Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/in-xCH88cDypqhjVEHuXipmnu_c.roa
File: in-xCH88cDypqhjVEHuXipmnu_c.roa (raw, json)
Hash identifier: zmYSayc8BVbxjcjx37d35qS++P2xkGiaGisVLWlaV30=
Subject key identifier: 8A:7F:B1:08:7F:3C:70:3C:A9:AA:18:D5:10:7B:97:8A:99:A7:BB:F7
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E95101D7D548D45C3C06ADF5760EA44E8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/in-xCH88cDypqhjVEHuXipmnu_c.roa
Signing time: Sun 31 Mar 2024 15:10:45 +0000
ROA not before: Sun 31 Mar 2024 15:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:95:10:1d:7d:54:8d:45:c3:c0:6a:df:57:60:ea:44:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 31 15:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a7fb1087f3c703ca9aa18d5107b978a99a7bbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:fc:31:df:b6:92:a2:34:7d:a1:d5:8f:c2:
d8:27:53:2d:6f:69:71:83:0b:9a:13:3e:70:71:a0:
64:46:67:03:5e:a9:ee:fd:3e:71:74:16:3e:00:6f:
b9:8d:f1:ef:34:12:f5:04:7d:09:a9:09:98:52:c3:
e9:1f:dc:e7:e8:88:a3:21:1e:b4:d7:73:bd:eb:f3:
de:3f:15:78:c3:05:33:8f:14:94:48:20:5b:99:e6:
10:55:2a:75:8d:46:83:c3:b5:d3:8b:43:72:f2:5f:
2f:8c:84:46:99:28:4c:bc:1f:06:79:f5:5c:85:82:
bc:ab:69:21:5f:da:87:b4:51:87:6f:30:f9:11:03:
8b:13:b0:9f:51:cc:77:e1:76:79:50:51:99:3e:8f:
01:9a:0e:40:93:a4:93:ca:b1:5a:d6:b4:8e:5b:aa:
37:22:86:53:f9:f1:ef:5b:38:43:70:b2:1d:d2:24:
a4:83:25:2f:f6:2f:73:47:15:08:0b:0e:d6:16:42:
a1:20:c0:d9:8c:f8:94:49:91:cd:49:ac:a8:78:e7:
24:27:d4:17:02:4c:da:8b:a6:c3:2f:a1:a1:aa:00:
1b:4f:24:7f:f1:4f:bd:6c:aa:e2:ed:81:6f:68:8d:
41:a4:31:82:f5:68:2c:a1:0d:41:e7:63:9a:3b:8b:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7F:B1:08:7F:3C:70:3C:A9:AA:18:D5:10:7B:97:8A:99:A7:BB:F7
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/in-xCH88cDypqhjVEHuXipmnu_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:9d:38:1d:fb:80:02:7e:9f:bb:e6:7d:60:a8:b6:4f:09:f4:
24:d7:14:67:56:9d:28:c1:7a:c7:a6:6e:34:fb:1a:97:24:f6:
20:62:f0:5f:49:88:08:d5:47:50:15:b1:17:3b:96:8d:20:75:
3b:27:8d:53:e7:dd:44:ad:07:74:be:4a:01:0c:81:ea:9a:ff:
56:ca:42:3d:25:1f:3d:1c:7f:e2:c1:f3:56:0f:8d:75:7c:bd:
44:5a:5c:38:54:b5:75:95:82:fd:50:f5:f0:56:57:d1:03:3f:
c4:e8:70:85:38:7a:48:9d:05:67:25:ff:50:6e:38:61:fb:c5:
2b:73:5e:01:8d:44:12:20:af:e3:66:25:36:bb:74:42:9c:e7:
93:c5:9b:a4:b6:d2:c8:fa:06:8f:5e:09:64:f2:2d:ab:0a:ba:
d4:71:28:d2:e4:18:af:53:01:84:d3:17:72:d3:b4:a9:89:7d:
af:4f:11:2c:11:dd:3f:9d:83:3b:95:c6:99:77:69:7f:cc:67:
f8:6f:5e:00:00:95:ec:88:b7:05:19:6a:00:59:37:19:ff:7b:
94:31:a4:14:64:93:fb:8d:b7:2f:de:72:61:bc:d6:ab:39:68:
79:2b:72:e3:aa:cc:5f:d3:87:f0:ec:bc:04:66:6b:14:16:89:
ff:62:a4:4d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6VEB19VI1Fw8Bq31dg6kToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzMxMTUxMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTdmYjEwODdmM2M3MDNjYTlhYTE4ZDUxMDdiOTc4YTk5YTdiYmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpT8Md+2kqI0faHVj8LYJ1Mtb2lx
gwuaEz5wcaBkRmcDXqnu/T5xdBY+AG+5jfHvNBL1BH0JqQmYUsPpH9zn6IijIR60
13O96/PePxV4wwUzjxSUSCBbmeYQVSp1jUaDw7XTi0Ny8l8vjIRGmShMvB8GefVc
hYK8q2khX9qHtFGHbzD5EQOLE7CfUcx34XZ5UFGZPo8Bmg5Ak6STyrFa1rSOW6o3
IoZT+fHvWzhDcLId0iSkgyUv9i9zRxUICw7WFkKhIMDZjPiUSZHNSayoeOckJ9QX
Akzai6bDL6GhqgAbTyR/8U+9bKri7YFvaI1BpDGC9WgsoQ1B52OaO4su7wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIp/sQh/PHA8qaoY1RB7l4qZp7v3MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvaW4teENIODhjRHlwcWhqVkVIdVhpcG1udV9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKadOB37gAJ+n7vmfWCo
tk8J9CTXFGdWnSjBesembjT7Gpck9iBi8F9JiAjVR1AVsRc7lo0gdTsnjVPn3USt
B3S+SgEMgeqa/1bKQj0lHz0cf+LB81YPjXV8vURaXDhUtXWVgv1Q9fBWV9EDP8To
cIU4ekidBWcl/1BuOGH7xStzXgGNRBIgr+NmJTa7dEKc55PFm6S20sj6Bo9eCWTy
LasKutRxKNLkGK9TAYTTF3LTtKmJfa9PESwR3T+dgzuVxpl3aX/MZ/hvXgAAleyI
twUZagBZNxn/e5QxpBRkk/uNty/ecmG81qs5aHkrcuOqzF/Th/DsvARmaxQWif9i
pE0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org