Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/td3w6P2-7fDp0SvQc5jQ7GJrFRc.roa
File: td3w6P2-7fDp0SvQc5jQ7GJrFRc.roa (raw, json)
Hash identifier: QWmv25pT/N5nWzfT16mnPRHK9+WYE8UVh1wU6zoBCTk=
Subject key identifier: B5:DD:F0:E8:FD:BE:ED:F0:E9:D1:2B:D0:73:98:D0:EC:62:6B:15:17
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A5B32941F7ED54EBDA70D8F46EC00F959
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/td3w6P2-7fDp0SvQc5jQ7GJrFRc.roa
Signing time: Sun 03 Sep 2023 13:19:15 +0000
ROA not before: Sun 03 Sep 2023 13:19:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5b:32:94:1f:7e:d5:4e:bd:a7:0d:8f:46:ec:00:f9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 3 13:19:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5ddf0e8fdbeedf0e9d12bd07398d0ec626b1517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:4e:25:a5:da:b8:ab:b3:e0:5e:13:b3:03:
d2:9f:ec:ab:87:16:26:49:2b:68:62:eb:2b:c4:fb:
96:6f:5e:7a:2b:40:d1:0b:89:76:6e:cf:d6:93:fe:
31:04:13:53:4f:e8:14:d7:a1:fb:71:f0:92:9b:ef:
f7:9f:43:a4:a5:c8:14:fe:e2:f0:d1:4c:4f:ed:e2:
dc:1c:2e:19:e5:cc:b7:85:59:a0:3f:0b:93:06:cc:
ae:85:de:22:a9:d7:e3:46:9f:ba:ff:e1:58:9a:44:
d3:bb:ad:ad:39:15:c1:92:d3:b9:bb:dc:26:1c:5e:
9f:f3:f2:eb:9a:19:01:0d:08:17:10:b3:26:df:3a:
76:3e:49:93:6c:d7:b4:50:e8:74:ee:3c:e5:f2:a4:
1a:4e:49:c0:98:c7:9b:9f:85:bf:df:54:61:a5:f4:
d6:10:91:9e:64:c7:2f:ef:5d:35:8d:0a:6f:07:57:
e0:78:0b:e9:7d:3e:42:d3:6a:b1:6e:80:22:3c:33:
84:7e:40:1f:41:ec:be:5a:84:80:7b:34:91:bf:dd:
70:fb:c1:4d:32:d4:3d:29:0b:b3:dc:54:f8:1a:ac:
2c:98:24:c4:2b:cc:68:1d:e2:41:13:84:01:3d:5d:
e6:29:18:b6:21:bc:45:46:94:04:4b:75:8b:a4:6c:
68:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DD:F0:E8:FD:BE:ED:F0:E9:D1:2B:D0:73:98:D0:EC:62:6B:15:17
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/td3w6P2-7fDp0SvQc5jQ7GJrFRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:23:56:e4:f4:96:2b:71:af:bc:98:45:69:f3:76:0d:e0:c5:
63:44:ad:4a:f5:4d:b2:30:71:99:c6:f3:fe:3a:05:4f:c6:b4:
4a:3a:67:b9:05:f8:db:6a:7f:20:ac:88:f1:8c:7b:6b:33:3f:
bc:f6:5e:8d:00:5b:c2:a6:cd:ed:ff:c3:66:0b:b5:1a:f9:79:
3e:3d:b3:4e:76:b0:5b:e1:01:22:53:6f:a5:e3:bd:d4:21:55:
ca:50:a1:e4:66:b4:83:72:61:75:89:9f:96:e0:20:97:dd:e0:
b0:a8:c8:7e:d8:49:28:a2:41:84:f2:fb:9b:0a:7f:28:d0:82:
22:48:74:19:01:d8:9f:1c:24:86:64:71:2e:d1:2b:9a:f1:bb:
52:fd:5b:a5:ad:14:d6:46:8f:49:0a:05:5e:30:b3:8d:e4:5b:
be:35:a7:66:44:4f:55:0b:59:38:80:5f:b0:df:64:7a:33:57:
54:d4:ed:c2:4a:d0:98:14:d4:35:ca:8f:be:6c:48:2c:95:79:
8b:88:3b:73:88:83:e7:3c:88:9a:f5:a6:22:fb:f6:4d:ed:2f:
ca:8b:57:31:61:1b:18:10:2d:80:44:3e:4d:ec:49:b8:7a:c5:
e2:f7:eb:d0:1a:4a:06:b3:6b:85:04:23:bd:3e:1c:01:68:6f:
5f:a5:63:58
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpbMpQfftVOvacNj0bsAPlZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTAzMTMxOTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWRkZjBlOGZkYmVlZGYwZTlkMTJiZDA3Mzk4ZDBlYzYyNmIxNTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMZOJaXauKuz4F4TswPSn+yrhxYm
SStoYusrxPuWb156K0DRC4l2bs/Wk/4xBBNTT+gU16H7cfCSm+/3n0OkpcgU/uLw
0UxP7eLcHC4Z5cy3hVmgPwuTBsyuhd4iqdfjRp+6/+FYmkTTu62tORXBktO5u9wm
HF6f8/LrmhkBDQgXELMm3zp2PkmTbNe0UOh07jzl8qQaTknAmMebn4W/31RhpfTW
EJGeZMcv7101jQpvB1fgeAvpfT5C02qxboAiPDOEfkAfQey+WoSAezSRv91w+8FN
MtQ9KQuz3FT4GqwsmCTEK8xoHeJBE4QBPV3mKRi2IbxFRpQES3WLpGxoTwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLXd8Oj9vu3w6dEr0HOY0OxiaxUXMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvdGQzdzZQMi03ZkRwMFN2UWM1alE3R0pyRlJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAwjVuT0litxr7yYRWnz
dg3gxWNErUr1TbIwcZnG8/46BU/GtEo6Z7kF+NtqfyCsiPGMe2szP7z2Xo0AW8Km
ze3/w2YLtRr5eT49s052sFvhASJTb6XjvdQhVcpQoeRmtINyYXWJn5bgIJfd4LCo
yH7YSSiiQYTy+5sKfyjQgiJIdBkB2J8cJIZkcS7RK5rxu1L9W6WtFNZGj0kKBV4w
s43kW741p2ZET1ULWTiAX7DfZHozV1TU7cJK0JgU1DXKj75sSCyVeYuIO3OIg+c8
iJr1piL79k3tL8qLVzFhGxgQLYBEPk3sSbh6xeL369AaSgaza4UEI70+HAFob1+l
Y1g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:58 2024 by rpki-client on console-fra.rpki-client.org