Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FJV5hjJuG4zUHwKd1xxj2Or_PgM.roa
File: FJV5hjJuG4zUHwKd1xxj2Or_PgM.roa (raw, json)
Hash identifier: hGk7RyCgC+A2bZACm3DiSvTq6jZBs8opjIVacR7BXcU=
Subject key identifier: 14:95:79:86:32:6E:1B:8C:D4:1F:02:9D:D7:1C:63:D8:EA:FF:3E:03
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DF6B67216F76F0EC06F835ACCD491A103
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FJV5hjJuG4zUHwKd1xxj2Or_PgM.roa
Signing time: Thu 29 Feb 2024 21:12:48 +0000
ROA not before: Thu 29 Feb 2024 21:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f6:b6:72:16:f7:6f:0e:c0:6f:83:5a:cc:d4:91:a1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 29 21:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14957986326e1b8cd41f029dd71c63d8eaff3e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6e:98:c6:6d:2a:c0:ce:39:49:06:e5:84:f7:
02:bd:30:bd:f6:fc:d9:33:6b:0c:dc:75:d5:b8:3a:
d8:18:09:21:6e:fa:f6:85:93:b2:1f:cd:f2:f9:d4:
dd:8f:c1:ae:59:e7:56:6f:be:64:5f:68:05:14:70:
ed:c4:a3:8b:1d:c0:cb:e4:aa:b5:da:f0:ed:87:74:
0d:9a:ef:53:09:a9:60:19:66:7c:ea:4a:db:eb:ee:
a7:20:05:03:bc:fb:ce:31:4a:4c:f1:1a:e8:64:50:
91:80:d2:b9:38:10:56:32:d9:ec:65:2f:9f:d8:ed:
32:4f:6a:fb:9a:d9:8b:53:98:fb:6a:7f:4f:16:e6:
01:64:33:e2:4e:88:73:cf:88:ca:0d:4c:c8:63:24:
4f:76:b2:76:a6:44:cb:da:92:90:6e:c0:4d:56:31:
02:cf:2e:3a:53:89:fa:1c:91:f4:ae:44:db:bb:73:
36:55:8e:82:b1:f8:c8:9b:33:1c:01:9e:77:26:ff:
1f:2d:15:0b:04:ec:9b:ed:4a:00:b6:ff:76:42:03:
85:79:e3:f9:54:bb:e2:d0:fd:94:61:3b:54:ea:4d:
dc:9b:0c:15:b8:ab:48:d7:7e:03:95:cf:e7:c0:60:
5f:b1:84:00:f7:eb:26:af:81:1d:cb:b4:69:02:11:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:95:79:86:32:6E:1B:8C:D4:1F:02:9D:D7:1C:63:D8:EA:FF:3E:03
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FJV5hjJuG4zUHwKd1xxj2Or_PgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:e4:6c:97:47:2d:ba:6b:f5:d7:92:96:0e:31:9b:16:57:9d:
10:c7:41:81:6a:19:6f:5c:36:76:8d:3b:09:d9:54:78:92:5c:
84:de:84:ca:4d:0b:65:65:bc:f5:9d:3b:98:b1:b3:b4:a8:04:
8e:1b:a5:84:8e:3b:30:08:d2:f8:71:25:d5:c8:27:e7:93:68:
7c:1e:53:8d:36:29:f3:cd:9e:9b:bc:f2:0b:3d:c3:21:3c:f1:
9f:6f:99:87:eb:54:04:43:e0:c2:67:7b:bc:92:1d:50:ee:b4:
02:e2:20:75:91:17:76:c4:1e:c8:5c:24:ac:f9:38:b6:85:d5:
09:30:80:36:c4:62:d3:7e:7a:38:2c:d8:4e:8d:f7:e3:23:93:
5d:90:8b:e9:4f:25:4b:bf:b5:42:99:ea:37:dd:f8:ea:a0:f8:
77:dc:38:90:97:d7:83:91:dc:7e:3c:38:32:41:06:cd:cd:94:
e0:d8:f0:7d:90:be:c9:09:a9:6d:11:eb:64:1a:6c:b8:cf:11:
28:51:8b:39:0e:73:62:4b:9c:49:ac:aa:e4:2f:58:70:bb:0f:
ac:b0:39:73:e2:29:fa:a3:95:6f:12:84:97:d6:a7:b8:dd:7f:
21:99:62:59:bb:d6:09:bc:db:23:4f:34:01:93:fa:fd:1c:fc:
2f:e1:c4:f1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY32tnIW928OwG+DWszUkaEDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjI5MjExMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDk1Nzk4NjMyNmUxYjhjZDQxZjAyOWRkNzFjNjNkOGVhZmYzZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG6Yxm0qwM45SQblhPcCvTC99vzZ
M2sM3HXVuDrYGAkhbvr2hZOyH83y+dTdj8GuWedWb75kX2gFFHDtxKOLHcDL5Kq1
2vDth3QNmu9TCalgGWZ86krb6+6nIAUDvPvOMUpM8RroZFCRgNK5OBBWMtnsZS+f
2O0yT2r7mtmLU5j7an9PFuYBZDPiTohzz4jKDUzIYyRPdrJ2pkTL2pKQbsBNVjEC
zy46U4n6HJH0rkTbu3M2VY6CsfjImzMcAZ53Jv8fLRULBOyb7UoAtv92QgOFeeP5
VLvi0P2UYTtU6k3cmwwVuKtI134Dlc/nwGBfsYQA9+smr4Edy7RpAhEHHwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBSVeYYybhuM1B8CndccY9jq/z4DMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvRkpWNWhqSnVHNHpVSHdLZDF4eGoyT3JfUGdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEHkbJdHLbpr9deSlg4x
mxZXnRDHQYFqGW9cNnaNOwnZVHiSXITehMpNC2VlvPWdO5ixs7SoBI4bpYSOOzAI
0vhxJdXIJ+eTaHweU402KfPNnpu88gs9wyE88Z9vmYfrVARD4MJne7ySHVDutALi
IHWRF3bEHshcJKz5OLaF1QkwgDbEYtN+ejgs2E6N9+Mjk12Qi+lPJUu/tUKZ6jfd
+Oqg+HfcOJCX14OR3H48ODJBBs3NlODY8H2QvskJqW0R62QabLjPEShRizkOc2JL
nEmsquQvWHC7D6ywOXPiKfqjlW8ShJfWp7jdfyGZYlm71gm82yNPNAGT+v0c/C/h
xPE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org