Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YgfvNp1MgcWH09cHNlRpnCKeiwc.roa
File: YgfvNp1MgcWH09cHNlRpnCKeiwc.roa (raw, json)
Hash identifier: /0m4V3zWiXPKrkC9ovMYhycFWWNXQBCEt2eSsau4K3Q=
Subject key identifier: 62:07:EF:36:9D:4C:81:C5:87:D3:D7:07:36:54:69:9C:22:9E:8B:07
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E607FE6D9063223A5B06BF66FC76A1A9B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YgfvNp1MgcWH09cHNlRpnCKeiwc.roa
Signing time: Thu 21 Mar 2024 10:12:58 +0000
ROA not before: Thu 21 Mar 2024 10:12:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:60:7f:e6:d9:06:32:23:a5:b0:6b:f6:6f:c7:6a:1a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 21 10:12:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6207ef369d4c81c587d3d7073654699c229e8b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:73:5e:e1:4e:ae:04:77:5c:62:5e:4c:c8:
62:b1:a6:1c:eb:ec:40:38:c5:36:aa:b5:1f:68:63:
88:eb:5e:eb:c4:80:3d:fe:fc:1b:f4:b5:25:13:7d:
43:55:ea:bc:91:4e:a9:36:87:73:73:84:ab:61:74:
e8:92:ed:df:da:39:3e:49:27:ec:6b:02:5a:c6:b4:
94:c6:49:18:47:5a:83:92:24:4a:67:18:c3:40:2d:
46:34:58:7e:06:78:6f:ff:d7:e8:17:77:f2:52:ed:
51:90:a4:e2:48:b5:34:74:f9:9b:fb:be:71:35:6a:
cf:3b:be:55:14:bf:68:a4:0b:72:33:be:06:77:f9:
3c:e0:6e:97:30:09:60:56:da:8e:ce:5c:e2:63:f8:
35:ef:ab:b6:29:76:ef:59:6e:ac:45:d1:ae:4c:83:
94:74:05:8a:da:71:c2:91:eb:eb:23:68:1f:80:73:
ea:af:0b:58:5f:ef:00:b8:08:ea:bf:f4:67:bd:63:
d3:84:1b:0c:c1:28:c1:d8:7e:9d:18:ec:f5:6a:8f:
5f:8a:37:5a:f3:bc:28:c5:4b:7d:c1:cf:d3:45:b9:
8b:0d:9a:13:80:87:89:10:16:dc:29:59:d4:dc:19:
ab:99:92:34:2a:f0:0d:01:b1:d8:0f:42:e7:93:00:
b7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:07:EF:36:9D:4C:81:C5:87:D3:D7:07:36:54:69:9C:22:9E:8B:07
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/YgfvNp1MgcWH09cHNlRpnCKeiwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:02:e2:2d:6d:61:69:58:ed:f9:14:45:af:7a:9f:85:cd:25:
84:f2:8f:fd:06:4d:34:26:67:b1:8f:89:ae:c2:cc:59:39:59:
93:c9:7c:68:8e:74:ce:46:42:08:4b:98:47:79:b6:62:1e:86:
f2:78:cc:1a:37:6d:d9:7c:4b:39:94:5d:c5:1a:53:bc:c4:d5:
84:35:a5:08:9c:10:67:5e:eb:d3:ac:e0:68:61:66:ed:ad:c8:
51:b6:5a:55:aa:52:ca:9d:91:b9:83:a3:10:f0:34:fb:b7:8c:
1b:6e:fd:72:48:d9:69:3b:53:56:5f:f7:94:9b:fb:77:24:2e:
28:8f:41:a4:97:f2:d4:12:3e:dd:0e:0b:7d:80:4a:e8:0d:e5:
a6:0a:0f:d8:8b:96:5a:59:40:ae:2f:0e:a5:7e:89:8d:9c:ad:
6c:17:a4:df:4d:b7:98:a4:5c:ee:e5:88:d0:23:39:a8:1c:e4:
bd:4e:65:a4:e0:67:e5:44:23:73:87:73:84:7a:89:49:f6:8a:
25:da:c2:ff:94:ec:69:06:08:a6:78:5a:c9:bb:0f:87:bb:f7:
07:95:4f:06:c9:a4:97:42:6c:b7:41:d4:8b:75:a1:e0:34:3d:
15:0d:66:3a:0f:76:43:e0:6a:88:08:93:fb:e6:26:78:41:db:
c5:35:75:7f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5gf+bZBjIjpbBr9m/HahqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzIxMTAxMjU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjA3ZWYzNjlkNGM4MWM1ODdkM2Q3MDczNjU0Njk5YzIyOWU4YjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc5zXuFOrgR3XGJeTMhisaYc6+xA
OMU2qrUfaGOI617rxIA9/vwb9LUlE31DVeq8kU6pNodzc4SrYXToku3f2jk+SSfs
awJaxrSUxkkYR1qDkiRKZxjDQC1GNFh+Bnhv/9foF3fyUu1RkKTiSLU0dPmb+75x
NWrPO75VFL9opAtyM74Gd/k84G6XMAlgVtqOzlziY/g176u2KXbvWW6sRdGuTIOU
dAWK2nHCkevrI2gfgHPqrwtYX+8AuAjqv/RnvWPThBsMwSjB2H6dGOz1ao9fijda
87woxUt9wc/TRbmLDZoTgIeJEBbcKVnU3BmrmZI0KvANAbHYD0LnkwC34QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGIH7zadTIHFh9PXBzZUaZwinosHMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvWWdmdk5wMU1nY1dIMDljSE5sUnBuQ0tlaXdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAD8C4i1tYWlY7fkURa96
n4XNJYTyj/0GTTQmZ7GPia7CzFk5WZPJfGiOdM5GQghLmEd5tmIehvJ4zBo3bdl8
SzmUXcUaU7zE1YQ1pQicEGde69Os4GhhZu2tyFG2WlWqUsqdkbmDoxDwNPu3jBtu
/XJI2Wk7U1Zf95Sb+3ckLiiPQaSX8tQSPt0OC32ASugN5aYKD9iLllpZQK4vDqV+
iY2crWwXpN9Nt5ikXO7liNAjOagc5L1OZaTgZ+VEI3OHc4R6iUn2iiXawv+U7GkG
CKZ4Wsm7D4e79weVTwbJpJdCbLdB1It1oeA0PRUNZjoPdkPgaogIk/vmJnhB28U1
dX8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org