Dv8s_cjDIPycKevZBq9WwIiSclM.roa (raw, json)
Hash identifier: DJWe/xG43a6RUMzVmFEYWbUULrbcyYNlL3ME8fca4Mw=
Subject key identifier: 0E:FF:2C:FD:C8:C3:20:FC:9C:29:EB:D9:06:AF:56:C0:88:92:72:53
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EBE0BDE48BFE39CDC6FF1E453B7C31DCD
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Dv8s_cjDIPycKevZBq9WwIiSclM.roa
Signing time: Mon 08 Apr 2024 14:10:32 +0000
ROA not before: Mon 08 Apr 2024 14:10:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:be:0b:de:48:bf:e3:9c:dc:6f:f1:e4:53:b7:c3:1d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 8 14:10:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0eff2cfdc8c320fc9c29ebd906af56c088927253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:2f:0e:ab:68:cf:25:7b:70:73:f9:8c:bb:
3e:98:13:df:81:cd:9a:f3:a5:c6:89:69:3e:db:23:
a3:9d:f8:98:97:76:29:44:24:97:43:ed:a7:74:c5:
1b:90:0a:22:58:8e:e5:a8:28:d8:25:13:64:1e:06:
8b:ba:15:ab:fc:7a:66:dc:5a:da:a0:3c:a4:30:62:
42:d5:76:de:c2:49:fc:e3:7a:1f:8e:72:46:f6:b1:
b2:7f:63:79:ea:29:af:23:42:b9:df:1f:2b:21:b4:
93:5e:79:11:a5:d7:09:b6:9f:62:9a:90:a8:81:ec:
34:2e:d5:53:11:79:02:14:6a:69:76:dd:1f:a9:cf:
b5:63:46:5e:a0:27:65:20:63:56:6e:cb:c5:bc:b3:
03:57:21:34:92:dd:af:08:2b:77:66:b4:cb:9f:bb:
16:53:22:59:d0:7d:97:a2:36:f0:06:0e:4c:5b:a9:
df:b5:7f:63:b3:81:39:f7:a4:02:dc:15:6f:a7:4e:
b9:0b:b4:4d:df:ec:23:47:7f:3c:c4:80:a9:3d:a1:
92:05:dc:60:c9:27:29:42:c4:f8:3a:db:6e:73:90:
f8:a6:41:fb:fa:e4:6a:b0:e9:f0:24:03:51:e8:b4:
b7:0a:fb:cc:75:fa:23:3c:6e:9b:ba:67:4d:5a:57:
1b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FF:2C:FD:C8:C3:20:FC:9C:29:EB:D9:06:AF:56:C0:88:92:72:53
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Dv8s_cjDIPycKevZBq9WwIiSclM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:6a:21:3e:ed:66:80:95:0c:a3:bc:18:0f:bc:fd:24:bd:84:
22:01:d8:cf:a5:18:ae:3b:5d:55:51:4a:49:c6:61:05:75:e9:
04:71:b2:ff:14:e1:90:c2:3c:84:21:a5:7c:f4:09:04:9f:df:
0b:26:9c:92:06:26:da:2d:bd:84:2b:82:2f:10:7a:ae:3c:c3:
55:da:06:be:a5:27:e2:aa:60:f9:a2:7e:d7:5f:17:6c:53:3b:
e2:01:b9:a6:a3:f8:cc:84:c7:02:a0:5b:c3:da:8e:8f:3a:d4:
eb:c8:05:25:72:55:ea:95:03:19:b8:62:d0:be:1b:df:df:b4:
e7:bb:9c:90:db:38:bc:24:8c:b6:9e:37:45:45:2c:54:bf:d7:
f3:7a:89:67:3a:90:7b:09:01:b1:51:5d:9f:99:49:89:08:c2:
62:9c:0b:f8:cd:18:b8:3e:e1:84:9f:e6:75:30:39:e9:4c:79:
2e:7f:63:7d:5a:5b:46:4b:b3:b4:3b:eb:f2:34:e8:3d:43:04:
e8:1e:f4:5f:6d:26:97:08:27:2a:37:08:ec:35:79:f6:34:19:
f9:8f:20:06:63:92:bd:ca:fc:df:27:1f:00:29:c0:e9:d4:66:
1c:4b:90:41:21:92:17:f5:81:66:90:c1:37:c5:74:9a:99:d3:
4b:1c:ed:99
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6+C95Iv+Oc3G/x5FO3wx3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDA4MTQxMDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWZmMmNmZGM4YzMyMGZjOWMyOWViZDkwNmFmNTZjMDg4OTI3MjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3MvDqtozyV7cHP5jLs+mBPfgc2a
86XGiWk+2yOjnfiYl3YpRCSXQ+2ndMUbkAoiWI7lqCjYJRNkHgaLuhWr/Hpm3Fra
oDykMGJC1Xbewkn843ofjnJG9rGyf2N56imvI0K53x8rIbSTXnkRpdcJtp9impCo
gew0LtVTEXkCFGppdt0fqc+1Y0ZeoCdlIGNWbsvFvLMDVyE0kt2vCCt3ZrTLn7sW
UyJZ0H2XojbwBg5MW6nftX9js4E596QC3BVvp065C7RN3+wjR388xICpPaGSBdxg
yScpQsT4Ottuc5D4pkH7+uRqsOnwJANR6LS3CvvMdfojPG6bumdNWlcbmwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA7/LP3IwyD8nCnr2QavVsCIknJTMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvRHY4c19jakRJUHljS2V2WkJxOVd3SWlTY2xNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFFqIT7tZoCVDKO8GA+8
/SS9hCIB2M+lGK47XVVRSknGYQV16QRxsv8U4ZDCPIQhpXz0CQSf3wsmnJIGJtot
vYQrgi8Qeq48w1XaBr6lJ+KqYPmiftdfF2xTO+IBuaaj+MyExwKgW8Pajo861OvI
BSVyVeqVAxm4YtC+G9/ftOe7nJDbOLwkjLaeN0VFLFS/1/N6iWc6kHsJAbFRXZ+Z
SYkIwmKcC/jNGLg+4YSf5nUwOelMeS5/Y31aW0ZLs7Q76/I06D1DBOge9F9tJpcI
Jyo3COw1efY0GfmPIAZjkr3K/N8nHwApwOnUZhxLkEEhkhf1gWaQwTfFdJqZ00sc
7Zk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:49 2024 by rpki-client on console-ams.rpki-client.org