Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FkaItCJXq_oFvqjYfIVMr7IZyg0.roa
File: FkaItCJXq_oFvqjYfIVMr7IZyg0.roa (raw, json)
Hash identifier: c3eOvgBGKqnFbIzqdIuUpZRGuvMu3Z7ta1TnLoHEuKs=
Subject key identifier: 16:46:88:B4:22:57:AB:FA:05:BE:A8:D8:7C:85:4C:AF:B2:19:CA:0D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018ED9BC670EF386CDF6E6E96E4CEFB53E78
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FkaItCJXq_oFvqjYfIVMr7IZyg0.roa
Signing time: Sat 13 Apr 2024 23:13:06 +0000
ROA not before: Sat 13 Apr 2024 23:13:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d9:bc:67:0e:f3:86:cd:f6:e6:e9:6e:4c:ef:b5:3e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 13 23:13:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=164688b42257abfa05bea8d87c854cafb219ca0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:41:06:2d:56:d7:98:dd:6d:69:4c:41:f7:
68:c0:95:42:11:86:ab:6e:c7:fc:55:32:31:83:8e:
f9:f7:30:f4:fb:3e:2a:e5:6e:1d:fc:58:f8:67:b6:
88:7f:8d:aa:fd:5d:94:15:fd:4f:01:18:14:b7:3e:
30:de:06:ce:ad:59:76:80:b7:51:82:27:82:12:bd:
20:28:32:c6:28:fb:ec:3a:62:a7:3a:bc:4c:97:42:
23:f9:00:39:37:43:2a:be:0e:ce:c1:08:06:77:5f:
0a:0a:64:8c:1f:44:76:85:26:0d:ea:0c:29:db:ba:
27:f9:98:cb:0e:15:a6:68:39:4c:93:8e:4e:9e:99:
58:84:45:61:f0:8b:7c:5c:13:f4:d1:c6:f7:11:e8:
a2:e3:4e:85:fd:4d:bc:fe:83:0c:8c:5d:d2:be:ed:
76:59:08:5c:6f:c0:ec:ed:4f:bf:df:f5:b1:85:8d:
22:ed:53:95:19:80:5f:b9:88:e2:26:9d:79:d6:b3:
17:ec:e3:f1:ae:a4:08:de:ab:de:65:78:45:a3:da:
89:4b:31:8c:c6:09:e3:34:97:df:24:8e:60:5a:20:
b9:a2:9b:f9:50:4c:e6:3e:10:4d:ff:67:ab:21:f3:
99:08:7f:db:9b:18:14:42:a6:1f:99:75:90:ae:a8:
c4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:46:88:B4:22:57:AB:FA:05:BE:A8:D8:7C:85:4C:AF:B2:19:CA:0D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FkaItCJXq_oFvqjYfIVMr7IZyg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:b8:f3:e2:93:e8:e2:29:da:e7:f3:b1:50:08:19:9c:e3:ab:
15:74:64:33:0c:1b:d0:ed:24:30:18:ed:31:5d:b7:bf:73:c6:
ad:02:64:67:4b:ec:35:11:1b:1a:ad:8a:d1:74:e0:a1:d9:53:
9b:8a:b7:7b:29:41:44:06:d9:01:7d:e8:34:5f:40:c9:b6:c0:
fa:b6:2c:2e:41:80:e9:01:3c:a6:14:d6:ca:33:fc:23:c1:8f:
83:87:41:24:dd:ba:99:1e:2e:9d:a2:55:88:a6:7c:db:e5:48:
f2:c9:af:95:fd:3a:9b:b6:b7:a3:01:45:66:3e:e0:3a:94:4b:
77:51:10:cb:a1:ba:64:dc:e6:bf:84:3c:11:72:8b:1c:c0:e2:
18:b0:23:1d:29:18:f1:20:ef:52:57:af:16:94:af:16:6d:db:
7f:f8:c3:2b:a9:5e:ad:a7:b8:a0:ba:bc:82:bd:6b:ac:3e:a0:
80:3a:11:fd:39:62:4a:1d:28:0f:ed:9a:18:94:3e:8c:bd:35:
03:e8:fc:cb:a9:51:e0:5b:69:e2:2b:ad:e8:33:a3:96:97:9a:
76:17:d8:8c:c3:3d:84:53:e9:08:e2:ae:73:75:2c:95:b3:0d:
d2:a4:a5:dd:e2:45:49:ca:86:eb:a8:8d:d1:bb:2f:65:ef:80:
8f:1f:d3:04
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY7ZvGcO84bN9ubpbkzvtT54MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDEzMjMxMzA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjQ2ODhiNDIyNTdhYmZhMDViZWE4ZDg3Yzg1NGNhZmIyMTljYTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAtBBi1W15jdbWlMQfdowJVCEYar
bsf8VTIxg4759zD0+z4q5W4d/Fj4Z7aIf42q/V2UFf1PARgUtz4w3gbOrVl2gLdR
gieCEr0gKDLGKPvsOmKnOrxMl0Ij+QA5N0Mqvg7OwQgGd18KCmSMH0R2hSYN6gwp
27on+ZjLDhWmaDlMk45OnplYhEVh8It8XBP00cb3Eeii406F/U28/oMMjF3Svu12
WQhcb8Ds7U+/3/WxhY0i7VOVGYBfuYjiJp151rMX7OPxrqQI3qveZXhFo9qJSzGM
xgnjNJffJI5gWiC5opv5UEzmPhBN/2erIfOZCH/bmxgUQqYfmXWQrqjEnQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBZGiLQiV6v6Bb6o2HyFTK+yGcoNMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvRmthSXRDSlhxX29GdnFqWWZJVk1yN0laeWcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHi48+KT6OIp2ufzsVAI
GZzjqxV0ZDMMG9DtJDAY7TFdt79zxq0CZGdL7DURGxqtitF04KHZU5uKt3spQUQG
2QF96DRfQMm2wPq2LC5BgOkBPKYU1soz/CPBj4OHQSTdupkeLp2iVYimfNvlSPLJ
r5X9Opu2t6MBRWY+4DqUS3dREMuhumTc5r+EPBFyixzA4hiwIx0pGPEg71JXrxaU
rxZt23/4wyupXq2nuKC6vIK9a6w+oIA6Ef05YkodKA/tmhiUPoy9NQPo/MupUeBb
aeIrregzo5aXmnYX2IzDPYRT6QjirnN1LJWzDdKkpd3iRUnKhuuojdG7L2XvgI8f
0wQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org