Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gQ3CUDNqmU5wkKn6MztHUBQdGGw.roa
File: gQ3CUDNqmU5wkKn6MztHUBQdGGw.roa (raw, json)
Hash identifier: cJFgi8R0mX2YhR8OCuZk/neIW+A6zPecqU/QrQCXJ4o=
Subject key identifier: 81:0D:C2:50:33:6A:99:4E:70:90:A9:FA:33:3B:47:50:14:1D:18:6C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D5AB61915B38E702C903261CE8B4A1D4D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gQ3CUDNqmU5wkKn6MztHUBQdGGw.roa
Signing time: Tue 30 Jan 2024 14:11:39 +0000
ROA not before: Tue 30 Jan 2024 14:11:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:b6:19:15:b3:8e:70:2c:90:32:61:ce:8b:4a:1d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 30 14:11:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=810dc250336a994e7090a9fa333b4750141d186c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:70:f2:37:cb:4f:f3:23:51:3a:8f:7b:29:2c:
8e:01:0c:d8:b5:b6:54:74:cf:b6:4c:69:be:0c:ee:
71:72:7d:17:85:5a:c9:7c:80:62:f3:bc:cc:42:e5:
04:c9:a2:33:22:71:ca:c9:45:d4:9b:6b:18:22:96:
b4:4e:07:1b:e8:a8:0a:3a:b0:9e:b4:1d:ba:78:c1:
7a:80:41:89:a8:24:dd:4b:47:4e:c0:c5:98:4c:ef:
01:64:33:5d:27:6e:8e:67:9f:15:db:38:9b:46:80:
28:80:e1:c9:de:57:10:12:8c:23:31:4a:8a:dc:d9:
cd:39:86:38:34:59:cd:c7:7a:03:a0:19:46:0d:35:
29:ca:88:06:aa:81:7e:f5:0d:6c:b4:84:3a:f4:99:
f4:90:90:60:6e:9f:52:11:63:50:67:3f:0b:2d:e9:
04:61:59:ea:49:f9:ed:b3:f2:6a:fc:a6:d2:77:84:
eb:37:77:2b:87:25:1f:96:7d:12:00:04:7a:b3:97:
b4:1b:97:85:dc:ce:7c:f4:e2:c8:36:4f:c7:94:cf:
8d:d3:ad:09:b7:74:40:32:8d:c0:ee:64:0a:a5:3f:
a2:68:4c:2c:79:16:c6:5a:34:07:8c:b6:4a:49:3c:
e0:b0:12:db:23:da:fd:db:0d:34:18:aa:cb:d2:a9:
1f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0D:C2:50:33:6A:99:4E:70:90:A9:FA:33:3B:47:50:14:1D:18:6C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gQ3CUDNqmU5wkKn6MztHUBQdGGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:8a:2e:b6:a4:e3:40:2c:ed:b3:50:ef:dd:80:b6:f1:89:98:
cd:4e:27:88:66:67:f4:e0:bd:a2:9d:99:0a:6e:45:78:08:9a:
2f:cf:27:7d:45:14:47:bb:b7:fd:10:4d:e4:5e:ac:e2:1f:4c:
e8:ea:91:7c:f3:9d:a4:d4:b5:f9:80:f3:f0:71:c8:56:90:d9:
e7:0f:ff:d7:04:b5:b4:6b:af:cd:44:73:cc:c9:fa:61:38:82:
2a:16:50:73:f8:eb:cb:a8:20:d3:69:03:16:08:d3:88:84:ad:
73:a5:48:77:61:74:b2:fb:72:d5:48:28:66:c8:11:22:45:0f:
cc:c2:4d:58:85:d3:1d:67:d3:11:ea:9d:89:bd:44:14:fd:ea:
6e:09:6c:18:cf:cf:d9:8b:e7:09:ce:73:72:f8:c7:a4:06:10:
1a:7f:ff:75:95:c9:41:65:d0:ca:fe:93:42:67:f7:88:d3:f6:
8e:11:08:03:08:13:ca:12:97:af:51:58:de:2c:a5:23:06:05:
cc:1a:1e:75:b3:12:2d:d0:f7:67:7e:78:4d:ba:ac:14:ee:33:
54:32:12:e2:74:d8:38:fa:e7:38:81:16:a6:2a:cd:94:bc:91:
6a:36:c4:7d:98:8b:7b:5f:fa:05:d8:8c:fe:20:97:26:70:6f:
3e:7c:6b:6e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY1athkVs45wLJAyYc6LSh1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTMwMTQxMTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTBkYzI1MDMzNmE5OTRlNzA5MGE5ZmEzMzNiNDc1MDE0MWQxODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHDyN8tP8yNROo97KSyOAQzYtbZU
dM+2TGm+DO5xcn0XhVrJfIBi87zMQuUEyaIzInHKyUXUm2sYIpa0Tgcb6KgKOrCe
tB26eMF6gEGJqCTdS0dOwMWYTO8BZDNdJ26OZ58V2zibRoAogOHJ3lcQEowjMUqK
3NnNOYY4NFnNx3oDoBlGDTUpyogGqoF+9Q1stIQ69Jn0kJBgbp9SEWNQZz8LLekE
YVnqSfnts/Jq/KbSd4TrN3crhyUfln0SAAR6s5e0G5eF3M589OLINk/HlM+N060J
t3RAMo3A7mQKpT+iaEwseRbGWjQHjLZKSTzgsBLbI9r92w00GKrL0qkfRQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIENwlAzaplOcJCp+jM7R1AUHRhsMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvZ1EzQ1VETnFtVTV3a0tuNk16dEhVQlFkR0d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF+KLrak40As7bNQ792A
tvGJmM1OJ4hmZ/TgvaKdmQpuRXgImi/PJ31FFEe7t/0QTeRerOIfTOjqkXzznaTU
tfmA8/BxyFaQ2ecP/9cEtbRrr81Ec8zJ+mE4gioWUHP468uoINNpAxYI04iErXOl
SHdhdLL7ctVIKGbIESJFD8zCTViF0x1n0xHqnYm9RBT96m4JbBjPz9mL5wnOc3L4
x6QGEBp//3WVyUFl0Mr+k0Jn94jT9o4RCAMIE8oSl69RWN4spSMGBcwaHnWzEi3Q
92d+eE26rBTuM1QyEuJ02Dj65ziBFqYqzZS8kWo2xH2Yi3tf+gXYjP4glyZwbz58
a24=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:51 2024 by rpki-client on console-ams.rpki-client.org