Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/O978KH6LOOY6lnBx2IurmAx2Ve8.roa
File: O978KH6LOOY6lnBx2IurmAx2Ve8.roa (raw, json)
Hash identifier: xawi2OCEN64JDs68uV40xWFjNnOHITCduQZPEcJQxpw=
Subject key identifier: 3B:DE:FC:28:7E:8B:38:E6:3A:96:70:71:D8:8B:AB:98:0C:76:55:EF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DFC8199B7170D2082A17F01A962AAB118
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/O978KH6LOOY6lnBx2IurmAx2Ve8.roa
Signing time: Sat 02 Mar 2024 00:12:48 +0000
ROA not before: Sat 02 Mar 2024 00:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fc:81:99:b7:17:0d:20:82:a1:7f:01:a9:62:aa:b1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 2 00:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bdefc287e8b38e63a967071d88bab980c7655ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3a:85:3c:e4:ab:85:77:4a:5b:e9:45:87:1b:
cb:b7:0a:e1:ff:ce:87:86:57:d5:7f:ec:7f:a3:c2:
54:fe:0e:dd:9b:86:35:fc:0c:18:ff:fb:3e:6d:8e:
bd:84:96:96:32:d8:db:47:8a:31:19:b2:6f:66:14:
41:a8:31:ac:cb:06:78:fd:42:c7:e3:03:11:2b:24:
4b:04:c9:6a:8b:a0:ce:7e:ce:3c:ce:a9:85:37:de:
5d:da:39:9e:e7:bb:d0:c3:07:81:8a:e5:e9:f4:ce:
4f:01:db:d5:a0:ed:3b:2f:83:b1:57:83:78:f0:18:
bc:ca:87:41:29:08:99:f2:00:e6:91:4d:e1:25:15:
88:2f:67:ee:fa:b4:ff:56:9b:57:7e:06:89:45:8c:
80:1b:5b:e6:6a:76:cd:6d:e2:4b:7a:43:3c:d7:7f:
db:b4:41:b0:f8:9a:82:8d:fb:d5:eb:f1:54:d5:ed:
07:b2:fd:71:7c:85:a6:f0:4e:e1:1c:4d:0a:29:f5:
cd:0a:0e:3b:b2:98:d2:3e:2e:e0:e6:ee:70:bf:67:
a3:d1:8f:7c:ee:c8:cd:be:b7:29:42:2c:58:a0:35:
0c:29:a8:01:ad:38:00:12:c7:0e:3c:70:fa:64:92:
6c:b7:14:0a:5f:78:e8:69:ed:9b:bd:ca:4a:3c:c7:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DE:FC:28:7E:8B:38:E6:3A:96:70:71:D8:8B:AB:98:0C:76:55:EF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/O978KH6LOOY6lnBx2IurmAx2Ve8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:18:f0:6f:ae:ea:57:4c:74:a4:05:62:0f:52:00:09:7b:22:
c3:08:cf:0b:48:c2:07:10:61:21:3c:0d:b9:dc:83:22:fc:23:
30:99:0d:1a:b4:b3:17:27:5f:38:cb:07:de:37:fb:70:06:26:
81:4c:b9:62:83:c8:ab:88:ef:e4:3c:9c:2b:33:65:c5:3d:f4:
8f:91:76:52:e3:81:aa:cc:3f:5f:34:78:20:e2:05:c0:86:2f:
92:75:b0:a9:98:7b:c5:fc:ef:5c:6e:f9:0d:ae:94:cc:5f:f3:
08:83:f2:ce:ef:e9:5e:0c:a5:eb:37:94:5e:7a:37:54:ff:09:
5d:83:12:8e:fe:68:18:8f:6c:a6:7d:d4:44:9a:3d:49:10:f6:
14:07:a7:dc:c4:95:b7:e7:c2:25:e4:5a:af:3f:57:27:bf:91:
d2:75:94:35:7d:8a:c9:0d:ab:37:89:62:1a:7d:c3:78:dd:65:
82:58:81:e5:5d:6f:9e:f9:cb:1e:92:04:b1:64:d4:ec:25:c2:
a6:5e:4b:2a:4a:be:40:97:b6:ab:0c:f9:d0:50:09:4a:56:99:
ff:37:22:1d:5b:a9:ed:e4:b1:df:a8:14:83:68:9b:80:a5:9e:
6b:12:a7:52:c1:a6:62:10:8a:aa:14:58:87:b4:ab:b5:3d:00:
5f:2c:82:be
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY38gZm3Fw0ggqF/AaliqrEYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzAyMDAxMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmRlZmMyODdlOGIzOGU2M2E5NjcwNzFkODhiYWI5ODBjNzY1NWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzqFPOSrhXdKW+lFhxvLtwrh/86H
hlfVf+x/o8JU/g7dm4Y1/AwY//s+bY69hJaWMtjbR4oxGbJvZhRBqDGsywZ4/ULH
4wMRKyRLBMlqi6DOfs48zqmFN95d2jme57vQwweBiuXp9M5PAdvVoO07L4OxV4N4
8Bi8yodBKQiZ8gDmkU3hJRWIL2fu+rT/VptXfgaJRYyAG1vmanbNbeJLekM813/b
tEGw+JqCjfvV6/FU1e0Hsv1xfIWm8E7hHE0KKfXNCg47spjSPi7g5u5wv2ej0Y98
7sjNvrcpQixYoDUMKagBrTgAEscOPHD6ZJJstxQKX3joae2bvcpKPMfRLwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDve/Ch+izjmOpZwcdiLq5gMdlXvMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvTzk3OEtINkxPT1k2bG5CeDJJdXJtQXgyVmU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEAY8G+u6ldMdKQFYg9S
AAl7IsMIzwtIwgcQYSE8DbncgyL8IzCZDRq0sxcnXzjLB943+3AGJoFMuWKDyKuI
7+Q8nCszZcU99I+RdlLjgarMP180eCDiBcCGL5J1sKmYe8X871xu+Q2ulMxf8wiD
8s7v6V4Mpes3lF56N1T/CV2DEo7+aBiPbKZ91ESaPUkQ9hQHp9zElbfnwiXkWq8/
Vye/kdJ1lDV9iskNqzeJYhp9w3jdZYJYgeVdb575yx6SBLFk1OwlwqZeSypKvkCX
tqsM+dBQCUpWmf83Ih1bqe3ksd+oFINom4ClnmsSp1LBpmIQiqoUWIe0q7U9AF8s
gr4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org