Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UK4xQurJVF7KeRldZ2XiaxBJgck.roa
File: UK4xQurJVF7KeRldZ2XiaxBJgck.roa (raw, json)
Hash identifier: KzX+TfbwKYFqEkV5tuwj6RPVLpiGBy4sR0k52IXsKo8=
Subject key identifier: 50:AE:31:42:EA:C9:54:5E:CA:79:19:5D:67:65:E2:6B:10:49:81:C9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E0707149DE02937B842879B9AA3E0E18E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UK4xQurJVF7KeRldZ2XiaxBJgck.roa
Signing time: Mon 04 Mar 2024 01:14:48 +0000
ROA not before: Mon 04 Mar 2024 01:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:07:07:14:9d:e0:29:37:b8:42:87:9b:9a:a3:e0:e1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 4 01:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50ae3142eac9545eca79195d6765e26b104981c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b1:b2:4b:e6:60:c9:4b:ef:ca:99:02:e4:d3:
b5:a9:6e:61:92:9e:47:5a:3b:53:b9:bc:39:fa:7a:
20:ee:91:db:ee:e5:c0:66:85:18:3e:e8:51:f2:d1:
f5:ab:b0:02:c2:88:29:f5:1b:9b:3c:a1:f5:47:6c:
4c:a7:6f:f9:34:f2:df:88:ba:18:66:3c:50:1b:3e:
e8:14:91:4f:8e:0b:a1:3e:09:63:e2:97:1f:e8:b3:
f8:1f:d8:b9:74:58:ec:d8:2e:fa:01:11:10:90:1b:
40:dc:e1:df:68:0d:d8:3b:ec:c6:af:e3:69:2d:6b:
19:93:81:ed:cc:a2:f5:59:70:6f:ba:1f:4c:42:03:
11:f6:7e:55:b6:f5:b4:21:fe:df:e5:0e:8b:07:18:
f6:82:f0:d3:f7:e6:27:64:a2:5c:63:1a:15:f6:3b:
7c:d3:6f:89:55:d6:cd:8a:2e:65:7d:bd:03:cb:18:
d1:35:4b:61:9c:a3:f1:15:1c:52:6a:2b:a7:2d:f6:
91:ef:ff:77:a9:14:ef:6e:97:82:1b:ab:cc:47:64:
5e:9d:14:de:7e:ac:7a:44:63:9d:3e:d7:18:45:f5:
f6:6e:58:dd:9b:42:d0:4e:9c:0b:d2:10:e5:ba:88:
bb:c2:aa:9b:e9:6e:7d:61:0b:98:92:17:e4:4f:b8:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AE:31:42:EA:C9:54:5E:CA:79:19:5D:67:65:E2:6B:10:49:81:C9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UK4xQurJVF7KeRldZ2XiaxBJgck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:a5:6f:3c:9a:d5:7e:3f:c5:9d:d1:c1:50:6d:1f:2c:be:a8:
0c:b2:26:ea:68:89:09:b6:93:8c:a2:de:b9:71:61:67:21:30:
9c:b8:03:85:60:21:84:54:23:1a:bc:27:86:b5:df:44:09:89:
2c:4d:bf:32:32:e3:a6:fc:99:b6:08:8d:b4:87:2a:2b:19:66:
de:c3:17:ae:73:24:10:d4:58:95:1a:9c:a9:84:5f:44:4f:70:
ab:90:d5:e4:5e:a7:52:06:f4:3a:4b:83:88:68:06:db:63:db:
05:80:28:ce:15:df:c8:af:48:54:67:25:f8:90:ee:78:63:a8:
fa:ea:a3:a4:af:a6:87:ea:9f:f2:69:e8:37:47:e6:9e:be:75:
cb:e4:5d:56:b0:95:20:0b:16:10:b4:75:29:59:b3:49:56:df:
a2:54:eb:a7:3c:b3:40:1c:ed:ca:4e:51:4f:4e:3c:26:67:08:
3f:8f:2a:4c:a0:28:56:fa:7d:00:a4:ca:97:52:ad:5c:f5:59:
62:6d:0c:87:37:8e:e1:af:b7:c9:ea:5d:57:c9:ad:04:90:88:
a1:eb:79:2a:ad:95:4f:ea:2d:8c:07:b7:08:e1:4e:14:e9:1b:
d0:72:9a:4f:f3:6d:29:ea:c7:19:45:17:7f:d9:25:9d:42:9c:
86:e6:a7:02
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY4HBxSd4Ck3uEKHm5qj4OGOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzA0MDExNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGFlMzE0MmVhYzk1NDVlY2E3OTE5NWQ2NzY1ZTI2YjEwNDk4MWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrGyS+ZgyUvvypkC5NO1qW5hkp5H
WjtTubw5+nog7pHb7uXAZoUYPuhR8tH1q7ACwogp9RubPKH1R2xMp2/5NPLfiLoY
ZjxQGz7oFJFPjguhPglj4pcf6LP4H9i5dFjs2C76AREQkBtA3OHfaA3YO+zGr+Np
LWsZk4HtzKL1WXBvuh9MQgMR9n5VtvW0If7f5Q6LBxj2gvDT9+YnZKJcYxoV9jt8
02+JVdbNii5lfb0DyxjRNUthnKPxFRxSaiunLfaR7/93qRTvbpeCG6vMR2RenRTe
fqx6RGOdPtcYRfX2bljdm0LQTpwL0hDluoi7wqqb6W59YQuYkhfkT7jPWQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFCuMULqyVReynkZXWdl4msQSYHJMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvVUs0eFF1ckpWRjdLZVJsZFoyWGlheEJKZ2NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKKlbzya1X4/xZ3RwVBt
Hyy+qAyyJupoiQm2k4yi3rlxYWchMJy4A4VgIYRUIxq8J4a130QJiSxNvzIy46b8
mbYIjbSHKisZZt7DF65zJBDUWJUanKmEX0RPcKuQ1eRep1IG9DpLg4hoBttj2wWA
KM4V38ivSFRnJfiQ7nhjqPrqo6Svpofqn/Jp6DdH5p6+dcvkXVawlSALFhC0dSlZ
s0lW36JU66c8s0Ac7cpOUU9OPCZnCD+PKkygKFb6fQCkypdSrVz1WWJtDIc3juGv
t8nqXVfJrQSQiKHreSqtlU/qLYwHtwjhThTpG9Bymk/zbSnqxxlFF3/ZJZ1CnIbm
pwI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org