Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/f5FSYl2nnGUmjUyX8lafpGSGXE8.roa
File: f5FSYl2nnGUmjUyX8lafpGSGXE8.roa (raw, json)
Hash identifier: 35rHlRnUJP3r2EZ3rAqoeXDRilZ2iY8JgHPGUGpVGWI=
Subject key identifier: 7F:91:52:62:5D:A7:9C:65:26:8D:4C:97:F2:56:9F:A4:64:86:5C:4F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E40850D0DF23125BEE4875C3B4DF161F9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/f5FSYl2nnGUmjUyX8lafpGSGXE8.roa
Signing time: Fri 15 Mar 2024 05:10:45 +0000
ROA not before: Fri 15 Mar 2024 05:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:40:85:0d:0d:f2:31:25:be:e4:87:5c:3b:4d:f1:61:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 15 05:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f9152625da79c65268d4c97f2569fa464865c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a6:c3:37:2e:33:a4:17:24:f2:72:6d:e0:ee:
56:70:b2:1c:bc:ad:1f:6e:13:f4:ff:41:93:34:54:
a9:0b:e5:24:c4:f0:a7:05:2a:41:d8:76:a3:68:8f:
ad:df:e2:f6:7f:a0:04:8b:3a:63:8c:3b:2b:33:59:
61:47:be:c6:ac:ab:e6:af:69:d1:dc:34:8c:c8:53:
c3:c8:55:35:c1:46:81:97:7a:6e:74:ed:a6:1d:14:
7f:69:57:fc:fc:1f:d5:a3:37:e1:e0:2f:b8:12:2a:
a0:97:61:6c:49:5e:64:dd:ad:ce:a2:ff:48:7a:1a:
bf:c6:d8:75:db:1c:0a:b9:43:e3:19:49:a1:97:6f:
be:4d:d7:a1:49:be:6b:2d:89:ba:96:a0:5d:a7:50:
c0:6d:4f:6b:c3:b3:ac:62:cd:cc:53:36:41:42:86:
ee:74:eb:6e:65:f1:18:00:69:ed:8f:20:35:aa:93:
6e:c5:a6:d5:fb:9c:b2:17:88:0a:c3:47:67:34:09:
e3:f2:ce:3f:1f:eb:34:fd:b2:8f:9c:85:16:f9:07:
7a:b8:3f:40:29:44:da:fb:7d:34:6d:c6:f4:23:6f:
86:cd:23:0c:f4:b3:78:00:6a:31:50:cc:b8:de:b1:
e5:1d:11:ac:6f:9a:f6:f3:d2:83:a1:84:d4:91:30:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:91:52:62:5D:A7:9C:65:26:8D:4C:97:F2:56:9F:A4:64:86:5C:4F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/f5FSYl2nnGUmjUyX8lafpGSGXE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:9d:92:63:01:6f:08:3a:5a:90:aa:c7:b0:62:50:bb:f3:bb:
42:f6:82:71:68:fd:58:2f:f6:8d:a6:a4:27:ef:c9:b8:fe:51:
c1:e5:39:47:d3:7c:a5:b5:cd:59:77:2d:f0:cf:24:7f:c8:0e:
61:c3:b5:75:c7:b7:25:b0:ba:1c:c4:3a:ed:17:7f:8b:5b:a6:
f2:d8:3d:c6:62:7c:b4:9e:c0:ab:39:6c:c2:f0:b3:eb:23:ec:
05:dd:d1:a7:b5:da:13:46:5f:27:22:5b:16:c8:29:7c:03:57:
d6:3c:d1:a1:d9:58:ab:49:0b:a6:02:74:1d:db:71:6b:25:31:
56:cc:fa:02:a6:a7:c6:4f:c2:f9:f1:fd:72:10:6c:bf:e0:ea:
70:87:ac:d9:89:c9:1f:b6:08:2e:01:8f:03:37:f5:96:28:40:
c9:25:39:4d:c7:78:62:56:38:0d:4f:d9:03:80:2c:e9:1a:d4:
1f:df:da:dd:eb:0e:2d:f1:11:0c:2d:16:ff:3f:47:58:dc:2f:
4f:9d:46:f2:2b:ac:03:0d:bc:18:8a:6c:88:ce:b2:df:6f:59:
58:b2:d9:70:7c:e1:cc:da:cf:31:d3:d2:ce:f6:ab:b8:e2:51:
cc:df:05:5f:c0:5f:a2:a1:6d:ff:38:8e:81:a4:00:0e:47:0f:
d8:0e:40:cf
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5AhQ0N8jElvuSHXDtN8WH5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzE1MDUxMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjkxNTI2MjVkYTc5YzY1MjY4ZDRjOTdmMjU2OWZhNDY0ODY1YzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiabDNy4zpBck8nJt4O5WcLIcvK0f
bhP0/0GTNFSpC+UkxPCnBSpB2HajaI+t3+L2f6AEizpjjDsrM1lhR77GrKvmr2nR
3DSMyFPDyFU1wUaBl3pudO2mHRR/aVf8/B/Vozfh4C+4Eiqgl2FsSV5k3a3Oov9I
ehq/xth12xwKuUPjGUmhl2++TdehSb5rLYm6lqBdp1DAbU9rw7OsYs3MUzZBQobu
dOtuZfEYAGntjyA1qpNuxabV+5yyF4gKw0dnNAnj8s4/H+s0/bKPnIUW+Qd6uD9A
KUTa+300bcb0I2+GzSMM9LN4AGoxUMy43rHlHRGsb5r289KDoYTUkTDOKQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH+RUmJdp5xlJo1Ml/JWn6RkhlxPMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvZjVGU1lsMm5uR1VtalV5WDhsYWZwR1NHWEU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFCdkmMBbwg6WpCqx7Bi
ULvzu0L2gnFo/Vgv9o2mpCfvybj+UcHlOUfTfKW1zVl3LfDPJH/IDmHDtXXHtyWw
uhzEOu0Xf4tbpvLYPcZifLSewKs5bMLws+sj7AXd0ae12hNGXyciWxbIKXwDV9Y8
0aHZWKtJC6YCdB3bcWslMVbM+gKmp8ZPwvnx/XIQbL/g6nCHrNmJyR+2CC4BjwM3
9ZYoQMklOU3HeGJWOA1P2QOALOka1B/f2t3rDi3xEQwtFv8/R1jcL0+dRvIrrAMN
vBiKbIjOst9vWViy2XB84czazzHT0s72q7jiUczfBV/AX6Khbf84joGkAA5HD9gO
QM8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org