Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/x9tdSXQals9wWORkV3oEoQbw01s.roa
File: x9tdSXQals9wWORkV3oEoQbw01s.roa (raw, json)
Hash identifier: kW1HUDLdErUYYuoruHPUGgEnUUZ6ALzdF13xZuclajQ=
Subject key identifier: C7:DB:5D:49:74:1A:96:CF:70:58:E4:64:57:7A:04:A1:06:F0:D3:5B
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A728F63117894FD13FEE23CC57A585826
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/x9tdSXQals9wWORkV3oEoQbw01s.roa
Signing time: Fri 08 Sep 2023 02:11:54 +0000
ROA not before: Fri 08 Sep 2023 02:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:72:8f:63:11:78:94:fd:13:fe:e2:3c:c5:7a:58:58:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 8 02:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7db5d49741a96cf7058e464577a04a106f0d35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4b:81:b2:d2:6d:a1:17:08:45:e4:a0:a4:59:
bf:ca:7d:06:8c:b2:6a:37:7d:ed:0f:1a:6a:ca:eb:
2b:7a:0c:92:28:98:f0:e5:e3:2b:c5:3a:f2:3e:3b:
e3:05:66:96:2f:0d:51:ed:93:fc:2d:2e:b2:ae:11:
8d:2f:23:ca:1b:c9:f0:ed:cb:d9:64:eb:f3:45:0c:
ae:1b:39:c8:a7:a9:aa:24:22:0a:81:ff:43:aa:f3:
1a:2b:cb:ea:a4:5d:7f:bf:66:12:55:e9:94:f1:74:
eb:26:96:f3:c5:1a:c7:c0:94:43:05:08:5b:32:89:
3e:60:f5:1f:89:b1:ed:57:bd:1b:0f:3b:49:be:8d:
6e:3d:2e:a3:26:6a:13:4c:69:5a:81:7d:4f:6d:c6:
24:1a:e9:71:f4:f6:81:4c:b4:74:6a:00:e8:bd:f8:
a6:8f:91:45:3f:ab:89:5c:cc:63:d2:8f:9a:75:ae:
14:d7:dd:44:23:52:4e:38:76:c9:c3:9a:f6:5b:9a:
d8:eb:a6:c7:cb:c3:b7:cb:4c:19:7a:f2:9e:e3:2b:
64:6a:af:5b:97:c9:18:9e:e1:0c:48:19:60:dc:9b:
37:36:46:54:75:14:70:07:1b:74:87:2d:a2:57:a2:
cb:0b:00:7d:03:66:d3:db:19:b2:ef:70:d0:ec:7f:
1e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DB:5D:49:74:1A:96:CF:70:58:E4:64:57:7A:04:A1:06:F0:D3:5B
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/x9tdSXQals9wWORkV3oEoQbw01s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:87:99:b5:55:a8:30:d8:7c:2d:43:06:5c:03:c8:44:89:8c:
f1:50:c8:28:64:6e:6b:9a:ad:88:f2:15:a2:82:46:49:2b:1d:
78:4d:cf:49:d4:ca:3a:59:8e:6f:50:af:ef:70:5a:b1:6b:1e:
9c:cf:94:c3:5d:65:fa:c8:67:bf:54:97:73:21:f3:98:67:e9:
a4:64:eb:fa:16:74:d4:3c:d7:71:80:51:d0:38:3e:f9:6f:ba:
9e:aa:2e:c9:44:bc:76:4e:e4:ae:87:0b:be:4b:98:80:fe:8f:
36:98:84:00:38:d1:ca:9e:17:9c:d8:ae:50:0c:74:72:b9:f2:
c6:d7:6b:e6:7f:21:7c:ec:cd:56:43:d7:77:80:38:bc:f2:ef:
eb:81:6a:54:56:a3:ad:8b:bb:e3:ed:9a:9c:4a:17:3f:02:c5:
a3:9e:52:43:bc:57:3f:6f:cf:a0:38:ee:33:25:5e:d4:22:fc:
b4:76:34:43:59:54:fb:93:79:ba:b4:97:b6:06:f4:55:1c:8b:
ab:9a:7f:a2:db:28:37:db:da:49:2d:30:b8:8a:fe:4b:a4:ee:
44:30:ec:ba:7f:73:eb:45:32:15:33:c8:88:ea:9c:e2:30:b2:
32:68:43:2c:3e:48:76:28:17:d2:79:8a:fc:78:24:13:05:e4:
cb:30:e6:4d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpyj2MReJT9E/7iPMV6WFgmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTA4MDIxMTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2RiNWQ0OTc0MWE5NmNmNzA1OGU0NjQ1NzdhMDRhMTA2ZjBkMzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUuBstJtoRcIReSgpFm/yn0GjLJq
N33tDxpqyusregySKJjw5eMrxTryPjvjBWaWLw1R7ZP8LS6yrhGNLyPKG8nw7cvZ
ZOvzRQyuGznIp6mqJCIKgf9DqvMaK8vqpF1/v2YSVemU8XTrJpbzxRrHwJRDBQhb
Mok+YPUfibHtV70bDztJvo1uPS6jJmoTTGlagX1PbcYkGulx9PaBTLR0agDovfim
j5FFP6uJXMxj0o+ada4U191EI1JOOHbJw5r2W5rY66bHy8O3y0wZevKe4ytkaq9b
l8kYnuEMSBlg3Js3NkZUdRRwBxt0hy2iV6LLCwB9A2bT2xmy73DQ7H8e5wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMfbXUl0GpbPcFjkZFd6BKEG8NNbMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEveDl0ZFNYUWFsczl3V09Sa1Yzb0VvUWJ3MDFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJiHmbVVqDDYfC1DBlwD
yESJjPFQyChkbmuarYjyFaKCRkkrHXhNz0nUyjpZjm9Qr+9wWrFrHpzPlMNdZfrI
Z79Ul3Mh85hn6aRk6/oWdNQ813GAUdA4Pvlvup6qLslEvHZO5K6HC75LmID+jzaY
hAA40cqeF5zYrlAMdHK58sbXa+Z/IXzszVZD13eAOLzy7+uBalRWo62Lu+PtmpxK
Fz8CxaOeUkO8Vz9vz6A47jMlXtQi/LR2NENZVPuTebq0l7YG9FUci6uaf6LbKDfb
2kktMLiK/kuk7kQw7Lp/c+tFMhUzyIjqnOIwsjJoQyw+SHYoF9J5ivx4JBMF5Msw
5k0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:58 2024 by rpki-client on console-fra.rpki-client.org