Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MTlpjrjbcrylDhnFVRyl-tdtSbw.roa
File: MTlpjrjbcrylDhnFVRyl-tdtSbw.roa (raw, json)
Hash identifier: LFlT8J40AYcJsVOHdAZ3X7OfSvJRJsrAy2Lm10Yqido=
Subject key identifier: 31:39:69:8E:B8:DB:72:BC:A5:0E:19:C5:55:1C:A5:FA:D7:6D:49:BC
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DC8CC2AC4D27D47F0B3EA23DB4712A417
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MTlpjrjbcrylDhnFVRyl-tdtSbw.roa
Signing time: Tue 20 Feb 2024 23:13:59 +0000
ROA not before: Tue 20 Feb 2024 23:13:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c8:cc:2a:c4:d2:7d:47:f0:b3:ea:23:db:47:12:a4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 20 23:13:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3139698eb8db72bca50e19c5551ca5fad76d49bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:16:9f:db:5a:7d:ed:38:1f:e8:ef:47:fe:
61:23:eb:e7:b0:e1:f8:49:80:cc:03:44:8b:ce:1d:
25:6d:f4:b0:b1:1f:07:1c:9f:5a:cf:ac:34:59:0b:
6c:eb:a3:b2:24:27:76:69:51:20:e1:8a:f8:71:11:
84:ca:c3:f0:2b:58:40:7d:68:86:6f:fe:b8:90:0d:
4e:ff:a3:e0:3f:fe:e0:fc:67:65:48:24:11:9e:df:
41:e1:19:f3:14:8b:ed:ab:f0:e7:53:50:85:92:4d:
83:37:0a:8b:f5:b3:a7:bc:b2:11:f3:92:85:46:96:
35:0b:82:e8:0f:94:b3:0d:d1:c9:45:c1:61:9f:3f:
3e:05:fc:c7:77:37:8c:eb:5b:ff:e1:83:71:e1:1b:
66:8a:ea:99:fb:c7:2e:56:38:47:c1:bb:1b:0c:85:
d7:8c:6d:64:bf:71:ea:83:e3:e2:91:75:39:97:b2:
31:47:39:21:4d:d4:68:5c:d1:fc:26:98:b2:11:66:
ce:1b:c1:ad:ff:4c:39:7b:49:75:41:35:68:3d:43:
f7:20:bf:60:4f:a1:f8:d3:95:e1:82:3f:2c:68:f0:
4f:6c:fd:9c:17:a9:7a:e0:cb:a3:0c:08:70:c5:19:
dd:56:31:f6:08:54:34:5f:a4:27:34:b0:7c:68:7a:
d5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:39:69:8E:B8:DB:72:BC:A5:0E:19:C5:55:1C:A5:FA:D7:6D:49:BC
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MTlpjrjbcrylDhnFVRyl-tdtSbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:14:a0:c7:ee:0d:d3:17:bc:8d:9e:db:8d:5e:1e:43:ad:e1:
71:bd:1d:7c:a5:46:eb:29:46:9a:27:f5:85:cb:7a:37:63:e8:
c0:c7:9c:26:d4:08:34:41:eb:27:f2:88:c4:f4:41:92:5d:f8:
72:e5:78:44:0f:b2:68:25:73:fc:57:58:c0:e6:2a:70:ec:90:
66:69:80:b5:c9:d6:d8:bf:01:82:2c:04:87:68:3c:22:8f:ea:
9b:14:5c:f3:4f:65:08:41:00:72:96:f8:50:92:1c:b2:ee:af:
bd:7b:e6:94:c3:c1:32:8c:c8:7a:94:b5:83:d4:48:02:28:3a:
74:de:29:c3:61:19:28:92:24:44:1f:53:f2:9a:b9:af:a4:7b:
e3:1c:90:49:cc:43:86:33:1f:92:6e:36:75:f5:5a:c4:7c:84:
a0:c0:d9:8a:3e:88:42:87:c4:58:0b:25:62:3a:6a:fd:fa:8e:
48:8a:89:4f:f0:b4:2b:27:16:48:5e:05:9c:ee:7d:e3:2f:49:
67:81:23:8e:1b:3f:20:42:cc:e1:bb:fe:71:3f:b2:c3:7c:31:
28:b7:0f:d7:a8:ec:61:0b:be:ac:2f:6f:03:a0:4f:17:25:1f:
88:7e:a1:69:aa:6a:73:2b:cc:68:da:d9:fb:62:f7:61:9e:5d:
d0:2d:d2:bf
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3IzCrE0n1H8LPqI9tHEqQXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjIwMjMxMzU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTM5Njk4ZWI4ZGI3MmJjYTUwZTE5YzU1NTFjYTVmYWQ3NmQ0OWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto0Wn9tafe04H+jvR/5hI+vnsOH4
SYDMA0SLzh0lbfSwsR8HHJ9az6w0WQts66OyJCd2aVEg4Yr4cRGEysPwK1hAfWiG
b/64kA1O/6PgP/7g/GdlSCQRnt9B4RnzFIvtq/DnU1CFkk2DNwqL9bOnvLIR85KF
RpY1C4LoD5SzDdHJRcFhnz8+BfzHdzeM61v/4YNx4RtmiuqZ+8cuVjhHwbsbDIXX
jG1kv3Hqg+PikXU5l7IxRzkhTdRoXNH8JpiyEWbOG8Gt/0w5e0l1QTVoPUP3IL9g
T6H405Xhgj8saPBPbP2cF6l64MujDAhwxRndVjH2CFQ0X6QnNLB8aHrV4QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDE5aY6423K8pQ4ZxVUcpfrXbUm8MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvTVRscGpyamJjcnlsRGhuRlZSeWwtdGR0U2J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF0UoMfuDdMXvI2e241e
HkOt4XG9HXylRuspRpon9YXLejdj6MDHnCbUCDRB6yfyiMT0QZJd+HLleEQPsmgl
c/xXWMDmKnDskGZpgLXJ1ti/AYIsBIdoPCKP6psUXPNPZQhBAHKW+FCSHLLur717
5pTDwTKMyHqUtYPUSAIoOnTeKcNhGSiSJEQfU/Kaua+ke+MckEnMQ4YzH5JuNnX1
WsR8hKDA2Yo+iEKHxFgLJWI6av36jkiKiU/wtCsnFkheBZzufeMvSWeBI44bPyBC
zOG7/nE/ssN8MSi3D9eo7GELvqwvbwOgTxclH4h+oWmqanMrzGja2fti92GeXdAt
0r8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org