Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wEwdUGBpPKLEXpRaebgKPZHdm_E.roa
File: wEwdUGBpPKLEXpRaebgKPZHdm_E.roa (raw, json)
Hash identifier: JeBo1VQVeKR791rwmYYsM26XTNeHczSqYgejXyZG68U=
Subject key identifier: C0:4C:1D:50:60:69:3C:A2:C4:5E:94:5A:79:B8:0A:3D:91:DD:9B:F1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E77E25408561991C5E5E1B60A70324B23
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wEwdUGBpPKLEXpRaebgKPZHdm_E.roa
Signing time: Mon 25 Mar 2024 23:11:45 +0000
ROA not before: Mon 25 Mar 2024 23:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:77:e2:54:08:56:19:91:c5:e5:e1:b6:0a:70:32:4b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 25 23:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c04c1d5060693ca2c45e945a79b80a3d91dd9bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:48:b7:1f:c1:e2:2a:f2:54:27:cd:38:05:
6a:a3:f1:38:36:7e:b2:ca:8c:c2:3d:d0:be:a9:4d:
a6:f5:00:88:e6:ef:92:27:aa:a5:da:4b:54:6b:37:
4c:09:00:c7:f2:cd:5a:95:68:88:5e:1c:a2:1b:be:
d3:df:a6:8a:bb:73:36:2b:d3:37:31:e9:47:6d:6f:
24:e2:40:f9:e8:fd:70:c8:87:0d:c2:da:36:85:36:
fa:38:b9:b6:18:b3:36:15:54:ef:42:51:c8:32:55:
ed:53:4b:3e:60:54:65:73:d9:a7:c6:f5:18:51:00:
c0:4c:94:48:e9:f0:b9:f9:65:f7:ef:dd:16:45:a6:
49:e6:80:7b:3b:99:4b:cb:52:55:e0:ef:a9:14:e7:
08:eb:bc:09:06:1a:f3:6c:10:08:c2:6e:01:fe:28:
05:b4:f4:b5:91:9e:72:76:53:92:30:56:36:88:71:
57:59:b5:95:18:13:1c:7e:1d:ed:56:9b:31:2b:3f:
ff:58:c3:d3:60:92:d0:69:4f:78:38:91:04:1d:5c:
d3:4e:6c:90:c2:d9:64:bf:f8:21:cf:aa:54:c0:69:
52:c7:72:74:31:60:e7:65:2f:f4:85:9b:85:07:fc:
3b:24:56:41:c5:e2:fa:c7:50:fe:de:41:82:34:8b:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4C:1D:50:60:69:3C:A2:C4:5E:94:5A:79:B8:0A:3D:91:DD:9B:F1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wEwdUGBpPKLEXpRaebgKPZHdm_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:39:87:6f:5e:f1:47:c2:10:42:dc:67:e9:58:14:72:c7:40:
54:a1:b3:b6:eb:6c:01:32:39:6e:0e:75:25:5c:eb:e7:13:d3:
76:55:30:4f:9d:e4:4b:bd:d1:b8:8b:ac:f9:1b:d7:bb:5e:eb:
0b:31:09:09:99:66:e6:68:48:a2:4f:17:f2:4e:09:cd:fa:ae:
cc:8b:ec:a8:a3:29:b6:34:bf:71:e3:14:d7:e2:9e:68:d5:f8:
62:82:30:1b:8c:b9:93:0b:3b:0f:e9:04:de:59:49:ff:bb:4b:
a0:9b:de:34:5b:f1:c0:71:e5:77:c9:ee:8e:70:9a:b3:e0:4a:
f9:79:1f:71:eb:93:7f:f6:30:64:58:35:2c:29:56:01:7a:f0:
7e:0b:71:20:72:f5:86:f8:d7:c1:2d:25:47:7b:15:e8:6d:1c:
83:9a:7c:d6:3c:d3:3b:50:a4:63:fa:d1:58:bb:68:cb:5d:08:
a2:a0:f9:8f:d7:fd:fe:d1:c0:e7:14:74:bf:85:5b:4d:89:be:
f1:00:58:f0:08:5d:cf:8e:29:df:df:b7:e6:5b:bc:3a:88:fa:
18:a3:1d:3b:30:80:2a:30:87:93:ea:6c:87:12:ec:81:c8:24:
aa:22:92:66:85:25:2a:4f:a7:47:61:df:31:ab:8d:0f:6b:4e:
47:73:de:f2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY534lQIVhmRxeXhtgpwMksjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzI1MjMxMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDRjMWQ1MDYwNjkzY2EyYzQ1ZTk0NWE3OWI4MGEzZDkxZGQ5YmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMFItx/B4iryVCfNOAVqo/E4Nn6y
yozCPdC+qU2m9QCI5u+SJ6ql2ktUazdMCQDH8s1alWiIXhyiG77T36aKu3M2K9M3
MelHbW8k4kD56P1wyIcNwto2hTb6OLm2GLM2FVTvQlHIMlXtU0s+YFRlc9mnxvUY
UQDATJRI6fC5+WX3790WRaZJ5oB7O5lLy1JV4O+pFOcI67wJBhrzbBAIwm4B/igF
tPS1kZ5ydlOSMFY2iHFXWbWVGBMcfh3tVpsxKz//WMPTYJLQaU94OJEEHVzTTmyQ
wtlkv/ghz6pUwGlSx3J0MWDnZS/0hZuFB/w7JFZBxeL6x1D+3kGCNIuGXwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMBMHVBgaTyixF6UWnm4Cj2R3ZvxMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvd0V3ZFVHQnBQS0xFWHBSYWViZ0tQWkhkbV9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACM5h29e8UfCEELcZ+lY
FHLHQFShs7brbAEyOW4OdSVc6+cT03ZVME+d5Eu90biLrPkb17te6wsxCQmZZuZo
SKJPF/JOCc36rsyL7KijKbY0v3HjFNfinmjV+GKCMBuMuZMLOw/pBN5ZSf+7S6Cb
3jRb8cBx5XfJ7o5wmrPgSvl5H3Hrk3/2MGRYNSwpVgF68H4LcSBy9Yb418EtJUd7
FehtHIOafNY80ztQpGP60Vi7aMtdCKKg+Y/X/f7RwOcUdL+FW02JvvEAWPAIXc+O
Kd/ft+ZbvDqI+hijHTswgCowh5PqbIcS7IHIJKoikmaFJSpPp0dh3zGrjQ9rTkdz
3vI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org