Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VR_l2dPmUgZ-jugobKBgafkjY3E.roa
File: VR_l2dPmUgZ-jugobKBgafkjY3E.roa (raw, json)
Hash identifier: zMoRc4AxH57eHukmBghD30lFzUlq6l/LI4L5k04eb7w=
Subject key identifier: 55:1F:E5:D9:D3:E6:52:06:7E:8E:E8:28:6C:A0:60:69:F9:23:63:71
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E8FB2D292967821571F35BC40E794A8A6
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VR_l2dPmUgZ-jugobKBgafkjY3E.roa
Signing time: Sat 30 Mar 2024 14:10:44 +0000
ROA not before: Sat 30 Mar 2024 14:10:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8f:b2:d2:92:96:78:21:57:1f:35:bc:40:e7:94:a8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 30 14:10:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=551fe5d9d3e652067e8ee8286ca06069f9236371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cf:b3:ee:9d:f0:3c:e2:39:28:2c:ce:a9:3b:
a5:6f:7c:be:8c:43:b5:8a:55:df:4a:1d:24:34:b1:
d3:dd:75:4f:1d:7c:97:58:e7:19:b0:ff:bb:fd:5b:
75:c7:d4:89:0d:b6:c0:eb:e9:66:df:60:d1:2a:7d:
4b:60:75:63:00:d4:bc:76:ca:d9:29:44:d9:1a:cb:
15:46:2b:55:6e:af:d2:ff:69:f7:bd:19:22:dc:8c:
4e:4f:00:ce:97:c2:cd:4f:39:f3:60:3e:98:5f:c1:
2e:50:e0:a0:40:5e:16:dd:33:dc:c6:e4:37:2e:2a:
8a:a9:5b:c1:e9:cc:b3:49:75:b8:bc:62:8b:7d:1b:
10:66:88:c6:7f:b0:ae:c1:a2:c6:9b:4a:c1:7f:9f:
68:ff:e4:aa:02:72:75:78:0e:e1:87:ae:9c:d4:c0:
a0:97:9a:96:0f:b0:b9:0a:d0:20:c4:6e:6a:09:ba:
15:61:33:b0:0c:b9:fd:ee:2a:ac:f7:d5:7e:3a:32:
c6:2c:bd:a9:db:7a:d8:72:f2:15:b7:65:5b:ac:1c:
d1:5c:46:78:ac:2e:1b:19:39:fc:ac:9a:fa:7b:d5:
31:c4:10:2e:7a:5d:dc:35:c4:61:20:32:02:4a:96:
ce:ef:c0:f7:84:59:35:6d:15:01:e1:d8:5b:03:31:
88:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1F:E5:D9:D3:E6:52:06:7E:8E:E8:28:6C:A0:60:69:F9:23:63:71
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/VR_l2dPmUgZ-jugobKBgafkjY3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:ed:3c:23:4b:71:30:3b:2e:27:28:73:6e:26:f0:b6:8d:5e:
5e:23:c0:04:e2:86:7d:f4:b7:b9:3e:06:be:c2:80:a9:c8:41:
77:70:68:7d:be:76:d9:60:36:cc:ed:35:b1:43:a7:9b:59:85:
25:f8:9a:8c:6d:92:23:97:64:c9:79:84:71:37:c3:23:5e:f3:
17:33:25:3d:14:5c:f6:88:0c:b6:26:6f:39:7b:00:8f:dd:c5:
6f:bb:29:c4:46:29:91:0a:b2:f3:e4:fb:09:ba:2c:76:f1:63:
b4:60:fe:b6:ca:98:57:9b:f6:b9:33:91:e9:d5:53:e7:6c:80:
2a:72:2e:96:51:2c:61:ea:10:39:fd:35:fa:9c:00:fa:b7:09:
7b:73:ff:c9:49:38:eb:24:34:3c:c7:fb:8b:cf:b8:da:70:75:
80:04:da:59:5f:f3:e3:ef:43:34:22:9d:99:06:68:2f:3c:7e:
7b:85:a6:a7:82:c8:68:7a:fd:5f:1c:f9:97:13:06:b1:c7:ac:
f3:35:e1:9b:d4:f2:ba:e7:38:08:20:ff:3b:fa:7d:56:3f:f6:
29:e4:0b:3c:a4:c9:ae:20:0b:de:4c:89:e4:d2:4d:c6:7e:71:
0d:d6:c3:ee:b5:64:e2:f5:9b:29:0a:24:32:3b:4b:11:52:1b:
71:c4:9e:34
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6PstKSlnghVx81vEDnlKimMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzMwMTQxMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTFmZTVkOWQzZTY1MjA2N2U4ZWU4Mjg2Y2EwNjA2OWY5MjM2MzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8+z7p3wPOI5KCzOqTulb3y+jEO1
ilXfSh0kNLHT3XVPHXyXWOcZsP+7/Vt1x9SJDbbA6+lm32DRKn1LYHVjANS8dsrZ
KUTZGssVRitVbq/S/2n3vRki3IxOTwDOl8LNTznzYD6YX8EuUOCgQF4W3TPcxuQ3
LiqKqVvB6cyzSXW4vGKLfRsQZojGf7CuwaLGm0rBf59o/+SqAnJ1eA7hh66c1MCg
l5qWD7C5CtAgxG5qCboVYTOwDLn97iqs99V+OjLGLL2p23rYcvIVt2VbrBzRXEZ4
rC4bGTn8rJr6e9UxxBAuel3cNcRhIDICSpbO78D3hFk1bRUB4dhbAzGI7wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFUf5dnT5lIGfo7oKGygYGn5I2NxMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvVlJfbDJkUG1VZ1otanVnb2JLQmdhZmtqWTNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADDtPCNLcTA7Licoc24m
8LaNXl4jwATihn30t7k+Br7CgKnIQXdwaH2+dtlgNsztNbFDp5tZhSX4moxtkiOX
ZMl5hHE3wyNe8xczJT0UXPaIDLYmbzl7AI/dxW+7KcRGKZEKsvPk+wm6LHbxY7Rg
/rbKmFeb9rkzkenVU+dsgCpyLpZRLGHqEDn9NfqcAPq3CXtz/8lJOOskNDzH+4vP
uNpwdYAE2llf8+PvQzQinZkGaC88fnuFpqeCyGh6/V8c+ZcTBrHHrPM14ZvU8rrn
OAgg/zv6fVY/9inkCzykya4gC95MieTSTcZ+cQ3Ww+61ZOL1mykKJDI7SxFSG3HE
njQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:51 2024 by rpki-client on console-ams.rpki-client.org