Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/N42lauVqFkNtpmLkO-4KIGxH2a0.roa
File: N42lauVqFkNtpmLkO-4KIGxH2a0.roa (raw, json)
Hash identifier: i7Lz47xLQqdGbt+wgb8Y0V6fC267FKyIYv3kpkXY66Y=
Subject key identifier: 37:8D:A5:6A:E5:6A:16:43:6D:A6:62:E4:3B:EE:0A:20:6C:47:D9:AD
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D8E6E15022B4981556B73045DDEAF3E0F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/N42lauVqFkNtpmLkO-4KIGxH2a0.roa
Signing time: Fri 09 Feb 2024 15:13:15 +0000
ROA not before: Fri 09 Feb 2024 15:13:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8e:6e:15:02:2b:49:81:55:6b:73:04:5d:de:af:3e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 9 15:13:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=378da56ae56a16436da662e43bee0a206c47d9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:47:38:08:da:1b:94:f5:fd:5d:ac:8d:6b:6e:
86:4d:92:b6:0b:f2:d3:81:e6:b9:26:fd:a1:51:10:
b2:48:42:72:f8:2c:aa:f0:f8:47:12:93:01:60:22:
8b:ff:77:8a:74:db:5a:4a:ba:52:d1:15:d2:a4:5b:
91:15:27:20:c9:b4:86:32:2d:c8:0e:fa:a2:33:87:
e6:09:48:b8:09:61:cf:c2:7e:d0:d4:f0:a0:7f:ac:
d4:79:d3:2d:77:0f:97:ed:dd:f1:05:9a:51:c9:f1:
bd:8b:af:a3:d6:1b:dd:24:df:cb:f5:8e:20:19:36:
65:90:12:c7:ca:a8:86:ca:e5:b3:c2:6f:73:c6:c9:
b2:86:53:9b:a5:b5:c8:d1:35:1b:84:4c:ca:69:61:
f7:b9:e5:09:e5:f9:c3:72:ef:8a:16:09:c9:eb:5f:
23:28:44:57:88:df:ac:e9:8c:76:f7:5d:ae:df:a5:
7f:24:72:61:dc:1c:c3:c7:47:5c:b5:bf:02:26:cd:
f5:07:95:cb:60:49:8a:d4:57:a7:75:3f:d4:5e:6d:
f9:a7:80:b4:9e:90:a4:71:df:0d:23:61:12:58:e0:
dd:76:7a:89:b7:48:40:91:ab:01:61:80:9d:c9:b1:
fc:3b:54:8b:b1:93:2d:fe:a7:eb:99:ab:b4:2b:c6:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8D:A5:6A:E5:6A:16:43:6D:A6:62:E4:3B:EE:0A:20:6C:47:D9:AD
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/N42lauVqFkNtpmLkO-4KIGxH2a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:59:5e:09:e0:b0:69:32:02:2d:45:85:0a:5c:b2:42:e8:b1:
37:49:af:36:c4:c0:4c:a7:b9:66:8f:fc:4c:3a:39:e1:a1:fe:
6f:6e:0b:f4:fe:0f:1d:39:05:9f:99:f1:03:04:29:e1:06:eb:
e5:15:8d:41:8a:73:5e:6d:59:cb:a3:4a:db:33:cf:80:9d:1b:
32:4c:40:a3:72:5d:86:f9:83:46:42:5c:9c:80:5d:64:3f:03:
f0:fc:21:45:a1:c1:19:00:19:86:63:14:fa:82:d0:65:5a:e6:
b1:c0:ff:43:53:17:ee:9a:ac:01:d3:96:ee:be:0c:fa:cb:57:
85:ac:11:b4:2e:81:94:4b:03:3c:57:c6:4f:b6:c2:ea:31:16:
58:01:b8:0f:53:f4:b9:2c:00:6e:ec:63:ab:cc:cc:09:43:fd:
5e:5a:15:e1:29:ca:83:1c:02:95:fd:77:3f:8e:37:71:dc:a5:
5a:ab:49:ef:50:8a:23:56:08:a4:40:02:f7:f0:03:97:65:ea:
29:3f:7f:49:76:fc:c3:2e:44:b2:1c:88:5b:b7:17:d0:31:9a:
c2:0b:54:1c:ea:e1:ed:3a:8f:b6:e5:4b:52:0f:35:e2:f5:1b:
13:bc:c0:bd:75:df:eb:b1:38:26:0a:4a:ff:e7:f0:db:c0:de:
78:06:f1:fa
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY2ObhUCK0mBVWtzBF3erz4PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjA5MTUxMzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzhkYTU2YWU1NmExNjQzNmRhNjYyZTQzYmVlMGEyMDZjNDdkOWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEc4CNoblPX9XayNa26GTZK2C/LT
gea5Jv2hURCySEJy+Cyq8PhHEpMBYCKL/3eKdNtaSrpS0RXSpFuRFScgybSGMi3I
DvqiM4fmCUi4CWHPwn7Q1PCgf6zUedMtdw+X7d3xBZpRyfG9i6+j1hvdJN/L9Y4g
GTZlkBLHyqiGyuWzwm9zxsmyhlObpbXI0TUbhEzKaWH3ueUJ5fnDcu+KFgnJ618j
KERXiN+s6Yx2912u36V/JHJh3BzDx0dctb8CJs31B5XLYEmK1FendT/UXm35p4C0
npCkcd8NI2ESWODddnqJt0hAkasBYYCdybH8O1SLsZMt/qfrmau0K8YlRwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDeNpWrlahZDbaZi5DvuCiBsR9mtMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvTjQybGF1VnFGa050cG1Ma08tNEtJR3hIMmEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAD1ZXgngsGkyAi1FhQpc
skLosTdJrzbEwEynuWaP/Ew6OeGh/m9uC/T+Dx05BZ+Z8QMEKeEG6+UVjUGKc15t
WcujStszz4CdGzJMQKNyXYb5g0ZCXJyAXWQ/A/D8IUWhwRkAGYZjFPqC0GVa5rHA
/0NTF+6arAHTlu6+DPrLV4WsEbQugZRLAzxXxk+2wuoxFlgBuA9T9LksAG7sY6vM
zAlD/V5aFeEpyoMcApX9dz+ON3HcpVqrSe9QiiNWCKRAAvfwA5dl6ik/f0l2/MMu
RLIciFu3F9AxmsILVBzq4e06j7blS1IPNeL1GxO8wL113+uxOCYKSv/n8NvA3ngG
8fo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:50 2024 by rpki-client on console-ams.rpki-client.org