Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xk-qb0Et1MVK-wQ0kzlfP0Amk3M.roa
File: xk-qb0Et1MVK-wQ0kzlfP0Amk3M.roa (raw, json)
Hash identifier: N4v4MHTrOIVuEhn2MSVBedZBio1AiWt0UH+jr1r2ER8=
Subject key identifier: C6:4F:AA:6F:41:2D:D4:C5:4A:FB:04:34:93:39:5F:3F:40:26:93:73
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E98B5F46B933ABB535EC78DE5478D29FB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xk-qb0Et1MVK-wQ0kzlfP0Amk3M.roa
Signing time: Mon 01 Apr 2024 08:10:45 +0000
ROA not before: Mon 01 Apr 2024 08:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:98:b5:f4:6b:93:3a:bb:53:5e:c7:8d:e5:47:8d:29:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 1 08:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c64faa6f412dd4c54afb043493395f3f40269373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:9e:31:dc:a7:2b:b4:78:d3:5a:76:17:23:
56:bd:91:28:2b:76:4c:76:30:d9:a4:69:cc:7c:2f:
53:24:87:9a:40:e1:00:ad:c1:d4:42:be:c2:a6:39:
11:1b:dc:65:a5:73:39:c7:0e:94:71:ad:fa:b0:0a:
c9:36:37:7d:c3:a6:53:9c:d2:20:c3:f8:eb:70:13:
7f:0a:64:a7:33:b4:f2:4a:13:63:78:50:da:72:85:
c0:80:7a:ed:97:dc:3c:f2:be:15:0d:a4:03:f7:8d:
16:e7:fe:93:6b:37:e6:b1:5a:74:cc:1c:12:bc:28:
07:c7:18:8a:4e:62:e5:c6:6b:6c:9b:e9:db:83:4c:
45:e8:0a:ae:0d:1f:3c:1f:28:e7:29:82:67:59:07:
b3:f4:ac:02:88:ec:70:72:3e:64:82:9f:59:24:c5:
5e:ff:5b:89:2b:b5:7f:1a:59:00:85:7a:11:95:da:
31:05:c9:0a:f2:2c:6f:b3:91:47:05:e2:0f:32:6a:
8c:75:bd:57:6e:28:5e:0b:bd:da:53:f7:1a:13:42:
cf:fb:09:2c:68:e1:af:30:1e:a1:4d:b3:60:c3:eb:
0d:9b:8d:99:03:2b:9f:84:62:8f:8d:c4:78:13:57:
b7:68:14:6c:cd:15:15:df:a0:43:52:66:c9:90:d8:
4b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4F:AA:6F:41:2D:D4:C5:4A:FB:04:34:93:39:5F:3F:40:26:93:73
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xk-qb0Et1MVK-wQ0kzlfP0Amk3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:1c:55:e8:e0:3a:7f:6c:46:93:f5:cd:de:3e:89:13:75:1b:
94:ea:b7:b1:0a:2b:10:60:19:86:ce:83:af:e9:90:f7:4c:f8:
7b:d4:97:25:f9:9d:b9:7f:7b:1d:ad:b6:3f:64:30:d7:ad:1c:
cf:f9:02:42:a9:6d:b2:fb:f0:55:f7:17:96:7a:4a:31:57:32:
2b:ac:02:fb:1f:bf:a8:70:9c:7e:c9:eb:20:59:11:9b:80:89:
a2:2e:fb:ac:13:a3:3b:ec:4f:c2:67:2f:95:57:c0:0a:48:23:
b5:e5:29:c2:d3:c3:98:65:5d:69:15:fc:2a:da:54:15:7e:ba:
d2:7c:df:75:62:36:48:23:2f:50:98:c4:80:bf:b4:4a:ca:de:
5b:12:62:34:67:68:12:aa:62:fa:77:41:76:01:1a:0b:53:1a:
d7:39:a1:d6:4d:e9:6f:00:47:95:22:ba:17:dd:0d:73:27:6b:
40:ca:ef:3c:98:51:e2:84:c1:ad:9f:21:b6:58:18:ea:cd:82:
d4:4d:0b:0a:71:01:e9:d0:56:b8:f2:74:07:ef:c4:d4:74:09:
b0:a3:f9:b0:80:74:0b:09:0e:64:ae:1b:57:6d:76:e8:66:d2:
24:b9:3a:1c:77:c9:dc:7a:92:ca:f0:6f:43:9a:48:63:98:d2:
ea:f0:0c:9f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6YtfRrkzq7U17HjeVHjSn7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDAxMDgxMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjRmYWE2ZjQxMmRkNGM1NGFmYjA0MzQ5MzM5NWYzZjQwMjY5MzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvueMdynK7R401p2FyNWvZEoK3ZM
djDZpGnMfC9TJIeaQOEArcHUQr7CpjkRG9xlpXM5xw6Uca36sArJNjd9w6ZTnNIg
w/jrcBN/CmSnM7TyShNjeFDacoXAgHrtl9w88r4VDaQD940W5/6TazfmsVp0zBwS
vCgHxxiKTmLlxmtsm+nbg0xF6AquDR88HyjnKYJnWQez9KwCiOxwcj5kgp9ZJMVe
/1uJK7V/GlkAhXoRldoxBckK8ixvs5FHBeIPMmqMdb1XbiheC73aU/caE0LP+wks
aOGvMB6hTbNgw+sNm42ZAyufhGKPjcR4E1e3aBRszRUV36BDUmbJkNhLvwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMZPqm9BLdTFSvsENJM5Xz9AJpNzMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEveGstcWIwRXQxTVZLLXdRMGt6bGZQMEFtazNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEUcVejgOn9sRpP1zd4+
iRN1G5Tqt7EKKxBgGYbOg6/pkPdM+HvUlyX5nbl/ex2ttj9kMNetHM/5AkKpbbL7
8FX3F5Z6SjFXMiusAvsfv6hwnH7J6yBZEZuAiaIu+6wTozvsT8JnL5VXwApII7Xl
KcLTw5hlXWkV/CraVBV+utJ833ViNkgjL1CYxIC/tErK3lsSYjRnaBKqYvp3QXYB
GgtTGtc5odZN6W8AR5UiuhfdDXMna0DK7zyYUeKEwa2fIbZYGOrNgtRNCwpxAenQ
VrjydAfvxNR0CbCj+bCAdAsJDmSuG1dtduhm0iS5Ohx3ydx6ksrwb0OaSGOY0urw
DJ8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org