Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0OryvyDMqAGIZiFv9_XuWS1F5UQ.roa
File: 0OryvyDMqAGIZiFv9_XuWS1F5UQ.roa (raw, json)
Hash identifier: jWjqyCemJoJkcXx5WsIwyLESA1ECdFT1/WIVkiIOL7I=
Subject key identifier: D0:EA:F2:BF:20:CC:A8:01:88:66:21:6F:F7:F5:EE:59:2D:45:E5:44
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E680078FE3C824DFCCD575586BE280617
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0OryvyDMqAGIZiFv9_XuWS1F5UQ.roa
Signing time: Fri 22 Mar 2024 21:10:45 +0000
ROA not before: Fri 22 Mar 2024 21:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:68:00:78:fe:3c:82:4d:fc:cd:57:55:86:be:28:06:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 22 21:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0eaf2bf20cca8018866216ff7f5ee592d45e544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:02:42:f8:d6:ed:5f:a0:e6:2f:16:ef:94:fe:
95:ec:47:35:3c:ff:17:b1:c9:36:d3:97:65:57:b1:
5f:7b:8b:4e:06:0d:1b:62:b2:60:81:18:d7:01:96:
ac:cb:88:3a:d3:11:e8:8f:12:79:16:f4:e8:8d:f7:
9b:9c:5a:0b:14:a7:67:91:2f:45:de:75:a4:19:e6:
60:27:7d:15:42:db:fb:80:2e:26:63:0f:80:4e:c4:
78:7f:43:f8:7c:92:93:db:3a:92:f1:49:cc:ce:c8:
f1:93:f8:77:e3:ee:9a:ab:f5:2b:b6:dd:a2:50:e4:
7e:bd:82:54:56:4e:91:db:c0:49:61:6e:ea:0d:eb:
1d:50:fd:27:2d:c9:23:2d:27:a2:b9:38:81:2f:64:
a6:10:95:a9:6c:2b:17:2d:ba:10:5e:4f:18:d2:ea:
ce:5e:e0:37:0f:1d:fa:69:cb:57:83:16:47:8c:26:
20:c9:06:48:d3:32:61:31:e7:9d:c3:87:b5:39:1c:
49:73:e0:3f:49:4d:d6:95:0a:a1:58:ec:d6:9d:9f:
63:fd:da:70:ac:f7:10:91:06:29:b3:88:e2:37:75:
77:15:8f:8e:00:04:8f:ef:3f:94:04:9a:43:e3:75:
c9:a4:43:5c:15:e9:ce:53:1f:0a:fc:a0:9d:be:d7:
8b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EA:F2:BF:20:CC:A8:01:88:66:21:6F:F7:F5:EE:59:2D:45:E5:44
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0OryvyDMqAGIZiFv9_XuWS1F5UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:2a:4b:e9:7b:19:40:2a:0a:16:38:cd:8d:bb:31:d5:3b:8a:
a8:07:c6:45:14:dd:95:54:3c:1a:31:65:eb:89:6d:5f:a1:fc:
f3:68:30:84:93:95:78:bf:2d:13:2e:09:c5:bd:d5:1a:22:0d:
9e:63:33:5b:51:49:af:93:0d:dc:1c:14:71:77:c4:8c:41:88:
ca:bd:e6:49:a6:e3:7b:51:96:68:01:18:32:61:b9:51:d6:b7:
dc:c8:1f:66:21:a1:04:a2:70:7d:07:a0:6d:ae:9a:fd:ee:2d:
aa:95:7b:78:85:68:a0:8b:07:bb:1c:be:9c:cc:b7:6f:69:ea:
ae:58:4a:5d:79:52:7a:e1:dd:2d:9b:3c:06:3b:a3:81:12:42:
5e:05:47:83:19:8e:18:27:a6:75:ad:cc:dd:a4:82:a6:6a:29:
8a:d7:7d:24:4f:eb:40:5e:f5:b1:2f:c6:0a:ab:77:64:63:24:
a7:f8:5a:99:04:60:c1:dc:c2:db:c4:4e:65:11:22:ce:13:fa:
52:15:91:98:24:8c:5f:21:ac:24:49:46:3a:98:c3:71:ff:a4:
05:23:b2:73:6c:41:7e:af:79:8f:a9:08:0b:55:7e:4a:2b:cf:
95:7d:a3:b5:ff:6d:74:5e:17:09:29:d5:07:81:63:e8:42:a4:
31:db:ec:fb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5oAHj+PIJN/M1XVYa+KAYXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzIyMjExMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGVhZjJiZjIwY2NhODAxODg2NjIxNmZmN2Y1ZWU1OTJkNDVlNTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAJC+NbtX6DmLxbvlP6V7Ec1PP8X
sck205dlV7Ffe4tOBg0bYrJggRjXAZasy4g60xHojxJ5FvTojfebnFoLFKdnkS9F
3nWkGeZgJ30VQtv7gC4mYw+ATsR4f0P4fJKT2zqS8UnMzsjxk/h34+6aq/Urtt2i
UOR+vYJUVk6R28BJYW7qDesdUP0nLckjLSeiuTiBL2SmEJWpbCsXLboQXk8Y0urO
XuA3Dx36actXgxZHjCYgyQZI0zJhMeedw4e1ORxJc+A/SU3WlQqhWOzWnZ9j/dpw
rPcQkQYps4jiN3V3FY+OAASP7z+UBJpD43XJpENcFenOUx8K/KCdvteLfQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNDq8r8gzKgBiGYhb/f17lktReVEMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvME9yeXZ5RE1xQUdJWmlGdjlfWHVXUzFGNVVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAUqS+l7GUAqChY4zY27
MdU7iqgHxkUU3ZVUPBoxZeuJbV+h/PNoMISTlXi/LRMuCcW91RoiDZ5jM1tRSa+T
DdwcFHF3xIxBiMq95kmm43tRlmgBGDJhuVHWt9zIH2YhoQSicH0HoG2umv3uLaqV
e3iFaKCLB7scvpzMt29p6q5YSl15Unrh3S2bPAY7o4ESQl4FR4MZjhgnpnWtzN2k
gqZqKYrXfSRP60Be9bEvxgqrd2RjJKf4WpkEYMHcwtvETmURIs4T+lIVkZgkjF8h
rCRJRjqYw3H/pAUjsnNsQX6veY+pCAtVfkorz5V9o7X/bXReFwkp1QeBY+hCpDHb
7Ps=
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:56 2025 by rpki-client