Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/L9tF7YIii_6G2sfumtz7ljXJuYw.roa
File: L9tF7YIii_6G2sfumtz7ljXJuYw.roa (raw, json)
Hash identifier: QFZwGNk9Dfi1VxKpdCM3usdSA7IyjbvDWf1I/hfxZ5Q=
Subject key identifier: 2F:DB:45:ED:82:22:8B:FE:86:DA:C7:EE:9A:DC:FB:96:35:C9:B9:8C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E3C3B55D01C966F9097431A6DE85E47FC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/L9tF7YIii_6G2sfumtz7ljXJuYw.roa
Signing time: Thu 14 Mar 2024 09:11:45 +0000
ROA not before: Thu 14 Mar 2024 09:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3c:3b:55:d0:1c:96:6f:90:97:43:1a:6d:e8:5e:47:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 14 09:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fdb45ed82228bfe86dac7ee9adcfb9635c9b98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d0:b8:78:58:77:3b:f3:a8:e6:1f:90:fb:10:
79:3f:f7:06:29:ec:3f:6b:e7:65:7b:40:92:75:f4:
02:13:77:50:9d:20:da:38:67:7d:90:fd:06:e9:c7:
c4:02:7a:92:74:68:05:64:0b:2f:13:8e:6d:83:65:
24:a2:c8:ba:cc:00:cd:35:dd:fe:ef:b7:bc:5d:f6:
66:ef:ef:77:be:e4:2a:3a:de:2c:21:80:e6:e2:c3:
50:5d:5a:e0:fc:64:22:69:ee:a3:82:9d:86:ab:8e:
60:c9:00:58:4b:bb:d6:94:f8:f5:80:3a:b8:d7:90:
6a:f6:73:d0:0e:8a:69:11:58:46:aa:41:e2:68:24:
c8:45:46:a1:2c:59:86:a0:95:b1:05:62:42:68:36:
95:91:74:a5:53:d7:58:ea:28:74:d4:67:8f:88:fe:
b9:f7:a6:db:56:9f:d9:b0:79:6c:fb:1c:4d:37:ef:
01:7d:2e:c4:24:23:a6:1c:d7:e4:0f:6e:b8:c1:22:
97:02:81:06:1e:bb:25:de:18:2e:5c:ed:0d:3f:8c:
ea:9d:13:2d:da:6f:92:b8:db:9c:33:3b:d8:36:4d:
6f:1d:20:ee:11:83:63:dd:10:e4:cf:23:38:92:6c:
5e:4c:0b:8e:fd:4d:91:0c:1b:f6:4d:ab:6d:9b:bf:
86:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DB:45:ED:82:22:8B:FE:86:DA:C7:EE:9A:DC:FB:96:35:C9:B9:8C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/L9tF7YIii_6G2sfumtz7ljXJuYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:09:55:a4:82:e2:51:c0:87:56:2b:ec:6d:26:0b:8e:83:ad:
b9:e5:d9:2d:0a:c1:85:48:fc:91:49:ae:76:97:9a:fa:91:12:
63:93:d7:19:f6:3c:8c:da:ae:97:79:06:b1:78:c3:e6:75:12:
ac:04:cc:b2:0d:ba:50:05:b9:ce:f7:94:e0:2f:3c:41:1d:71:
86:45:c2:7f:31:ff:b7:99:66:da:ba:ec:51:54:26:d9:1b:e2:
b2:97:48:dc:5d:0e:11:84:3d:52:40:5a:67:3d:76:ec:62:28:
cd:c5:22:c5:50:8e:bc:20:b2:ea:ab:b1:92:a0:ea:85:19:6a:
21:3b:b2:1a:8b:9e:37:c7:68:5f:0d:a8:73:2a:41:df:ef:fc:
9f:61:a6:03:c6:cc:01:ec:11:de:95:2c:e7:53:62:d4:3a:d5:
e8:2e:5c:e0:b0:d9:dc:f5:45:5c:22:3c:4e:5d:ee:00:f5:cf:
9a:95:a8:3f:c8:2b:88:65:87:2e:5b:e8:a7:c7:21:e2:b7:19:
d9:a4:4c:e7:72:72:34:a3:7c:6f:cc:43:ae:95:21:12:f9:ff:
42:d1:37:13:dc:f3:25:bf:b6:50:b4:b2:ee:d8:aa:11:59:67:
5a:67:06:b9:23:0f:a6:88:60:65:68:3d:fb:fe:64:05:90:d1:
27:76:dd:ef
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY48O1XQHJZvkJdDGm3oXkf8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzE0MDkxMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmRiNDVlZDgyMjI4YmZlODZkYWM3ZWU5YWRjZmI5NjM1YzliOThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNC4eFh3O/Oo5h+Q+xB5P/cGKew/
a+dle0CSdfQCE3dQnSDaOGd9kP0G6cfEAnqSdGgFZAsvE45tg2Ukosi6zADNNd3+
77e8XfZm7+93vuQqOt4sIYDm4sNQXVrg/GQiae6jgp2Gq45gyQBYS7vWlPj1gDq4
15Bq9nPQDoppEVhGqkHiaCTIRUahLFmGoJWxBWJCaDaVkXSlU9dY6ih01GePiP65
96bbVp/ZsHls+xxNN+8BfS7EJCOmHNfkD264wSKXAoEGHrsl3hguXO0NP4zqnRMt
2m+SuNucMzvYNk1vHSDuEYNj3RDkzyM4kmxeTAuO/U2RDBv2Tattm7+GgQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC/bRe2CIov+htrH7prc+5Y1ybmMMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvTDl0RjdZSWlpXzZHMnNmdW10ejdsalhKdVl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKAJVaSC4lHAh1Yr7G0m
C46Drbnl2S0KwYVI/JFJrnaXmvqREmOT1xn2PIzarpd5BrF4w+Z1EqwEzLINulAF
uc73lOAvPEEdcYZFwn8x/7eZZtq67FFUJtkb4rKXSNxdDhGEPVJAWmc9duxiKM3F
IsVQjrwgsuqrsZKg6oUZaiE7shqLnjfHaF8NqHMqQd/v/J9hpgPGzAHsEd6VLOdT
YtQ61eguXOCw2dz1RVwiPE5d7gD1z5qVqD/IK4hlhy5b6KfHIeK3GdmkTOdycjSj
fG/MQ66VIRL5/0LRNxPc8yW/tlC0su7YqhFZZ1pnBrkjD6aIYGVoPfv+ZAWQ0Sd2
3e8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org