Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZhDi9X_LtTtBYE9jtM3Mp7ekI0Q.roa
File: ZhDi9X_LtTtBYE9jtM3Mp7ekI0Q.roa (raw, json)
Hash identifier: kL3mUWFPCaGIWbufO8AIvN3LCoEOIeh1GyUxWXImqy4=
Subject key identifier: 66:10:E2:F5:7F:CB:B5:3B:41:60:4F:63:B4:CD:CC:A7:B7:A4:23:44
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E450787A91A240F59E8B4BB5C1D304835
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZhDi9X_LtTtBYE9jtM3Mp7ekI0Q.roa
Signing time: Sat 16 Mar 2024 02:11:45 +0000
ROA not before: Sat 16 Mar 2024 02:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:45:07:87:a9:1a:24:0f:59:e8:b4:bb:5c:1d:30:48:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 16 02:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6610e2f57fcbb53b41604f63b4cdcca7b7a42344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:38:a3:a7:2f:ad:af:ee:3c:3c:d2:24:01:
4c:8b:d4:ac:33:fc:07:07:54:27:42:d6:2b:ba:fa:
ad:1c:7b:cf:e9:4d:61:bb:06:2b:9f:de:ac:6f:d2:
35:53:47:5d:a1:f0:af:89:04:92:35:cf:02:ff:ef:
24:3e:86:a2:38:ee:5c:14:97:cc:77:17:e6:60:58:
44:7e:43:b8:0d:f1:11:08:ea:4b:ad:2c:ba:ff:e9:
e5:86:1e:ac:37:e3:cd:4a:cf:54:b9:94:84:10:71:
3c:f0:37:cb:a5:5b:8b:3e:01:ba:ed:50:7c:5f:02:
f6:af:2d:2b:99:b6:b0:4e:62:00:87:20:87:e2:f4:
6d:b0:45:07:8f:20:95:e5:45:b9:8c:26:40:12:2e:
d4:0d:e1:61:0e:07:f1:7a:0f:fb:12:76:a8:4c:6a:
ff:2b:04:84:ed:d8:b0:e6:32:53:1b:53:42:e7:c2:
2a:dc:a1:0d:11:b8:d6:e0:42:84:c3:af:de:38:71:
bc:24:96:fe:f6:93:b1:6c:c3:96:1b:23:c8:e4:06:
0e:34:b2:ec:d3:74:7a:26:c7:ad:be:62:5c:44:88:
d9:47:70:8f:2d:ac:f4:d2:53:f5:40:b6:fc:e9:d6:
06:b4:f4:55:40:b0:38:a7:e4:e5:5b:3e:2a:87:1c:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:10:E2:F5:7F:CB:B5:3B:41:60:4F:63:B4:CD:CC:A7:B7:A4:23:44
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZhDi9X_LtTtBYE9jtM3Mp7ekI0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:b3:c9:20:28:3c:b2:42:d5:51:f3:b6:38:d2:47:55:53:55:
a2:3e:08:49:d0:ae:37:d3:c5:f6:0d:3f:81:8e:a0:ee:9d:0d:
fe:08:09:c4:50:fa:fd:02:4e:0d:f8:89:5f:56:f1:ce:b7:08:
9c:45:5c:e3:15:3e:4f:14:ec:60:ec:76:47:74:92:f6:6e:90:
b2:6b:7c:9e:0c:97:e3:39:aa:3c:a3:96:0e:85:b7:9e:2e:65:
82:ad:7b:19:8c:93:2a:41:9d:c6:c5:02:71:29:7d:b4:3f:2d:
46:33:08:21:8c:5c:c8:26:4f:2f:25:cd:30:cb:75:67:03:dd:
73:0c:1b:5a:f4:a8:24:ee:e5:4b:59:90:61:a8:43:b5:bd:76:
2a:9e:a2:b1:88:73:5f:ae:97:d2:d6:80:c0:e1:f1:af:a1:ed:
cd:44:e1:f3:d9:6c:ed:1c:c9:56:c1:c1:48:aa:17:a5:fd:cf:
53:eb:05:3d:38:1c:40:cb:6d:f2:aa:b7:71:93:ab:c9:25:88:
95:b1:99:83:b2:36:cb:1d:d3:43:61:2c:e3:d2:45:89:13:99:
f5:a7:c1:75:14:7a:d3:d8:c2:70:b2:86:3a:7e:67:20:0c:6e:
38:f2:79:f3:12:60:35:fa:c6:22:bb:c8:62:47:8d:fa:70:3e:
c9:35:5e:a2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5FB4epGiQPWei0u1wdMEg1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzE2MDIxMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjEwZTJmNTdmY2JiNTNiNDE2MDRmNjNiNGNkY2NhN2I3YTQyMzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkc4o6cvra/uPDzSJAFMi9SsM/wH
B1QnQtYruvqtHHvP6U1huwYrn96sb9I1U0ddofCviQSSNc8C/+8kPoaiOO5cFJfM
dxfmYFhEfkO4DfERCOpLrSy6/+nlhh6sN+PNSs9UuZSEEHE88DfLpVuLPgG67VB8
XwL2ry0rmbawTmIAhyCH4vRtsEUHjyCV5UW5jCZAEi7UDeFhDgfxeg/7EnaoTGr/
KwSE7diw5jJTG1NC58Iq3KENEbjW4EKEw6/eOHG8JJb+9pOxbMOWGyPI5AYONLLs
03R6JsetvmJcRIjZR3CPLaz00lP1QLb86dYGtPRVQLA4p+TlWz4qhxxRSQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGYQ4vV/y7U7QWBPY7TNzKe3pCNEMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvWmhEaTlYX0x0VHRCWUU5anRNM01wN2VrSTBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE+zySAoPLJC1VHztjjS
R1VTVaI+CEnQrjfTxfYNP4GOoO6dDf4ICcRQ+v0CTg34iV9W8c63CJxFXOMVPk8U
7GDsdkd0kvZukLJrfJ4Ml+M5qjyjlg6Ft54uZYKtexmMkypBncbFAnEpfbQ/LUYz
CCGMXMgmTy8lzTDLdWcD3XMMG1r0qCTu5UtZkGGoQ7W9diqeorGIc1+ul9LWgMDh
8a+h7c1E4fPZbO0cyVbBwUiqF6X9z1PrBT04HEDLbfKqt3GTq8kliJWxmYOyNssd
00NhLOPSRYkTmfWnwXUUetPYwnCyhjp+ZyAMbjjyefMSYDX6xiK7yGJHjfpwPsk1
XqI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:51 2024 by rpki-client on console-ams.rpki-client.org