Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uF4UPsUcK4-2z_4gHo8OuUNOLas.roa
File: uF4UPsUcK4-2z_4gHo8OuUNOLas.roa (raw, json)
Hash identifier: B+ay/XHqjmRyJsc5GmGeD90sbIkoMA6wZiw5h5TiYgE=
Subject key identifier: B8:5E:14:3E:C5:1C:2B:8F:B6:CF:FE:20:1E:8F:0E:B9:43:4E:2D:AB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E3E95BF3FACAFD07EED098BCAB24DF7D6
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uF4UPsUcK4-2z_4gHo8OuUNOLas.roa
Signing time: Thu 14 Mar 2024 20:09:44 +0000
ROA not before: Thu 14 Mar 2024 20:09:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3e:95:bf:3f:ac:af:d0:7e:ed:09:8b:ca:b2:4d:f7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 14 20:09:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b85e143ec51c2b8fb6cffe201e8f0eb9434e2dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:32:9e:10:b7:63:1e:ac:13:0a:0b:3d:5a:85:
b2:30:db:36:43:30:e9:b8:64:08:c8:74:5e:75:e2:
7f:71:0b:16:53:82:e7:bc:e5:28:fd:c1:47:b8:9a:
33:b3:cd:2e:fa:2a:06:47:b8:b9:67:a7:71:7c:cc:
14:f9:26:54:90:cd:87:5d:ed:43:6d:37:21:da:8e:
a2:66:a6:54:ab:64:2d:24:f1:2c:73:f3:ab:0b:b2:
92:1f:a3:70:2e:ef:f7:76:f0:5f:74:d7:65:91:28:
73:34:28:73:67:92:f4:42:1e:59:cf:94:7b:ac:fb:
c7:5e:f0:9a:91:eb:5c:96:c8:95:13:7d:79:ec:e4:
d7:38:ed:1b:be:0e:6b:56:a7:58:c7:6a:f3:2c:3d:
38:90:1c:74:b2:4d:50:f7:88:c7:08:22:4d:7d:26:
38:57:5d:3d:6f:85:dc:b0:cc:3a:d4:8c:ad:bf:15:
9f:eb:0b:bb:9b:9d:fb:8c:df:53:d2:6c:48:d9:d1:
cd:7c:56:75:19:4a:0a:3f:b4:3b:51:a4:c6:d5:64:
3f:c8:f9:f4:e0:2b:1a:a0:48:99:ed:7f:7e:b2:bf:
49:31:42:f8:51:63:c0:a5:4b:eb:d9:08:d0:bb:39:
68:b4:82:a3:17:8b:15:9d:cd:77:78:65:a5:90:ef:
4c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5E:14:3E:C5:1C:2B:8F:B6:CF:FE:20:1E:8F:0E:B9:43:4E:2D:AB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uF4UPsUcK4-2z_4gHo8OuUNOLas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:cc:53:51:30:a6:bf:80:da:bc:59:a0:88:98:68:97:af:fa:
82:8c:ee:d0:fa:b4:69:49:87:52:46:59:e4:fd:72:b7:36:de:
fd:90:6b:71:ea:e0:95:16:30:73:d0:40:e6:b3:77:b5:f3:77:
0d:e7:93:8b:e0:2c:be:8f:04:0a:3f:da:84:06:18:38:68:e2:
a2:a3:fa:5d:19:e8:9c:47:78:1a:be:85:09:1c:95:a7:7f:5b:
25:40:ab:4c:e3:23:f5:21:bb:4f:43:a7:c4:0f:d9:04:8b:f6:
53:23:fb:09:f6:07:ee:40:4d:7e:a5:f7:1a:d3:d6:96:10:87:
7f:14:0c:68:3a:71:35:c8:d8:b3:8c:8e:e1:0a:91:99:4f:58:
cc:9e:e5:64:1f:d8:15:29:e2:be:85:d4:6f:ff:ff:dd:ea:72:
dc:a0:40:1e:d4:c9:f3:72:5f:0d:30:d9:d8:f6:4b:ec:5a:94:
4d:8b:40:07:b4:83:c2:98:95:47:2a:45:b1:03:8f:2a:cd:28:
e6:1f:ad:ff:0b:89:25:3e:70:21:33:ba:27:cc:e7:e2:a8:dc:
d5:3c:00:1f:c6:76:4e:3f:97:cf:06:b1:33:6b:a1:af:ac:30:
f4:fd:1b:0d:71:de:db:be:a3:f0:70:3a:8b:32:4c:59:70:0a:
71:f6:bf:68
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY4+lb8/rK/Qfu0Ji8qyTffWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzE0MjAwOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODVlMTQzZWM1MWMyYjhmYjZjZmZlMjAxZThmMGViOTQzNGUyZGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjKeELdjHqwTCgs9WoWyMNs2QzDp
uGQIyHRedeJ/cQsWU4LnvOUo/cFHuJozs80u+ioGR7i5Z6dxfMwU+SZUkM2HXe1D
bTch2o6iZqZUq2QtJPEsc/OrC7KSH6NwLu/3dvBfdNdlkShzNChzZ5L0Qh5Zz5R7
rPvHXvCaketclsiVE3157OTXOO0bvg5rVqdYx2rzLD04kBx0sk1Q94jHCCJNfSY4
V109b4XcsMw61IytvxWf6wu7m537jN9T0mxI2dHNfFZ1GUoKP7Q7UaTG1WQ/yPn0
4CsaoEiZ7X9+sr9JMUL4UWPApUvr2QjQuzlotIKjF4sVnc13eGWlkO9MyQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLheFD7FHCuPts/+IB6PDrlDTi2rMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvdUY0VVBzVWNLNC0yel80Z0hvOE91VU5PTGFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEzMU1Ewpr+A2rxZoIiY
aJev+oKM7tD6tGlJh1JGWeT9crc23v2Qa3Hq4JUWMHPQQOazd7Xzdw3nk4vgLL6P
BAo/2oQGGDho4qKj+l0Z6JxHeBq+hQkclad/WyVAq0zjI/Uhu09Dp8QP2QSL9lMj
+wn2B+5ATX6l9xrT1pYQh38UDGg6cTXI2LOMjuEKkZlPWMye5WQf2BUp4r6F1G//
/93qctygQB7UyfNyXw0w2dj2S+xalE2LQAe0g8KYlUcqRbEDjyrNKOYfrf8LiSU+
cCEzuifM5+Ko3NU8AB/Gdk4/l88GsTNroa+sMPT9Gw1x3tu+o/BwOosyTFlwCnH2
v2g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:52 2024 by rpki-client on console-ams.rpki-client.org