Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nt_U1SSPr-6no1lLC4Il_ODGvZw.roa
File: nt_U1SSPr-6no1lLC4Il_ODGvZw.roa (raw, json)
Hash identifier: gxt25FVa7vHXQa2E9ww2z+blmO3aM8RAGTqP92BqmSM=
Subject key identifier: 9E:DF:D4:D5:24:8F:AF:EE:A7:A3:59:4B:0B:82:25:FC:E0:C6:BD:9C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E65DB275511A55B5B9E96D9C7880963FE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nt_U1SSPr-6no1lLC4Il_ODGvZw.roa
Signing time: Fri 22 Mar 2024 11:10:45 +0000
ROA not before: Fri 22 Mar 2024 11:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:65:db:27:55:11:a5:5b:5b:9e:96:d9:c7:88:09:63:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 22 11:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9edfd4d5248fafeea7a3594b0b8225fce0c6bd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3e:b7:c8:91:75:38:98:e8:4d:40:49:ac:4b:
1a:f8:5b:a1:f9:bb:12:25:ea:e5:93:1f:3b:a7:64:
4a:bd:8a:31:c5:e0:a5:fa:93:13:89:4c:06:26:57:
e6:d1:44:a6:99:94:77:80:a0:0b:db:1e:dc:84:fd:
f5:63:86:e1:ab:53:c5:8d:68:af:af:70:53:ef:8b:
d5:04:25:2b:3c:0c:68:bd:40:a6:ab:c8:27:88:2e:
3c:ba:00:0d:80:57:33:c6:cf:3a:a4:cc:0c:fc:94:
09:df:e1:30:62:f1:1d:ff:07:50:ad:d9:df:2d:58:
65:b1:c8:f7:20:31:b9:fa:92:16:3c:70:88:ab:23:
d5:2a:1c:46:f4:fa:72:a2:21:1e:c5:bf:56:4b:e3:
91:8c:20:44:7a:78:10:72:d5:d5:ec:44:3a:fc:b4:
a8:19:6c:ab:1b:25:73:08:90:da:08:c0:2c:3d:2f:
bc:b9:60:66:fa:f1:99:8a:5c:d3:be:d7:21:69:53:
d0:38:70:4b:17:aa:7b:6a:42:9b:b6:96:de:9e:b6:
6b:3d:96:87:69:d0:d4:d5:ab:dc:fc:11:3b:be:bb:
8c:df:77:6e:fa:73:f1:03:f3:28:1d:52:e5:ee:94:
cf:cf:95:80:45:0f:69:bc:93:ac:9c:0a:3a:2e:c0:
73:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DF:D4:D5:24:8F:AF:EE:A7:A3:59:4B:0B:82:25:FC:E0:C6:BD:9C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nt_U1SSPr-6no1lLC4Il_ODGvZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:a2:98:a6:1f:fd:99:2a:b5:ba:9d:51:cd:0a:8c:e9:99:84:
ed:5c:3b:69:3e:33:3c:c0:0b:ed:36:37:3e:89:c9:4a:78:92:
be:c1:79:ac:51:24:73:c8:f2:5f:3b:95:94:68:73:f4:95:70:
42:1f:02:1d:6a:08:b6:1d:8d:39:2e:ac:d6:a6:21:09:f9:89:
a9:77:48:de:5f:88:c9:e9:2c:e5:3c:60:7e:5c:11:fc:cb:8c:
21:2b:bd:28:5c:39:85:9e:ed:d5:a6:ad:4c:37:25:4f:f9:a7:
4c:5e:f9:40:ab:f2:39:37:31:1a:16:68:0f:e0:78:b0:65:e1:
2f:6c:8f:80:03:ec:20:f0:85:9a:7d:d7:7e:58:c9:9e:b7:90:
0b:5e:84:b6:9c:5a:0a:b2:2e:90:c3:39:10:d0:48:6c:4f:fe:
90:d7:d6:f7:24:60:23:0c:7b:1e:38:25:8c:50:d1:c8:75:f5:
29:3f:46:0a:e5:6e:c7:90:6c:c2:5a:a0:0e:c5:42:13:be:27:
ea:6a:54:04:ad:39:96:cf:3f:a5:9b:2a:90:2e:c8:2c:f0:99:
12:ea:8a:09:e8:1b:e8:01:8c:e5:1d:f1:c5:cc:73:8f:66:06:
95:41:08:da:91:84:95:64:3c:c0:fe:35:81:ee:5c:58:ba:d3:
c1:06:88:fb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5l2ydVEaVbW56W2ceICWP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzIyMTExMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWRmZDRkNTI0OGZhZmVlYTdhMzU5NGIwYjgyMjVmY2UwYzZiZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6j63yJF1OJjoTUBJrEsa+Fuh+bsS
Jerlkx87p2RKvYoxxeCl+pMTiUwGJlfm0USmmZR3gKAL2x7chP31Y4bhq1PFjWiv
r3BT74vVBCUrPAxovUCmq8gniC48ugANgFczxs86pMwM/JQJ3+EwYvEd/wdQrdnf
LVhlscj3IDG5+pIWPHCIqyPVKhxG9PpyoiEexb9WS+ORjCBEengQctXV7EQ6/LSo
GWyrGyVzCJDaCMAsPS+8uWBm+vGZilzTvtchaVPQOHBLF6p7akKbtpbenrZrPZaH
adDU1avc/BE7vruM33du+nPxA/MoHVLl7pTPz5WARQ9pvJOsnAo6LsBzNwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ7f1NUkj6/up6NZSwuCJfzgxr2cMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvbnRfVTFTU1ByLTZubzFsTEM0SWxfT0RHdlp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG2imKYf/ZkqtbqdUc0K
jOmZhO1cO2k+MzzAC+02Nz6JyUp4kr7BeaxRJHPI8l87lZRoc/SVcEIfAh1qCLYd
jTkurNamIQn5ial3SN5fiMnpLOU8YH5cEfzLjCErvShcOYWe7dWmrUw3JU/5p0xe
+UCr8jk3MRoWaA/geLBl4S9sj4AD7CDwhZp9135YyZ63kAtehLacWgqyLpDDORDQ
SGxP/pDX1vckYCMMex44JYxQ0ch19Sk/RgrlbseQbMJaoA7FQhO+J+pqVAStOZbP
P6WbKpAuyCzwmRLqignoG+gBjOUd8cXMc49mBpVBCNqRhJVkPMD+NYHuXFi608EG
iPs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:52 2024 by rpki-client on console-ams.rpki-client.org