Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/x_1XaZyct4nZLc_rLczTzZlpZxY.roa
File: x_1XaZyct4nZLc_rLczTzZlpZxY.roa (raw, json)
Hash identifier: 42tw5mT4vQGWgy8n5fU0iFOmVu77ZPaLcd7FCrgZDGw=
Subject key identifier: C7:FD:57:69:9C:9C:B7:89:D9:2D:CF:EB:2D:CC:D3:CD:99:69:67:16
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB38976426C0C25D4CBFD368B3741D87A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/x_1XaZyct4nZLc_rLczTzZlpZxY.roa
Signing time: Sat 06 Apr 2024 13:11:54 +0000
ROA not before: Sat 06 Apr 2024 13:11:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b3:89:76:42:6c:0c:25:d4:cb:fd:36:8b:37:41:d8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 6 13:11:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7fd57699c9cb789d92dcfeb2dccd3cd99696716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:63:9f:10:c7:ee:79:48:e5:3c:d7:22:71:
35:37:d4:d8:db:49:b2:f7:5b:17:e8:b6:99:f8:4c:
c7:b3:7d:54:5c:ae:78:0b:b2:41:97:0a:48:cc:7a:
29:32:34:f4:a2:1b:d6:c8:71:fe:17:47:04:63:9a:
5e:20:43:94:bf:7f:8e:a9:b2:e0:dd:db:eb:6d:e4:
61:81:4e:1b:3e:d3:bf:1b:c5:fc:f0:18:ce:1b:d2:
f0:18:e5:47:6a:4e:69:97:70:3d:4e:70:73:38:37:
e7:b7:5b:77:cb:a5:c2:70:bf:77:ca:6a:d4:35:54:
74:86:54:e9:ea:9c:b5:1d:5b:92:de:1f:97:d0:40:
22:6d:cd:7f:02:94:cc:ea:fc:65:9a:1a:68:08:b0:
ab:b7:94:f4:c2:b5:32:36:17:97:73:60:f4:34:0f:
4a:d7:15:25:a3:89:70:76:f9:ef:91:dd:ef:8a:23:
7a:a5:f6:db:89:c6:a1:12:8b:c5:43:65:92:81:17:
52:4d:f8:e2:9c:71:c1:9a:f4:04:01:bf:25:b3:ea:
58:b4:76:21:a7:d5:59:ba:46:8a:81:70:f0:23:06:
25:fd:9c:1e:92:c6:64:59:84:5a:6d:78:19:32:28:
63:3b:a2:1d:78:e0:4c:84:1b:1a:99:17:a8:75:30:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FD:57:69:9C:9C:B7:89:D9:2D:CF:EB:2D:CC:D3:CD:99:69:67:16
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/x_1XaZyct4nZLc_rLczTzZlpZxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:f1:24:ad:9f:df:5d:1a:6c:c9:d4:2d:27:e4:f5:1f:eb:9f:
76:f9:96:7e:bc:ff:e0:f2:e2:fb:5b:5e:9c:36:6b:df:c0:56:
d2:5c:7f:1a:9a:31:53:bb:da:9d:62:d8:c1:43:66:10:b4:ff:
97:72:dd:8f:7a:dd:89:fb:4e:f6:d0:9a:51:a8:7f:12:44:44:
e0:48:51:57:43:7d:54:21:54:ee:32:f7:8a:a0:de:b1:e9:65:
e4:9e:9d:08:fc:32:7d:f4:30:e8:15:25:5b:bc:68:9b:00:52:
9e:4d:e0:98:ae:c1:ea:42:4d:ca:2d:6b:76:9b:6d:ba:61:3b:
ed:17:9e:fb:04:4c:35:c2:22:d2:f3:6c:83:7a:d8:d3:b8:e4:
15:81:d4:7c:c0:ea:9a:c0:73:eb:83:f1:0b:27:52:7f:37:cc:
1b:a4:c6:d5:23:bc:74:b6:bc:e8:9b:0d:76:2d:e5:af:76:08:
cb:ed:66:e8:20:b7:0e:71:52:c8:ab:e9:84:ef:65:af:e4:88:
5e:e2:4b:e6:76:2d:f4:51:6d:e7:ee:7d:ee:20:7a:c6:92:19:
3d:21:b8:af:3a:86:20:87:b1:26:93:70:91:92:47:f2:5a:b0:
da:b2:16:31:22:df:82:30:e1:a7:23:87:d7:aa:50:49:29:ae:
e4:9c:e9:88
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6ziXZCbAwl1Mv9Nos3Qdh6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDA2MTMxMTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2ZkNTc2OTljOWNiNzg5ZDkyZGNmZWIyZGNjZDNjZDk5Njk2NzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfVjnxDH7nlI5TzXInE1N9TY20my
91sX6LaZ+EzHs31UXK54C7JBlwpIzHopMjT0ohvWyHH+F0cEY5peIEOUv3+OqbLg
3dvrbeRhgU4bPtO/G8X88BjOG9LwGOVHak5pl3A9TnBzODfnt1t3y6XCcL93ymrU
NVR0hlTp6py1HVuS3h+X0EAibc1/ApTM6vxlmhpoCLCrt5T0wrUyNheXc2D0NA9K
1xUlo4lwdvnvkd3viiN6pfbbicahEovFQ2WSgRdSTfjinHHBmvQEAb8ls+pYtHYh
p9VZukaKgXDwIwYl/ZweksZkWYRabXgZMihjO6IdeOBMhBsamReodTCFAwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMf9V2mcnLeJ2S3P6y3M082ZaWcWMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEveF8xWGFaeWN0NG5aTGNfckxjelR6WmxwWnhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAnxJK2f310abMnULSfk
9R/rn3b5ln68/+Dy4vtbXpw2a9/AVtJcfxqaMVO72p1i2MFDZhC0/5dy3Y963Yn7
TvbQmlGofxJEROBIUVdDfVQhVO4y94qg3rHpZeSenQj8Mn30MOgVJVu8aJsAUp5N
4JiuwepCTcota3abbbphO+0XnvsETDXCItLzbIN62NO45BWB1HzA6prAc+uD8Qsn
Un83zBukxtUjvHS2vOibDXYt5a92CMvtZuggtw5xUsir6YTvZa/kiF7iS+Z2LfRR
befufe4gesaSGT0huK86hiCHsSaTcJGSR/JasNqyFjEi34Iw4acjh9eqUEkpruSc
6Yg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:52 2024 by rpki-client on console-ams.rpki-client.org