Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/a9fgu324B5WonghtaVL9cA7eCGg.roa
File: a9fgu324B5WonghtaVL9cA7eCGg.roa (raw, json)
Hash identifier: g6tgV+/PPHp7zTHJ/PPLSKX0oB33FdBl13NLi9tpk6s=
Subject key identifier: 6B:D7:E0:BB:7D:B8:07:95:A8:9E:08:6D:69:52:FD:70:0E:DE:08:68
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018ED4960B7875916A1A5607514F5F1E7CC4
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/a9fgu324B5WonghtaVL9cA7eCGg.roa
Signing time: Fri 12 Apr 2024 23:13:06 +0000
ROA not before: Fri 12 Apr 2024 23:13:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d4:96:0b:78:75:91:6a:1a:56:07:51:4f:5f:1e:7c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 12 23:13:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6bd7e0bb7db80795a89e086d6952fd700ede0868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:84:6d:aa:b2:da:8e:8c:b7:92:20:b9:70:
8e:ec:1b:dc:fe:af:d7:50:b1:7b:ac:b8:1a:29:24:
10:82:60:fe:c5:a0:92:7d:68:fe:4f:8a:ca:e3:9a:
ae:a4:8c:ad:e2:a2:e6:8a:98:64:99:12:7c:19:5c:
ae:61:ea:44:6f:30:c5:a4:28:e1:06:20:cf:92:24:
82:87:19:bc:c6:02:c7:21:7f:d3:52:3d:66:b3:c4:
8c:c3:41:62:ab:c8:79:81:79:d2:e8:7f:62:e3:f4:
8f:0a:d3:72:bd:51:2a:9a:66:4c:02:40:7a:a4:3b:
8f:a7:f9:b9:2d:32:3f:97:34:74:f2:ab:a5:24:c5:
34:29:b6:9a:07:89:4d:d3:65:d3:a6:84:9d:8a:53:
14:c7:a1:8e:5a:d1:eb:06:61:bf:2a:76:84:25:35:
39:ef:52:67:95:45:a9:b3:50:29:01:19:be:e3:65:
82:a6:6c:cb:80:cb:3a:56:08:19:87:db:82:65:3e:
97:1c:52:b9:53:36:d2:f2:19:be:dd:82:5b:3f:3b:
b5:82:19:e1:80:37:0e:c0:9f:5f:ed:db:78:78:a1:
0a:5f:f9:d0:f9:5d:e8:7e:f0:3c:2f:1a:6e:a4:ad:
c4:65:93:80:0d:74:f4:d0:ff:80:27:60:08:dc:fa:
81:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D7:E0:BB:7D:B8:07:95:A8:9E:08:6D:69:52:FD:70:0E:DE:08:68
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/a9fgu324B5WonghtaVL9cA7eCGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:6e:fe:b1:f5:3a:8d:55:18:3f:a7:79:48:54:cc:ec:6d:4d:
2a:97:5b:af:23:61:35:b7:21:f5:02:9e:9c:7c:f6:77:f3:51:
e4:e3:a2:f4:e2:d3:29:ef:7e:f2:84:39:68:09:64:f5:92:f9:
19:a7:f2:38:a3:9d:49:89:59:ed:93:b7:1a:55:8c:2c:bb:d8:
9b:4b:97:98:6e:b5:78:cc:ec:19:fc:30:ec:e3:07:5b:8f:f0:
cf:fa:21:7b:fb:dc:e8:22:30:ac:e1:82:e2:12:22:87:2c:3b:
45:37:29:31:45:3d:ea:31:d8:63:1a:3b:c2:52:75:b0:2f:a2:
f7:d7:5c:be:a3:57:04:6f:83:a9:91:e2:e2:dd:3a:61:5c:ae:
4f:52:7e:2f:6f:12:e3:bc:10:d1:4e:d9:30:e4:17:fa:1b:c8:
da:e0:c1:a7:37:0b:b1:99:5e:2c:9a:ca:c3:62:5b:95:d9:62:
f4:21:86:e4:57:0d:9f:2c:07:ea:b7:cb:9c:cc:fc:36:1a:74:
ec:7e:aa:ae:20:a4:29:6a:92:1f:43:35:19:dd:1e:4b:23:17:
8f:39:41:6a:8d:af:07:cc:64:0f:0b:7b:1a:fc:ea:27:77:02:
fe:47:46:03:27:66:13:5a:91:72:9b:ee:37:04:e4:45:3c:88:
08:22:06:9d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY7Ulgt4dZFqGlYHUU9fHnzEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDEyMjMxMzA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmQ3ZTBiYjdkYjgwNzk1YTg5ZTA4NmQ2OTUyZmQ3MDBlZGUwODY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwESEbaqy2o6Mt5IguXCO7Bvc/q/X
ULF7rLgaKSQQgmD+xaCSfWj+T4rK45qupIyt4qLmiphkmRJ8GVyuYepEbzDFpCjh
BiDPkiSChxm8xgLHIX/TUj1ms8SMw0Fiq8h5gXnS6H9i4/SPCtNyvVEqmmZMAkB6
pDuPp/m5LTI/lzR08qulJMU0KbaaB4lN02XTpoSdilMUx6GOWtHrBmG/KnaEJTU5
71JnlUWps1ApARm+42WCpmzLgMs6VggZh9uCZT6XHFK5UzbS8hm+3YJbPzu1ghnh
gDcOwJ9f7dt4eKEKX/nQ+V3ofvA8LxpupK3EZZOADXT00P+AJ2AI3PqBywIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGvX4Lt9uAeVqJ4IbWlS/XAO3ghoMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvYTlmZ3UzMjRCNVdvbmdodGFWTDljQTdlQ0dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACdu/rH1Oo1VGD+neUhU
zOxtTSqXW68jYTW3IfUCnpx89nfzUeTjovTi0ynvfvKEOWgJZPWS+Rmn8jijnUmJ
We2TtxpVjCy72JtLl5hutXjM7Bn8MOzjB1uP8M/6IXv73OgiMKzhguISIocsO0U3
KTFFPeox2GMaO8JSdbAvovfXXL6jVwRvg6mR4uLdOmFcrk9Sfi9vEuO8ENFO2TDk
F/obyNrgwac3C7GZXiyaysNiW5XZYvQhhuRXDZ8sB+q3y5zM/DYadOx+qq4gpClq
kh9DNRndHksjF485QWqNrwfMZA8Lexr86id3Av5HRgMnZhNakXKb7jcE5EU8iAgi
Bp0=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:02 2025 by rpki-client