Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/foDqWSysCr4QHsmBm1DfRb3qnz0.roa
File: foDqWSysCr4QHsmBm1DfRb3qnz0.roa (raw, json)
Hash identifier: a9emLbxRuwJNFj6hfh2QjtYhcajutUu2bWKf/0++b6Y=
Subject key identifier: 7E:80:EA:59:2C:AC:0A:BE:10:1E:C9:81:9B:50:DF:45:BD:EA:9F:3D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9DA531B808AA03FE81BA630E2CAF3120
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/foDqWSysCr4QHsmBm1DfRb3qnz0.roa
Signing time: Sun 24 Dec 2023 21:04:58 +0000
ROA not before: Sun 24 Dec 2023 21:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:9da4:a9d8/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9d:a5:31:b8:08:aa:03:fe:81:ba:63:0e:2c:af:31:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 24 21:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e80ea592cac0abe101ec9819b50df45bdea9f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:8d:9d:9c:6d:0f:05:d9:bc:e0:ee:85:58:
90:e0:89:f1:3b:70:37:51:aa:55:52:67:01:f0:57:
7d:14:95:c9:65:67:ba:e9:d6:73:26:a0:b7:6f:03:
13:8d:9c:b6:59:68:42:a0:2f:b1:6a:bb:8e:10:93:
16:c1:10:59:46:24:3e:05:a2:10:5b:50:dc:40:11:
0a:4f:bd:33:d6:cb:3e:13:14:a4:68:fd:d2:fe:d3:
78:ad:c2:85:a8:70:0c:0d:03:6a:b4:99:27:07:75:
39:f8:69:2a:1f:19:c5:12:8d:c5:f2:e5:f0:50:4f:
3e:39:be:e5:4c:b3:f6:e6:92:24:aa:2d:a0:e3:6e:
5a:4d:a1:13:76:ba:b2:6b:25:54:24:6f:af:d3:92:
7b:5f:f0:5e:2b:06:d7:49:ad:29:e1:04:bb:42:32:
e5:4d:03:07:34:56:2a:fc:c5:ac:d5:36:f1:27:75:
91:70:3e:8b:ba:0f:04:34:94:63:c0:ff:bc:e9:0f:
49:74:ed:7d:58:4b:c7:87:43:f5:91:fc:a7:0f:5e:
b3:48:03:52:70:ef:e2:7d:e8:10:63:e1:55:11:36:
ff:92:e3:a1:66:78:f4:09:8e:9d:75:98:29:10:21:
4c:8a:5e:4a:42:14:b3:30:ae:07:e8:db:6d:12:76:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:80:EA:59:2C:AC:0A:BE:10:1E:C9:81:9B:50:DF:45:BD:EA:9F:3D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/foDqWSysCr4QHsmBm1DfRb3qnz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:d1:38:be:67:d4:f5:a6:00:58:11:a4:a9:7a:47:b4:d6:b3:
46:b9:85:96:d8:11:f1:1d:0e:94:62:b6:47:4d:e0:86:87:45:
20:58:0d:35:ec:39:e4:97:67:c6:ad:45:90:88:84:49:2d:0a:
18:ea:09:e8:49:0a:30:03:99:db:c9:97:89:b7:bc:01:ff:2b:
52:f0:46:07:42:5e:c0:0a:73:e8:e1:61:54:4f:0b:fc:53:5a:
31:ee:1b:99:59:8a:7a:d6:d2:56:e0:3f:56:ad:f1:0d:6a:b5:
07:cf:95:31:a4:8f:1e:ba:b3:fd:f1:4d:8f:5f:7e:0e:97:72:
4e:cb:f9:a0:27:cc:5a:4c:31:13:c9:bb:a4:6c:89:34:8a:9e:
ad:3a:51:db:12:ad:e4:5a:a5:31:6d:2d:0c:51:fb:ab:e8:4a:
45:fd:5a:0f:4d:31:62:ff:b0:b2:f9:0c:7e:b4:14:8c:ec:8e:
7b:79:53:22:e0:d5:e3:9e:b9:05:91:0a:33:3e:92:e8:6f:9a:
e5:91:41:2c:4c:a8:0e:63:1c:39:70:fb:1f:6a:5b:aa:4c:c3:
b1:68:cb:ff:6a:ca:a5:6b:e8:d8:6a:12:0e:dc:be:30:0d:18:
0f:b4:88:4c:e9:7e:89:1a:c8:1a:93:0b:bd:fa:a3:15:fb:c1:
e6:60:0d:a4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYydpTG4CKoD/oG6Yw4srzEgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjI0MjEwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTgwZWE1OTJjYWMwYWJlMTAxZWM5ODE5YjUwZGY0NWJkZWE5ZjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziaNnZxtDwXZvODuhViQ4InxO3A3
UapVUmcB8Fd9FJXJZWe66dZzJqC3bwMTjZy2WWhCoC+xaruOEJMWwRBZRiQ+BaIQ
W1DcQBEKT70z1ss+ExSkaP3S/tN4rcKFqHAMDQNqtJknB3U5+GkqHxnFEo3F8uXw
UE8+Ob7lTLP25pIkqi2g425aTaETdrqyayVUJG+v05J7X/BeKwbXSa0p4QS7QjLl
TQMHNFYq/MWs1TbxJ3WRcD6Lug8ENJRjwP+86Q9JdO19WEvHh0P1kfynD16zSANS
cO/ifegQY+FVETb/kuOhZnj0CY6ddZgpECFMil5KQhSzMK4H6NttEnZ6XwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH6A6lksrAq+EB7JgZtQ30W96p89MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvZm9EcVdTeXNDcjRRSHNtQm0xRGZSYjNxbnowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJzROL5n1PWmAFgRpKl6
R7TWs0a5hZbYEfEdDpRitkdN4IaHRSBYDTXsOeSXZ8atRZCIhEktChjqCehJCjAD
mdvJl4m3vAH/K1LwRgdCXsAKc+jhYVRPC/xTWjHuG5lZinrW0lbgP1at8Q1qtQfP
lTGkjx66s/3xTY9ffg6Xck7L+aAnzFpMMRPJu6RsiTSKnq06UdsSreRapTFtLQxR
+6voSkX9Wg9NMWL/sLL5DH60FIzsjnt5UyLg1eOeuQWRCjM+kuhvmuWRQSxMqA5j
HDlw+x9qW6pMw7Foy/9qyqVr6NhqEg7cvjANGA+0iEzpfokayBqTC736oxX7weZg
DaQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org