Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w5xeiephiZTxTYQlx8yqhvEy3H8.roa
File: w5xeiephiZTxTYQlx8yqhvEy3H8.roa (raw, json)
Hash identifier: NrwyK4o7DCWSh74l2gamXxmf5BoVYPMagppTPLP9W5Q=
Subject key identifier: C3:9C:5E:89:EA:61:89:94:F1:4D:84:25:C7:CC:AA:86:F1:32:DC:7F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EE476FC7DAD54333E1BE92027BBD2F450
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w5xeiephiZTxTYQlx8yqhvEy3H8.roa
Signing time: Tue 16 Apr 2024 01:13:06 +0000
ROA not before: Tue 16 Apr 2024 01:13:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e4:76:fc:7d:ad:54:33:3e:1b:e9:20:27:bb:d2:f4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 16 01:13:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c39c5e89ea618994f14d8425c7ccaa86f132dc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0c:27:e3:23:c1:c2:5b:22:bc:be:05:08:34:
8f:2e:43:80:82:7d:d3:41:67:cc:17:d0:f1:63:5c:
d0:f0:99:3d:1e:40:6a:71:47:b6:0e:bc:38:5f:9e:
9d:fd:1a:19:03:da:b2:97:12:90:06:bd:68:91:28:
10:c8:c0:0e:a4:e5:dc:99:09:38:a4:f0:b9:f8:e3:
5f:e3:da:0a:42:0a:32:36:a0:b4:a5:17:72:df:48:
5e:b5:f8:36:ac:6c:20:b2:f8:bb:a3:08:71:ea:c2:
9d:3e:67:ab:26:b0:cf:ce:34:0e:bf:c7:9a:93:c9:
50:f7:65:32:3d:62:13:01:e7:84:02:8e:5b:28:fb:
53:b4:ad:7d:4b:8a:92:50:1b:47:63:3d:f0:4b:1e:
c1:27:28:9b:ad:c0:67:53:f5:73:61:99:a0:a6:de:
45:25:d6:d2:9d:51:77:7b:4c:76:31:ef:58:c4:4c:
d5:59:f1:76:8d:4c:7b:08:a1:70:78:3e:0d:4d:1d:
cc:51:39:b9:be:a3:7d:1a:73:8a:b5:21:59:0f:e1:
ab:32:3f:0a:ef:37:b2:62:a4:9d:0c:41:f5:37:11:
3a:d3:4c:2e:37:18:a1:e9:51:3f:56:33:d7:c4:25:
9a:5a:6d:80:b6:89:24:cc:de:57:f3:28:cf:e7:2b:
b2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9C:5E:89:EA:61:89:94:F1:4D:84:25:C7:CC:AA:86:F1:32:DC:7F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w5xeiephiZTxTYQlx8yqhvEy3H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:13:7f:85:e9:32:f1:db:5f:50:76:99:84:fa:67:e2:af:74:
ec:f1:e0:b8:17:10:52:7b:fe:9a:b4:b9:d1:62:37:6a:30:39:
c4:0e:4f:ba:00:af:c7:e4:19:0e:df:80:14:ce:d8:c7:8c:c3:
25:50:29:8b:5b:5c:06:15:55:30:ac:1e:08:ed:3c:8d:6c:e6:
e6:f6:da:45:4f:9d:e1:87:14:54:17:21:fd:b0:67:20:65:a3:
9f:e2:a3:8a:d1:a2:51:15:0f:e8:45:52:e4:6f:d6:fe:45:ca:
d3:23:77:bb:e0:e8:3a:ba:1b:79:c2:36:3f:f2:09:01:ae:b8:
e2:e5:ac:75:6a:55:c0:2d:72:b3:d9:57:15:d8:07:53:3c:75:
c4:aa:69:33:1d:33:09:19:c8:b6:8d:52:e1:3f:d0:e2:bf:b6:
49:73:69:09:7f:a4:f8:4e:84:b1:ee:45:7f:b7:61:b7:c1:ed:
c7:25:b8:bd:6b:a6:6d:0f:b4:4f:15:3c:29:2d:f4:8a:91:f4:
a8:25:cd:98:06:6f:23:79:98:99:53:d5:e6:6c:41:da:71:06:
63:33:4c:d1:3a:ae:b0:32:53:a5:05:0e:65:8f:bc:2d:ee:52:
44:a2:18:a8:c6:96:54:2c:78:c0:94:93:71:b0:2c:7d:ea:61:
1f:ab:82:a8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY7kdvx9rVQzPhvpICe70vRQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDE2MDExMzA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzljNWU4OWVhNjE4OTk0ZjE0ZDg0MjVjN2NjYWE4NmYxMzJkYzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAwn4yPBwlsivL4FCDSPLkOAgn3T
QWfMF9DxY1zQ8Jk9HkBqcUe2Drw4X56d/RoZA9qylxKQBr1okSgQyMAOpOXcmQk4
pPC5+ONf49oKQgoyNqC0pRdy30hetfg2rGwgsvi7owhx6sKdPmerJrDPzjQOv8ea
k8lQ92UyPWITAeeEAo5bKPtTtK19S4qSUBtHYz3wSx7BJyibrcBnU/VzYZmgpt5F
JdbSnVF3e0x2Me9YxEzVWfF2jUx7CKFweD4NTR3MUTm5vqN9GnOKtSFZD+GrMj8K
7zeyYqSdDEH1NxE600wuNxih6VE/VjPXxCWaWm2AtokkzN5X8yjP5yuytQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMOcXonqYYmU8U2EJcfMqobxMtx/MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvdzV4ZWllcGhpWlR4VFlRbHg4eXFodkV5M0g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKETf4XpMvHbX1B2mYT6
Z+KvdOzx4LgXEFJ7/pq0udFiN2owOcQOT7oAr8fkGQ7fgBTO2MeMwyVQKYtbXAYV
VTCsHgjtPI1s5ub22kVPneGHFFQXIf2wZyBlo5/io4rRolEVD+hFUuRv1v5FytMj
d7vg6Dq6G3nCNj/yCQGuuOLlrHVqVcAtcrPZVxXYB1M8dcSqaTMdMwkZyLaNUuE/
0OK/tklzaQl/pPhOhLHuRX+3YbfB7ccluL1rpm0PtE8VPCkt9IqR9KglzZgGbyN5
mJlT1eZsQdpxBmMzTNE6rrAyU6UFDmWPvC3uUkSiGKjGllQseMCUk3GwLH3qYR+r
gqg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:52 2024 by rpki-client on console-ams.rpki-client.org