Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jOCVLTH9Ejc_I7xsdRKaAzJbxLA.roa
File: jOCVLTH9Ejc_I7xsdRKaAzJbxLA.roa (raw, json)
Hash identifier: N40PaJzGnIt35EytDaMLv9qSHZ0uCUsh0X0AU1jLwrU=
Subject key identifier: 8C:E0:95:2D:31:FD:12:37:3F:23:BC:6C:75:12:9A:03:32:5B:C4:B0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018ED19415D1390052A6EA94635B08BECF9C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jOCVLTH9Ejc_I7xsdRKaAzJbxLA.roa
Signing time: Fri 12 Apr 2024 09:12:06 +0000
ROA not before: Fri 12 Apr 2024 09:12:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d1:94:15:d1:39:00:52:a6:ea:94:63:5b:08:be:cf:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 12 09:12:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ce0952d31fd12373f23bc6c75129a03325bc4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:7e:a2:98:f3:8c:51:e7:31:93:19:f5:09:
54:3d:de:f7:53:3b:b0:f2:44:d8:c9:af:59:99:7f:
e1:c4:68:b2:45:46:5f:25:5b:73:bb:07:9a:58:68:
fd:2a:b6:60:f5:53:12:07:4a:34:9a:3c:c5:5f:91:
3c:55:03:6f:d4:fe:19:d7:8a:f4:e3:0c:90:10:3d:
98:65:64:32:10:60:56:c0:73:1f:0e:79:55:d2:e2:
c2:18:92:67:e0:b9:86:1a:0c:90:a1:36:c7:2b:9e:
b8:b3:50:51:87:e3:d1:a9:95:a0:b0:f3:c4:ab:fc:
8c:3d:c1:17:df:20:bc:31:30:4e:3b:86:2a:38:cf:
3b:f7:db:fc:92:cb:33:16:94:95:6c:0c:c9:f3:bd:
11:4e:22:b7:be:55:1e:8a:42:08:b6:85:49:d7:15:
5c:b3:04:92:90:da:60:9e:09:31:98:81:34:b4:4c:
82:e8:3c:14:ee:a7:6e:19:08:c1:8d:30:19:b2:f3:
17:0b:99:fe:6b:bc:18:5d:bd:a5:45:db:3e:47:98:
0c:54:76:f8:96:8b:ab:9d:68:a7:53:b6:80:92:ae:
b2:60:b9:68:a1:5a:38:6b:61:38:0f:34:38:32:1f:
d9:d6:32:b3:cf:51:9a:fc:b9:4c:a6:74:51:6f:94:
57:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E0:95:2D:31:FD:12:37:3F:23:BC:6C:75:12:9A:03:32:5B:C4:B0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jOCVLTH9Ejc_I7xsdRKaAzJbxLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:4b:77:a4:2e:60:21:4e:28:41:46:48:b5:c7:7a:87:e7:fa:
e1:4d:7a:73:89:6a:e6:1c:c1:f9:96:fc:f1:0d:73:b3:71:a3:
6a:28:67:dd:44:47:0d:eb:7b:05:89:b9:32:28:87:24:ae:58:
18:27:40:35:14:b0:b3:67:b3:39:d2:3a:34:39:1b:be:4d:d3:
89:0b:01:d6:f5:8f:a9:ae:51:b3:c0:bd:29:a1:37:e0:0f:9e:
eb:03:a3:26:20:70:9e:c6:ee:70:1b:16:19:f2:05:76:10:5e:
df:2d:d1:6f:6c:06:e7:37:f3:a6:ba:e1:f8:b8:10:8f:71:bf:
db:ad:4d:85:47:d1:54:87:93:5e:ee:02:e1:27:9c:62:eb:e9:
c3:19:c0:ab:3f:f5:4c:f8:fd:da:07:3f:39:0f:fd:3d:49:b6:
a4:b4:d2:9c:68:fe:79:b4:58:1e:89:11:ad:1d:2e:2d:4b:3f:
1a:b7:cf:a3:cf:56:47:03:25:79:e8:34:07:53:13:e7:fe:f8:
a0:06:d4:e3:63:0f:9c:9e:eb:84:29:0a:91:09:2a:a8:60:f5:
31:67:d1:bd:b7:4c:0d:1b:e0:b1:3e:a1:13:16:f5:06:4d:1f:
e7:a2:8a:88:50:82:3b:c3:99:4e:19:e1:76:42:75:60:fb:de:
20:a3:66:58
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY7RlBXROQBSpuqUY1sIvs+cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDEyMDkxMjA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2UwOTUyZDMxZmQxMjM3M2YyM2JjNmM3NTEyOWEwMzMyNWJjNGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozV+opjzjFHnMZMZ9QlUPd73Uzuw
8kTYya9ZmX/hxGiyRUZfJVtzuweaWGj9KrZg9VMSB0o0mjzFX5E8VQNv1P4Z14r0
4wyQED2YZWQyEGBWwHMfDnlV0uLCGJJn4LmGGgyQoTbHK564s1BRh+PRqZWgsPPE
q/yMPcEX3yC8MTBOO4YqOM8799v8ksszFpSVbAzJ870RTiK3vlUeikIItoVJ1xVc
swSSkNpgngkxmIE0tEyC6DwU7qduGQjBjTAZsvMXC5n+a7wYXb2lRds+R5gMVHb4
lournWinU7aAkq6yYLlooVo4a2E4DzQ4Mh/Z1jKzz1Ga/LlMpnRRb5RXRQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIzglS0x/RI3PyO8bHUSmgMyW8SwMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvak9DVkxUSDlFamNfSTd4c2RSS2FBekpieExBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGtLd6QuYCFOKEFGSLXH
eofn+uFNenOJauYcwfmW/PENc7Nxo2ooZ91ERw3rewWJuTIohySuWBgnQDUUsLNn
sznSOjQ5G75N04kLAdb1j6muUbPAvSmhN+APnusDoyYgcJ7G7nAbFhnyBXYQXt8t
0W9sBuc386a64fi4EI9xv9utTYVH0VSHk17uAuEnnGLr6cMZwKs/9Uz4/doHPzkP
/T1JtqS00pxo/nm0WB6JEa0dLi1LPxq3z6PPVkcDJXnoNAdTE+f++KAG1ONjD5ye
64QpCpEJKqhg9TFn0b23TA0b4LE+oRMW9QZNH+eiiohQgjvDmU4Z4XZCdWD73iCj
Zlg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:51 2024 by rpki-client on console-ams.rpki-client.org