Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XBYqM31CfyM5Dp-EdRaQxuzy298.roa
File: XBYqM31CfyM5Dp-EdRaQxuzy298.roa (raw, json)
Hash identifier: vWX3mYlP7Fe20pEtxqalRmRQ0hKMFaRq/Wv1bDTtX9k=
Subject key identifier: 5C:16:2A:33:7D:42:7F:23:39:0E:9F:84:75:16:90:C6:EC:F2:DB:DF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DAE6529694B1B84F59B8BBE0E44BDAE3F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XBYqM31CfyM5Dp-EdRaQxuzy298.roa
Signing time: Thu 15 Feb 2024 20:11:21 +0000
ROA not before: Thu 15 Feb 2024 20:11:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ae:65:29:69:4b:1b:84:f5:9b:8b:be:0e:44:bd:ae:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 15 20:11:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c162a337d427f23390e9f84751690c6ecf2dbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d9:25:f9:9d:c8:c0:37:dd:1d:d3:75:83:a1:
ae:c1:91:59:2d:7e:96:64:4a:13:d4:35:ff:0d:55:
25:68:d5:61:cb:ff:e7:ae:ff:77:45:e1:18:d3:f6:
08:48:b0:7d:c9:67:94:8d:8e:cf:0a:51:28:d9:16:
3d:de:1c:96:3d:4b:f2:71:a3:00:3d:e0:13:54:4b:
c9:f1:07:49:3d:b1:8e:da:5a:fe:99:58:42:de:d3:
64:b7:69:52:35:fe:18:87:45:29:e3:1c:c8:9a:e6:
96:d7:66:d6:c9:8f:d0:66:3f:0d:69:8a:e4:51:0c:
d2:a0:30:da:cd:f7:f4:5d:1e:4f:17:0d:a3:c5:3f:
86:db:d5:a0:82:bb:0e:c9:30:c9:5c:11:1d:7a:78:
07:82:f8:5c:ce:38:28:5c:e6:d8:5e:6e:d5:8e:54:
ed:4a:40:36:91:df:83:90:b1:a4:ad:7c:38:f4:f2:
22:ea:7e:4d:62:f9:59:51:6b:2e:09:c5:f6:d6:e1:
b7:16:09:08:d0:32:be:d6:76:6f:f3:09:98:fd:3b:
49:0c:9c:b7:9e:dc:ed:90:ce:d9:ab:86:72:04:2e:
1c:30:a9:5e:e4:09:3d:a1:84:ec:42:58:46:87:78:
02:f1:97:24:17:3e:57:b9:0e:a7:bb:61:a7:f6:74:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:16:2A:33:7D:42:7F:23:39:0E:9F:84:75:16:90:C6:EC:F2:DB:DF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XBYqM31CfyM5Dp-EdRaQxuzy298.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:b2:7b:ac:bd:10:bf:61:e3:8b:a8:59:6b:4d:16:4d:31:b4:
e9:bb:fa:4b:82:7b:d6:c9:94:32:34:38:15:3c:ea:da:50:38:
01:90:6f:a4:46:98:01:b6:fa:a0:cf:bc:76:b0:18:fc:1a:32:
6c:e5:2a:48:9a:59:72:1e:93:3a:4d:54:0b:ae:98:b4:f8:c7:
d4:df:5f:72:a2:31:ae:23:a6:2c:bc:04:c4:3a:81:9a:1c:88:
29:68:89:94:01:2e:be:d2:66:23:a2:3e:c4:f4:29:e9:7b:75:
c9:35:c7:00:1c:98:98:a4:58:f8:4b:40:a6:13:47:32:34:48:
26:8d:11:59:9d:14:a1:9a:0a:ce:de:44:60:dc:73:52:85:99:
de:95:a3:0b:71:39:96:3f:d0:11:80:e2:e7:72:be:eb:66:cc:
98:2f:9b:2b:e6:83:0c:86:de:64:df:4a:7d:cb:50:cf:d0:d6:
26:eb:16:d5:95:36:af:6b:48:32:8f:b7:23:c2:7b:17:12:8b:
2c:f1:61:cb:11:04:ac:06:13:ca:a4:02:18:83:b1:af:ca:5d:
e8:52:5f:5e:3c:80:75:e4:dc:6c:55:f1:6c:6c:f6:9e:a0:20:
5e:e1:5b:33:8c:93:12:26:85:b7:de:7e:e6:82:6a:59:a3:cd:
a0:c5:3e:e2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY2uZSlpSxuE9ZuLvg5Eva4/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjE1MjAxMTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzE2MmEzMzdkNDI3ZjIzMzkwZTlmODQ3NTE2OTBjNmVjZjJkYmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNkl+Z3IwDfdHdN1g6GuwZFZLX6W
ZEoT1DX/DVUlaNVhy//nrv93ReEY0/YISLB9yWeUjY7PClEo2RY93hyWPUvycaMA
PeATVEvJ8QdJPbGO2lr+mVhC3tNkt2lSNf4Yh0Up4xzImuaW12bWyY/QZj8NaYrk
UQzSoDDazff0XR5PFw2jxT+G29WggrsOyTDJXBEdengHgvhczjgoXObYXm7VjlTt
SkA2kd+DkLGkrXw49PIi6n5NYvlZUWsuCcX21uG3FgkI0DK+1nZv8wmY/TtJDJy3
ntztkM7Zq4ZyBC4cMKle5Ak9oYTsQlhGh3gC8ZckFz5XuQ6nu2Gn9nSMYQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFwWKjN9Qn8jOQ6fhHUWkMbs8tvfMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvWEJZcU0zMUNmeU01RHAtRWRSYVF4dXp5Mjk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFuye6y9EL9h44uoWWtN
Fk0xtOm7+kuCe9bJlDI0OBU86tpQOAGQb6RGmAG2+qDPvHawGPwaMmzlKkiaWXIe
kzpNVAuumLT4x9TfX3KiMa4jpiy8BMQ6gZociCloiZQBLr7SZiOiPsT0Kel7dck1
xwAcmJikWPhLQKYTRzI0SCaNEVmdFKGaCs7eRGDcc1KFmd6VowtxOZY/0BGA4udy
vutmzJgvmyvmgwyG3mTfSn3LUM/Q1ibrFtWVNq9rSDKPtyPCexcSiyzxYcsRBKwG
E8qkAhiDsa/KXehSX148gHXk3GxV8Wxs9p6gIF7hWzOMkxImhbfefuaCalmjzaDF
PuI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org