Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/it7FUyQr7FJqYJ1PP_aT5jEI_8s.roa
File: it7FUyQr7FJqYJ1PP_aT5jEI_8s.roa (raw, json)
Hash identifier: vNJ1eq5gIz1GhJ5rZ/WhC2h6uYXp6DSG2/PIlc6vGP0=
Subject key identifier: 8A:DE:C5:53:24:2B:EC:52:6A:60:9D:4F:3F:F6:93:E6:31:08:FF:CB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DBB45FAA77B5E61CAFAE9464686F752F3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/it7FUyQr7FJqYJ1PP_aT5jEI_8s.roa
Signing time: Sun 18 Feb 2024 08:12:21 +0000
ROA not before: Sun 18 Feb 2024 08:12:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bb:45:fa:a7:7b:5e:61:ca:fa:e9:46:46:86:f7:52:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 18 08:12:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8adec553242bec526a609d4f3ff693e63108ffcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:f4:92:5e:92:e7:be:d8:e4:ea:aa:6c:82:
7d:2e:7e:4b:83:53:c5:bd:1e:dc:e7:53:eb:0e:42:
3d:bf:4c:7c:05:48:c4:f4:95:9e:fa:f0:9d:cc:2c:
c7:de:31:71:ff:d1:51:5a:f1:d3:8b:db:ca:d1:7b:
43:6e:0d:c2:8b:a4:ac:46:a6:1b:d7:e3:67:0c:49:
d7:a7:30:d3:9e:3f:d2:d9:1a:c3:8e:2a:6a:32:ec:
8f:18:2c:58:51:0f:51:ff:32:ec:13:31:0f:b7:df:
ad:a3:13:be:7d:a2:79:2c:f3:7f:da:5c:19:e5:cc:
4a:2e:80:59:f5:e3:9e:f0:38:df:70:5f:73:36:72:
ff:a4:d4:2f:a8:b4:3e:d0:f1:ac:34:7e:05:f1:e0:
c9:37:8c:ac:66:53:7f:49:cd:85:fa:55:d5:4b:8a:
47:5f:cc:28:c8:d5:2d:43:af:54:f4:8b:22:80:2a:
f0:8e:81:94:62:ea:1e:17:da:a9:af:79:f5:0e:1a:
d3:4c:9e:a8:d4:93:5a:c1:86:10:d6:17:c3:f8:4a:
67:96:64:dd:d7:1a:07:90:91:43:bb:66:a2:fe:6d:
ea:75:17:c4:68:17:44:51:04:f8:cc:47:87:03:ac:
f2:35:ae:7e:ee:21:ef:09:a7:51:cd:78:24:47:0e:
0a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DE:C5:53:24:2B:EC:52:6A:60:9D:4F:3F:F6:93:E6:31:08:FF:CB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/it7FUyQr7FJqYJ1PP_aT5jEI_8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:77:a3:43:e4:96:d3:6c:a6:29:18:f4:8d:ed:31:f4:87:53:
85:c5:b6:86:b0:4f:22:33:48:b1:c7:70:9e:ac:56:20:cf:56:
1a:54:79:c3:b0:87:43:5b:fb:03:1c:74:1b:30:39:d6:d3:55:
4c:97:ef:a1:4f:7c:67:5b:76:dc:87:78:d0:29:f9:86:b2:ec:
6b:f1:47:b7:7c:8f:65:c7:34:cc:7f:ce:64:2d:b6:92:32:3a:
74:6a:ae:df:9f:d2:1f:99:fd:41:67:45:a7:ff:18:96:ee:9e:
a5:3e:29:af:0a:0c:a1:b4:be:25:23:89:8f:94:37:52:45:fc:
df:56:33:a9:4e:61:3f:09:b1:15:65:01:dc:8c:0c:d3:87:bd:
49:f9:82:39:6b:27:3e:f0:3e:4e:c5:89:2c:9d:8f:9c:53:76:
27:ce:2a:cf:f9:33:d4:63:fc:ff:78:20:b1:2f:c6:b4:0c:b8:
6e:ca:73:85:6a:ea:12:8e:8c:58:5e:01:35:03:6b:b0:bd:2e:
4e:1d:17:4e:4f:ad:44:b3:03:68:df:b3:e9:c2:8f:8c:8f:ff:
8a:79:f7:11:fb:9a:78:66:19:d0:d1:fa:a2:45:12:c3:af:be:
07:2a:32:9f:0d:37:b5:68:8f:9d:e4:fd:75:cc:b5:f3:d3:9e:
7c:ad:df:07
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY27Rfqne15hyvrpRkaG91LzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjE4MDgxMjIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWRlYzU1MzI0MmJlYzUyNmE2MDlkNGYzZmY2OTNlNjMxMDhmZmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmH0kl6S577Y5OqqbIJ9Ln5Lg1PF
vR7c51PrDkI9v0x8BUjE9JWe+vCdzCzH3jFx/9FRWvHTi9vK0XtDbg3Ci6SsRqYb
1+NnDEnXpzDTnj/S2RrDjipqMuyPGCxYUQ9R/zLsEzEPt9+toxO+faJ5LPN/2lwZ
5cxKLoBZ9eOe8DjfcF9zNnL/pNQvqLQ+0PGsNH4F8eDJN4ysZlN/Sc2F+lXVS4pH
X8woyNUtQ69U9IsigCrwjoGUYuoeF9qpr3n1DhrTTJ6o1JNawYYQ1hfD+EpnlmTd
1xoHkJFDu2ai/m3qdRfEaBdEUQT4zEeHA6zyNa5+7iHvCadRzXgkRw4KgwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIrexVMkK+xSamCdTz/2k+YxCP/LMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvaXQ3RlV5UXI3RkpxWUoxUFBfYVQ1akVJXzhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKF3o0PkltNspikY9I3t
MfSHU4XFtoawTyIzSLHHcJ6sViDPVhpUecOwh0Nb+wMcdBswOdbTVUyX76FPfGdb
dtyHeNAp+Yay7GvxR7d8j2XHNMx/zmQttpIyOnRqrt+f0h+Z/UFnRaf/GJbunqU+
Ka8KDKG0viUjiY+UN1JF/N9WM6lOYT8JsRVlAdyMDNOHvUn5gjlrJz7wPk7FiSyd
j5xTdifOKs/5M9Rj/P94ILEvxrQMuG7Kc4Vq6hKOjFheATUDa7C9Lk4dF05PrUSz
A2jfs+nCj4yP/4p59xH7mnhmGdDR+qJFEsOvvgcqMp8NN7Voj53k/XXMtfPTnnyt
3wc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org