Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vqtnZ_PxVATa7HJGCqqKVdWjniY.roa
File: vqtnZ_PxVATa7HJGCqqKVdWjniY.roa (raw, json)
Hash identifier: 31xsL/beFO6QaS/+hEYbR3mv7uPBtM7W79A8D6oKKRE=
Subject key identifier: BE:AB:67:67:F3:F1:54:04:DA:EC:72:46:0A:AA:8A:55:D5:A3:9E:26
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E943463F772F277581C2F044AACE03B00
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vqtnZ_PxVATa7HJGCqqKVdWjniY.roa
Signing time: Sun 31 Mar 2024 11:10:45 +0000
ROA not before: Sun 31 Mar 2024 11:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:94:34:63:f7:72:f2:77:58:1c:2f:04:4a:ac:e0:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 31 11:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=beab6767f3f15404daec72460aaa8a55d5a39e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:95:ca:ba:55:0b:3a:fb:3e:5f:07:51:e7:6a:
d0:5c:f6:1a:8a:64:db:25:08:30:23:66:34:8a:d4:
de:21:6a:ae:5b:48:24:cb:50:63:2f:13:e3:eb:f2:
d7:af:06:fb:42:33:f0:3f:f1:19:28:f7:d7:3f:08:
96:42:5c:9a:14:73:1c:7b:59:a7:6d:6a:79:8b:ff:
87:89:5f:ea:45:a2:72:bc:30:b2:a2:c1:08:8c:26:
30:be:fc:e3:47:90:f1:14:d8:9b:be:26:56:48:e8:
9d:7b:50:d9:58:85:1d:22:2c:a9:30:46:28:1d:de:
4f:09:62:d8:2a:b3:c6:b5:c6:65:1e:10:3b:a3:a7:
bd:df:03:77:41:23:16:d1:c6:63:d4:c9:41:f1:e7:
45:ff:ac:e7:e1:82:e4:fd:d6:7c:5c:eb:a2:35:b1:
7e:8d:87:ce:5f:b7:48:b1:a5:35:e9:5f:6a:36:2d:
b4:cf:03:11:b4:54:39:9f:f2:c9:30:c4:3f:0a:79:
0f:e4:63:b8:2f:4b:8e:08:0c:eb:eb:89:7f:62:f3:
d8:c8:af:a3:5f:7c:e6:42:03:ec:72:be:fd:08:0e:
c8:2b:71:70:38:e2:0d:46:e2:2a:fa:93:cc:2d:f2:
f8:02:79:49:de:1b:d0:35:17:22:4c:1f:f2:22:f4:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AB:67:67:F3:F1:54:04:DA:EC:72:46:0A:AA:8A:55:D5:A3:9E:26
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vqtnZ_PxVATa7HJGCqqKVdWjniY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:09:d4:73:cc:86:a4:6a:1e:95:72:a6:58:80:1a:78:17:d6:
b9:03:46:2f:7c:bc:c4:45:c5:ff:ba:ee:dc:fc:3f:a7:c5:46:
af:5c:5f:c0:ac:3c:54:0c:63:0b:d1:85:c1:7a:94:58:c9:14:
97:a4:de:80:ac:56:08:5d:6f:74:35:a8:e6:f5:f6:0c:df:4c:
38:1a:cf:f3:c1:d0:38:45:15:3d:49:80:28:54:69:ef:6a:52:
96:c5:05:72:68:e4:86:27:89:2c:9c:e4:53:6f:44:d0:f7:b3:
21:a9:fd:b0:13:3f:9a:dd:bb:fc:2d:5a:c5:f7:bf:e9:bd:61:
12:33:7f:de:ab:aa:9e:df:ab:0b:a7:92:54:61:f4:a3:41:d9:
57:58:53:0e:6d:29:de:39:f4:e5:1f:7a:ac:69:4b:cd:0a:5b:
8a:b8:cd:c5:c6:29:03:82:07:17:f5:20:5e:3a:b9:55:58:a1:
18:3f:af:cb:1e:44:3e:34:69:31:cd:c9:b3:30:bc:1d:a8:58:
b9:43:b0:e1:bf:aa:65:55:7a:5c:2d:3a:60:e6:d6:d0:60:db:
79:ad:3f:bb:75:9f:8f:15:bf:7b:84:d4:c0:ab:43:d6:c0:b2:
bf:66:4e:98:cb:b1:b9:8a:e4:f9:e4:3b:85:00:5f:d9:f0:d9:
ab:5b:55:38
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6UNGP3cvJ3WBwvBEqs4DsAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzMxMTExMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWFiNjc2N2YzZjE1NDA0ZGFlYzcyNDYwYWFhOGE1NWQ1YTM5ZTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJXKulULOvs+XwdR52rQXPYaimTb
JQgwI2Y0itTeIWquW0gky1BjLxPj6/LXrwb7QjPwP/EZKPfXPwiWQlyaFHMce1mn
bWp5i/+HiV/qRaJyvDCyosEIjCYwvvzjR5DxFNibviZWSOide1DZWIUdIiypMEYo
Hd5PCWLYKrPGtcZlHhA7o6e93wN3QSMW0cZj1MlB8edF/6zn4YLk/dZ8XOuiNbF+
jYfOX7dIsaU16V9qNi20zwMRtFQ5n/LJMMQ/CnkP5GO4L0uOCAzr64l/YvPYyK+j
X3zmQgPscr79CA7IK3FwOOINRuIq+pPMLfL4AnlJ3hvQNRciTB/yIvTT7QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL6rZ2fz8VQE2uxyRgqqilXVo54mMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvdnF0blpfUHhWQVRhN0hKR0NxcUtWZFdqbmlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG4J1HPMhqRqHpVypliA
GngX1rkDRi98vMRFxf+67tz8P6fFRq9cX8CsPFQMYwvRhcF6lFjJFJek3oCsVghd
b3Q1qOb19gzfTDgaz/PB0DhFFT1JgChUae9qUpbFBXJo5IYniSyc5FNvRND3syGp
/bATP5rdu/wtWsX3v+m9YRIzf96rqp7fqwunklRh9KNB2VdYUw5tKd459OUfeqxp
S80KW4q4zcXGKQOCBxf1IF46uVVYoRg/r8seRD40aTHNybMwvB2oWLlDsOG/qmVV
elwtOmDm1tBg23mtP7t1n48Vv3uE1MCrQ9bAsr9mTpjLsbmK5PnkO4UAX9nw2atb
VTg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:52 2024 by rpki-client on console-ams.rpki-client.org