Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/i6zJeL_TRHGyOpu0ueizlXsMoRI.roa
File: i6zJeL_TRHGyOpu0ueizlXsMoRI.roa (raw, json)
Hash identifier: r5VUtxNe9H+izZuwbrQ/x5bgck4l8OAWcX16q7jPleI=
Subject key identifier: 8B:AC:C9:78:BF:D3:44:71:B2:3A:9B:B4:B9:E8:B3:95:7B:0C:A1:12
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA832EA2745890FEBB6C4642646BD97D8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/i6zJeL_TRHGyOpu0ueizlXsMoRI.roa
Signing time: Tue 26 Dec 2023 22:15:58 +0000
ROA not before: Tue 26 Dec 2023 22:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a8:32:ea:27:45:89:0f:eb:b6:c4:64:26:46:bd:97:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 26 22:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bacc978bfd34471b23a9bb4b9e8b3957b0ca112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ea:98:84:23:04:b2:51:41:49:99:1a:24:76:
d5:a3:97:29:dd:3f:fd:98:92:85:61:63:16:e9:8e:
0e:fd:b8:50:98:41:d9:98:17:9f:66:e5:a3:27:e9:
96:a7:20:58:b7:3a:ee:28:11:d3:74:e5:ab:f2:90:
0d:bb:13:27:2d:1b:f3:c4:29:e2:a5:cc:54:52:9a:
42:56:ee:a8:2c:8e:c4:11:d2:bc:71:8e:c1:d7:83:
0c:d7:78:b6:ab:ee:54:f9:5d:70:e3:6e:f9:c2:cc:
5c:29:d6:40:ef:11:07:02:36:fa:73:8a:8f:23:79:
60:20:bb:73:6a:34:e6:6e:f3:f6:21:f5:10:ea:87:
96:f8:aa:0d:c0:b3:db:62:9f:7f:c4:07:69:ee:d7:
80:88:19:91:34:d7:b9:73:6c:27:77:38:7a:38:78:
62:a1:60:ed:18:f7:3d:7a:bf:8b:31:01:81:72:cd:
c0:e9:61:27:e8:10:a2:f0:52:69:54:c7:0c:87:b3:
42:0a:35:3a:05:62:f3:a3:69:31:54:41:b3:d5:a0:
08:58:03:c4:ff:a5:db:52:a1:4a:64:f5:fe:d2:7a:
16:2a:21:40:82:ed:ce:1f:04:df:48:5f:60:5f:bb:
77:9d:4d:52:10:ce:29:f6:a7:e8:1c:7f:a0:67:51:
29:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AC:C9:78:BF:D3:44:71:B2:3A:9B:B4:B9:E8:B3:95:7B:0C:A1:12
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/i6zJeL_TRHGyOpu0ueizlXsMoRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:6f:5e:59:d8:63:7c:ff:c0:31:12:d1:76:c4:e2:1c:9b:e8:
b9:45:22:3c:28:0a:09:1b:3b:92:c0:1b:32:e7:0e:b5:84:a7:
f1:02:67:a1:90:f4:da:e9:0e:79:7f:c5:c0:bc:d5:d9:4d:af:
21:90:d0:dd:c9:14:e6:be:43:27:ca:44:1e:65:19:dd:23:0d:
ad:c8:7f:49:00:d0:b0:98:1d:4e:ef:4d:9f:e4:e9:c4:22:15:
b1:6a:c1:15:36:e4:80:03:8a:c5:29:10:32:83:f8:fa:7a:75:
5f:47:3f:ed:5c:4d:ed:80:a2:a6:f7:2e:12:52:2d:40:be:14:
bf:01:32:a6:00:a5:9d:b6:27:44:7b:81:32:fc:b5:40:cb:46:
f0:a1:ae:f4:34:a9:98:c3:71:3c:6d:66:5f:58:e1:32:71:4d:
82:ea:64:7b:38:f1:5e:74:d2:dd:d1:ab:04:8f:8b:71:21:bc:
95:70:0f:05:08:49:8c:fe:c4:37:93:bd:ea:18:48:e2:bd:2d:
97:d4:62:8d:5d:02:43:5a:8a:3e:cb:5c:43:94:9b:59:81:16:
53:2b:56:27:4e:c8:19:b2:33:e8:35:c8:fe:a5:52:53:aa:dc:
3d:d6:f3:bd:32:c3:1d:d9:13:1b:12:26:52:45:10:5d:64:7f:
1b:9f:15:6c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYyoMuonRYkP67bEZCZGvZfYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjI2MjIxNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmFjYzk3OGJmZDM0NDcxYjIzYTliYjRiOWU4YjM5NTdiMGNhMTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+qYhCMEslFBSZkaJHbVo5cp3T/9
mJKFYWMW6Y4O/bhQmEHZmBefZuWjJ+mWpyBYtzruKBHTdOWr8pANuxMnLRvzxCni
pcxUUppCVu6oLI7EEdK8cY7B14MM13i2q+5U+V1w4275wsxcKdZA7xEHAjb6c4qP
I3lgILtzajTmbvP2IfUQ6oeW+KoNwLPbYp9/xAdp7teAiBmRNNe5c2wndzh6OHhi
oWDtGPc9er+LMQGBcs3A6WEn6BCi8FJpVMcMh7NCCjU6BWLzo2kxVEGz1aAIWAPE
/6XbUqFKZPX+0noWKiFAgu3OHwTfSF9gX7t3nU1SEM4p9qfoHH+gZ1Ep+QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIusyXi/00RxsjqbtLnos5V7DKESMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvaTZ6SmVMX1RSSEd5T3B1MHVlaXpsWHNNb1JJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACNvXlnYY3z/wDES0XbE
4hyb6LlFIjwoCgkbO5LAGzLnDrWEp/ECZ6GQ9NrpDnl/xcC81dlNryGQ0N3JFOa+
QyfKRB5lGd0jDa3If0kA0LCYHU7vTZ/k6cQiFbFqwRU25IADisUpEDKD+Pp6dV9H
P+1cTe2Aoqb3LhJSLUC+FL8BMqYApZ22J0R7gTL8tUDLRvChrvQ0qZjDcTxtZl9Y
4TJxTYLqZHs48V500t3RqwSPi3EhvJVwDwUISYz+xDeTveoYSOK9LZfUYo1dAkNa
ij7LXEOUm1mBFlMrVidOyBmyM+g1yP6lUlOq3D3W870ywx3ZExsSJlJFEF1kfxuf
FWw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:51 2024 by rpki-client on console-ams.rpki-client.org