Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WxnrjrxgO-zVIWnIHLIqLsLQLNg.roa
File: WxnrjrxgO-zVIWnIHLIqLsLQLNg.roa (raw, json)
Hash identifier: bDUx6FOTwamuBgSohZnIeuV4Bv/BV5N6yOjtaNIAko4=
Subject key identifier: 5B:19:EB:8E:BC:60:3B:EC:D5:21:69:C8:1C:B2:2A:2E:C2:D0:2C:D8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA4545175BAD689D71BC208BF075EC0B1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WxnrjrxgO-zVIWnIHLIqLsLQLNg.roa
Signing time: Tue 26 Dec 2023 04:13:58 +0000
ROA not before: Tue 26 Dec 2023 04:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a4:54:51:75:ba:d6:89:d7:1b:c2:08:bf:07:5e:c0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 26 04:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b19eb8ebc603becd52169c81cb22a2ec2d02cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:40:03:29:2e:84:64:11:d5:0d:41:e2:a1:cc:
fb:b9:0b:47:d7:2f:69:c9:a1:e6:42:39:b0:f5:f2:
8b:e4:89:88:cb:a8:55:3d:01:7d:8e:63:c6:45:54:
d1:d8:53:d4:90:ff:1f:1a:53:fc:5d:fd:c3:fc:a7:
fa:0b:b6:56:f9:10:e7:0d:c2:20:18:6a:69:7c:1f:
14:cd:c0:bb:c8:38:b8:c6:42:bf:fa:4a:b6:c2:6c:
00:55:04:d7:f2:8a:1b:b5:fc:2d:48:65:2e:95:38:
cf:7f:93:e9:0b:23:a1:e3:0f:a4:fb:aa:9f:d4:2d:
e4:18:0b:7b:45:b3:01:39:a6:da:9d:00:43:41:a1:
64:1c:0d:05:9d:18:a5:8f:90:b5:37:cb:ea:79:b8:
d1:97:c0:33:ae:0a:30:d2:54:54:c1:74:cd:97:f9:
fb:58:9e:46:2f:fe:6e:b2:bb:15:4f:cc:c6:04:e8:
f4:35:6d:e5:38:42:c5:b3:ce:e0:c4:d0:d3:7c:60:
47:c1:c1:eb:2c:25:13:0c:3f:e2:64:5c:f7:1c:80:
fd:2d:82:b7:cb:27:5b:a5:89:66:71:cf:64:87:1a:
f3:1e:11:14:38:d3:3f:12:71:89:b5:1a:6f:60:81:
40:28:2e:f7:6e:b2:78:d7:45:1c:70:67:7e:40:4a:
d9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:19:EB:8E:BC:60:3B:EC:D5:21:69:C8:1C:B2:2A:2E:C2:D0:2C:D8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WxnrjrxgO-zVIWnIHLIqLsLQLNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:fc:04:54:81:c1:8a:31:ff:85:81:a4:d8:cf:58:78:4c:40:
e8:84:89:fd:e1:0f:77:66:91:8e:51:b7:5f:f2:0a:92:c4:f3:
c2:22:79:02:6f:5e:45:24:99:f9:8c:3e:eb:f2:fd:35:0c:c5:
80:74:7d:fa:d1:27:94:eb:68:89:a3:51:4d:f0:33:80:17:c0:
e9:20:7e:9a:13:2b:1b:eb:c8:db:06:0e:64:7c:91:87:d3:bd:
04:ce:72:07:a9:95:00:ac:a8:b9:b0:e1:53:62:cf:fb:f5:fe:
25:00:05:ce:61:b8:7d:05:47:4d:f1:9e:45:72:c1:87:a9:1d:
51:37:22:84:65:d7:42:ec:43:cb:3c:70:3c:bf:58:3a:85:c6:
7e:7b:37:21:1b:58:b9:7e:43:67:b7:7d:f9:6d:10:d6:09:84:
70:d8:ab:50:8c:ca:18:e4:90:5b:f2:6f:da:d4:b9:90:f5:38:
d4:2c:b4:26:7f:fd:cd:ae:30:65:a7:9b:60:b6:14:f2:8e:0b:
c0:25:0a:58:69:65:ea:b6:fc:82:63:48:45:ca:2d:85:9d:7b:
9a:57:15:4e:94:67:c4:39:f0:10:b6:cc:96:92:22:b6:a6:18:
cf:94:92:17:50:a1:fc:60:92:0b:e0:c0:1e:97:6d:01:ea:36:
aa:0f:79:a2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYykVFF1utaJ1xvCCL8HXsCxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjI2MDQxMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjE5ZWI4ZWJjNjAzYmVjZDUyMTY5YzgxY2IyMmEyZWMyZDAyY2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UADKS6EZBHVDUHiocz7uQtH1y9p
yaHmQjmw9fKL5ImIy6hVPQF9jmPGRVTR2FPUkP8fGlP8Xf3D/Kf6C7ZW+RDnDcIg
GGppfB8UzcC7yDi4xkK/+kq2wmwAVQTX8oobtfwtSGUulTjPf5PpCyOh4w+k+6qf
1C3kGAt7RbMBOabanQBDQaFkHA0FnRilj5C1N8vqebjRl8Azrgow0lRUwXTNl/n7
WJ5GL/5usrsVT8zGBOj0NW3lOELFs87gxNDTfGBHwcHrLCUTDD/iZFz3HID9LYK3
yydbpYlmcc9khxrzHhEUONM/EnGJtRpvYIFAKC73brJ410UccGd+QErZJwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFsZ6468YDvs1SFpyByyKi7C0CzYMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvV3hucmpyeGdPLXpWSVduSUhMSXFMc0xRTE5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADv8BFSBwYox/4WBpNjP
WHhMQOiEif3hD3dmkY5Rt1/yCpLE88IieQJvXkUkmfmMPuvy/TUMxYB0ffrRJ5Tr
aImjUU3wM4AXwOkgfpoTKxvryNsGDmR8kYfTvQTOcgeplQCsqLmw4VNiz/v1/iUA
Bc5huH0FR03xnkVywYepHVE3IoRl10LsQ8s8cDy/WDqFxn57NyEbWLl+Q2e3fflt
ENYJhHDYq1CMyhjkkFvyb9rUuZD1ONQstCZ//c2uMGWnm2C2FPKOC8AlClhpZeq2
/IJjSEXKLYWde5pXFU6UZ8Q58BC2zJaSIramGM+UkhdQofxgkgvgwB6XbQHqNqoP
eaI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org