Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pG5UAwgHjUab3c8rxD8cwCkY254.roa
File: pG5UAwgHjUab3c8rxD8cwCkY254.roa (raw, json)
Hash identifier: jfzPGTpOufUxLCTeTe766IxHxFzKN9gX0zzFExVxSoA=
Subject key identifier: A4:6E:54:03:08:07:8D:46:9B:DD:CF:2B:C4:3F:1C:C0:29:18:DB:9E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EBB7AD8CC3853F445FB132035EDE791C5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pG5UAwgHjUab3c8rxD8cwCkY254.roa
Signing time: Mon 08 Apr 2024 02:12:54 +0000
ROA not before: Mon 08 Apr 2024 02:12:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bb:7a:d8:cc:38:53:f4:45:fb:13:20:35:ed:e7:91:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 8 02:12:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a46e540308078d469bddcf2bc43f1cc02918db9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f7:43:bb:b5:6f:7a:7d:df:ff:88:44:50:10:
50:e2:16:ff:b3:ea:6e:e4:cd:93:84:81:67:b2:fd:
63:cf:71:d1:02:e4:bd:06:6c:0d:c0:cf:ee:45:24:
88:2a:4e:cb:4b:e3:93:48:d4:1c:a2:67:d2:d6:bf:
7c:d5:34:fd:f1:b0:0d:13:22:7c:6c:56:e8:40:21:
fe:1e:01:a8:88:85:fe:08:ff:3c:b0:1b:a2:2c:25:
e0:41:bc:44:6d:13:a9:dc:18:20:97:35:6f:af:1a:
72:e3:72:d4:6f:8f:4e:4e:ae:68:16:e8:05:15:13:
6b:ae:03:55:10:53:96:2c:8d:05:06:7b:a8:41:8a:
80:b9:f7:8d:1b:65:89:37:30:1c:d9:9b:21:33:29:
09:76:cd:7d:f0:86:fc:6d:cd:f1:a5:33:40:3c:aa:
e0:88:0d:c5:5c:b4:1c:b5:c7:26:23:10:fa:59:7a:
c5:9b:aa:35:ec:17:54:93:cb:11:6b:f9:1c:d4:3b:
48:0d:a4:8a:09:55:3b:6e:25:cb:19:2a:d0:3e:d4:
11:64:f8:0c:b8:9c:db:4c:7a:e9:b8:87:d2:e3:d3:
56:23:89:a6:49:24:d2:b2:bd:2a:6f:d7:51:cf:9b:
a7:cf:b9:f9:35:79:76:6e:e7:c1:4f:47:87:1a:9a:
c0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6E:54:03:08:07:8D:46:9B:DD:CF:2B:C4:3F:1C:C0:29:18:DB:9E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/pG5UAwgHjUab3c8rxD8cwCkY254.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:13:5d:22:36:69:99:9d:f2:52:9f:37:4a:a3:7e:a1:d7:1c:
9a:99:bf:b1:d2:46:0f:71:aa:a9:19:ba:ea:97:cc:bf:b1:52:
54:90:f9:e9:df:8a:f9:f2:61:e1:fb:42:08:fc:2f:5e:76:af:
93:66:9d:72:2a:4f:03:6e:b6:0b:7c:66:10:6b:ab:fa:93:b0:
f7:84:e4:85:e1:f4:a2:b4:ae:57:34:ba:f1:91:46:73:b0:ee:
b3:fc:8b:df:3d:ea:4b:6f:be:90:11:0a:4d:7b:f6:ed:7a:3b:
dc:50:25:6c:d4:3f:7f:9e:04:b6:6e:92:13:7d:9e:bd:32:1d:
0d:db:14:af:90:0d:92:e5:f2:cf:1a:55:2e:61:00:74:bb:65:
f0:86:52:95:79:a2:00:a5:7a:db:4f:37:5e:fe:cb:c9:37:a2:
fe:a8:b6:04:29:16:7a:ee:cb:cf:cc:fd:cc:b7:38:6e:18:9b:
e4:c3:69:43:ae:60:c7:a4:c6:b2:9b:17:83:86:3b:ec:6b:33:
a0:fe:2e:3c:36:65:14:07:5b:34:32:7e:8d:48:0a:43:d9:7d:
55:c5:31:80:93:5f:d6:25:86:5b:ea:bf:07:68:08:c4:09:b4:
8a:c5:e1:72:d5:6b:bd:48:08:47:d0:a2:4e:db:56:c3:58:37:
ed:67:f0:8f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY67etjMOFP0RfsTIDXt55HFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDA4MDIxMjU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDZlNTQwMzA4MDc4ZDQ2OWJkZGNmMmJjNDNmMWNjMDI5MThkYjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/dDu7Vven3f/4hEUBBQ4hb/s+pu
5M2ThIFnsv1jz3HRAuS9BmwNwM/uRSSIKk7LS+OTSNQcomfS1r981TT98bANEyJ8
bFboQCH+HgGoiIX+CP88sBuiLCXgQbxEbROp3BgglzVvrxpy43LUb49OTq5oFugF
FRNrrgNVEFOWLI0FBnuoQYqAufeNG2WJNzAc2ZshMykJds198Ib8bc3xpTNAPKrg
iA3FXLQctccmIxD6WXrFm6o17BdUk8sRa/kc1DtIDaSKCVU7biXLGSrQPtQRZPgM
uJzbTHrpuIfS49NWI4mmSSTSsr0qb9dRz5unz7n5NXl2bufBT0eHGprA0QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKRuVAMIB41Gm93PK8Q/HMApGNueMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvcEc1VUF3Z0hqVWFiM2M4cnhEOGN3Q2tZMjU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAYTXSI2aZmd8lKfN0qj
fqHXHJqZv7HSRg9xqqkZuuqXzL+xUlSQ+enfivnyYeH7Qgj8L152r5NmnXIqTwNu
tgt8ZhBrq/qTsPeE5IXh9KK0rlc0uvGRRnOw7rP8i9896ktvvpARCk179u16O9xQ
JWzUP3+eBLZukhN9nr0yHQ3bFK+QDZLl8s8aVS5hAHS7ZfCGUpV5ogClettPN17+
y8k3ov6otgQpFnruy8/M/cy3OG4Ym+TDaUOuYMekxrKbF4OGO+xrM6D+Ljw2ZRQH
WzQyfo1ICkPZfVXFMYCTX9YlhlvqvwdoCMQJtIrF4XLVa71ICEfQok7bVsNYN+1n
8I8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org