Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VCCjHM3LuoyhHsv79A86TBdG044.roa
File: VCCjHM3LuoyhHsv79A86TBdG044.roa (raw, json)
Hash identifier: YBSDQes/sejozo2GOK/1/hC1C8c0NyG1IivVcV3D1XA=
Subject key identifier: 54:20:A3:1C:CD:CB:BA:8C:A1:1E:CB:FB:F4:0F:3A:4C:17:46:D3:8E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D9514F68768C3982ACF83EBF3A6D300F6
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VCCjHM3LuoyhHsv79A86TBdG044.roa
Signing time: Sat 10 Feb 2024 22:13:15 +0000
ROA not before: Sat 10 Feb 2024 22:13:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:95:14:f6:87:68:c3:98:2a:cf:83:eb:f3:a6:d3:00:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 10 22:13:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5420a31ccdcbba8ca11ecbfbf40f3a4c1746d38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:ea:2b:bc:34:42:1b:8f:5a:93:e4:9d:dd:
0b:3b:6a:64:a3:a5:b4:5e:04:81:ac:98:03:8d:87:
0b:05:9d:7d:0a:7d:39:8b:7f:07:ca:a7:a1:2e:11:
95:82:c7:3d:7b:37:33:db:61:e0:b2:19:09:0c:bb:
9c:ad:ac:76:09:b8:5b:e8:6b:3b:ab:3f:4d:3c:3b:
0c:dc:69:40:b9:3c:6e:a1:44:d6:4c:c7:42:03:91:
c3:4e:6a:6a:33:18:64:f5:ef:6d:23:b3:2b:82:24:
5e:be:84:32:1d:db:00:19:cf:5b:b8:9d:8a:3b:7d:
11:ae:25:49:ff:e5:96:4e:da:78:8c:58:39:32:10:
2b:fe:79:a3:0b:7f:e9:53:f8:3d:94:b3:22:e3:2c:
23:4e:42:7f:33:d6:a5:a1:38:14:cd:2f:dd:31:72:
cf:1a:2f:98:96:85:df:52:22:19:e7:49:ff:46:98:
c2:0e:55:87:bb:3a:8e:ac:07:45:b0:77:b4:e6:57:
35:57:8e:11:d4:2b:90:87:fb:e0:0d:87:78:bf:a2:
55:ef:7d:b5:91:e7:9f:a7:31:e9:48:18:34:8d:e6:
6a:64:bb:50:f7:d6:8b:5f:72:f3:be:df:30:c7:89:
5a:12:9e:99:f2:af:08:e8:66:61:bc:a6:81:cf:60:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:20:A3:1C:CD:CB:BA:8C:A1:1E:CB:FB:F4:0F:3A:4C:17:46:D3:8E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VCCjHM3LuoyhHsv79A86TBdG044.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:cf:73:2d:78:71:9b:41:b0:1d:87:18:29:8e:fa:02:b6:cd:
c3:1a:21:ac:3a:b9:5b:8f:2a:e6:df:a4:81:fe:7e:1e:88:7d:
73:6b:41:94:4c:d1:a4:96:14:bb:c4:a9:78:ce:30:60:9e:c6:
31:bc:79:04:a3:d0:52:81:ea:b8:bc:93:5f:0a:7a:90:4f:7b:
72:4c:79:37:b9:7f:32:5e:f4:73:6e:94:d1:8c:5f:b5:ed:93:
cd:05:65:05:3d:45:73:a7:86:0c:7e:46:37:a0:f8:88:69:47:
2e:04:68:6b:64:b1:27:c6:f0:3a:1e:88:48:96:85:43:ab:9e:
0e:60:96:ff:ba:d5:47:64:0d:15:93:5d:0f:ed:38:72:2c:ac:
63:59:8d:7f:36:0f:31:5b:5d:29:89:ae:9f:97:ee:83:16:1d:
df:dd:1a:02:08:db:73:2a:68:5d:a9:6d:ab:89:8d:42:76:10:
d1:e4:c8:0c:97:0a:a8:22:ba:67:1e:11:bb:dc:0d:b9:96:db:
d1:6a:e7:99:34:8b:49:31:5f:7c:f1:8b:55:4c:a9:78:27:53:
7f:45:8d:58:93:9f:0d:96:92:6b:00:90:df:8d:5b:c0:87:42:
12:f9:9a:79:41:c4:52:fe:92:d6:41:e0:cf:85:19:08:83:2e:
df:7b:da:95
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY2VFPaHaMOYKs+D6/Om0wD2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjEwMjIxMzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDIwYTMxY2NkY2JiYThjYTExZWNiZmJmNDBmM2E0YzE3NDZkMzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr37qK7w0QhuPWpPknd0LO2pko6W0
XgSBrJgDjYcLBZ19Cn05i38HyqehLhGVgsc9ezcz22HgshkJDLucrax2Cbhb6Gs7
qz9NPDsM3GlAuTxuoUTWTMdCA5HDTmpqMxhk9e9tI7MrgiRevoQyHdsAGc9buJ2K
O30RriVJ/+WWTtp4jFg5MhAr/nmjC3/pU/g9lLMi4ywjTkJ/M9aloTgUzS/dMXLP
Gi+YloXfUiIZ50n/RpjCDlWHuzqOrAdFsHe05lc1V44R1CuQh/vgDYd4v6JV7321
keefpzHpSBg0jeZqZLtQ99aLX3Lzvt8wx4laEp6Z8q8I6GZhvKaBz2DrWwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFQgoxzNy7qMoR7L+/QPOkwXRtOOMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvVkNDakhNM0x1b3loSHN2NzlBODZUQmRHMDQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFfPcy14cZtBsB2HGCmO
+gK2zcMaIaw6uVuPKubfpIH+fh6IfXNrQZRM0aSWFLvEqXjOMGCexjG8eQSj0FKB
6ri8k18KepBPe3JMeTe5fzJe9HNulNGMX7Xtk80FZQU9RXOnhgx+Rjeg+IhpRy4E
aGtksSfG8DoeiEiWhUOrng5glv+61UdkDRWTXQ/tOHIsrGNZjX82DzFbXSmJrp+X
7oMWHd/dGgII23MqaF2pbauJjUJ2ENHkyAyXCqgiumceEbvcDbmW29Fq55k0i0kx
X3zxi1VMqXgnU39FjViTnw2WkmsAkN+NW8CHQhL5mnlBxFL+ktZB4M+FGQiDLt97
2pU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:50 2024 by rpki-client on console-ams.rpki-client.org