Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0eC0b-7UT55qYScSYCU56V_LDCs.roa
File: 0eC0b-7UT55qYScSYCU56V_LDCs.roa (raw, json)
Hash identifier: VzaTRNDW8qEPIAb0FU1ubKE7dl3agr3M22Oz15xMHNg=
Subject key identifier: D1:E0:B4:6F:EE:D4:4F:9E:6A:61:27:12:60:25:39:E9:5F:CB:0C:2B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D36D9AD5902AC745B5524F2F619018EB5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0eC0b-7UT55qYScSYCU56V_LDCs.roa
Signing time: Tue 23 Jan 2024 15:04:11 +0000
ROA not before: Tue 23 Jan 2024 15:04:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:36d9:9e40/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:36:d9:ad:59:02:ac:74:5b:55:24:f2:f6:19:01:8e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 23 15:04:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1e0b46feed44f9e6a612712602539e95fcb0c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:44:fd:b0:0d:ef:c5:85:3c:ef:e9:87:89:69:
e4:54:99:f8:2b:7d:46:73:e8:02:4c:62:35:20:7a:
b3:16:8c:75:67:e4:ae:05:df:8e:3c:b4:b2:35:28:
3d:fa:f4:99:be:df:c3:16:11:65:c9:83:e8:db:8f:
d7:ef:7e:ca:6f:a6:ba:30:f9:f3:cd:7d:2d:f9:69:
27:55:04:6f:02:4d:7e:b7:b3:86:07:ed:c5:63:e0:
d1:0b:57:77:52:00:48:c2:17:39:bd:33:35:8b:6e:
f7:cb:b2:8d:5b:ed:a7:71:59:76:fe:ae:ce:d3:19:
1f:a8:94:33:71:9b:9a:0a:0e:23:30:43:b5:99:c9:
c0:d9:7e:36:49:cb:f3:e3:e0:fb:d3:56:df:7f:e4:
c6:3d:55:f1:d8:bd:15:81:7d:03:f5:ee:73:fa:2e:
80:09:c3:e8:2e:ce:c9:6f:64:6b:10:bf:9e:06:65:
12:ec:5c:c9:24:b4:f5:3d:b2:89:e8:4e:6b:cc:56:
33:4c:91:50:5c:ac:d9:e0:8d:e3:1a:43:1d:45:fb:
57:bd:eb:da:29:4d:b3:11:38:f5:c1:ef:6f:5f:66:
84:02:99:f4:31:29:4f:f1:2a:52:b0:4a:d9:ef:47:
df:5e:6b:8a:dc:1c:96:a2:47:6b:8c:7a:c0:7d:e9:
db:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E0:B4:6F:EE:D4:4F:9E:6A:61:27:12:60:25:39:E9:5F:CB:0C:2B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/0eC0b-7UT55qYScSYCU56V_LDCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:52:a6:68:af:94:63:a6:a7:45:4d:1b:d7:89:04:91:62:87:
a1:39:4d:0a:f2:c1:7d:5a:1c:fe:4f:ef:b4:f1:92:ef:c5:41:
ed:03:84:24:10:a8:ad:b7:b2:b2:b3:60:a3:5f:31:ce:9d:a5:
24:bb:7b:ce:57:4d:4f:5b:4d:46:71:24:b7:36:69:3a:18:95:
ec:b0:22:81:f5:e5:fe:40:2e:ef:38:e1:db:22:01:99:5f:f1:
f5:76:7a:bf:45:b5:68:2d:50:91:7c:f2:d2:75:92:27:9e:30:
ab:89:10:e8:14:a3:d7:0f:d7:ae:10:3f:04:99:29:7c:b0:29:
f5:76:8f:ea:4e:35:3a:ba:ec:d4:c7:e6:41:43:fd:0d:5a:77:
ea:88:95:33:a7:c0:8e:b8:e7:b0:5d:38:88:6a:4d:55:a8:b0:
12:6f:d9:ea:73:7c:34:4a:67:f4:2f:3e:b8:84:5e:c8:ce:bd:
28:53:7e:0f:c5:5b:9e:a3:56:da:cc:55:b4:72:37:f3:b8:d7:
eb:be:d5:25:ab:77:94:23:89:89:d7:e4:72:d3:af:e7:32:d6:
b0:70:96:e6:d5:2a:d4:5c:28:41:ad:8d:7b:2b:9c:94:60:88:
99:ec:a7:c6:07:14:b0:66:fe:05:e8:77:e3:2c:c8:c3:c8:d1:
6f:f3:92:3f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY022a1ZAqx0W1Uk8vYZAY61MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTIzMTUwNDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWUwYjQ2ZmVlZDQ0ZjllNmE2MTI3MTI2MDI1MzllOTVmY2IwYzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgET9sA3vxYU87+mHiWnkVJn4K31G
c+gCTGI1IHqzFox1Z+SuBd+OPLSyNSg9+vSZvt/DFhFlyYPo24/X737Kb6a6MPnz
zX0t+WknVQRvAk1+t7OGB+3FY+DRC1d3UgBIwhc5vTM1i273y7KNW+2ncVl2/q7O
0xkfqJQzcZuaCg4jMEO1mcnA2X42Scvz4+D701bff+TGPVXx2L0VgX0D9e5z+i6A
CcPoLs7Jb2RrEL+eBmUS7FzJJLT1PbKJ6E5rzFYzTJFQXKzZ4I3jGkMdRftXveva
KU2zETj1we9vX2aEApn0MSlP8SpSsErZ70ffXmuK3ByWokdrjHrAfenbEwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNHgtG/u1E+eamEnEmAlOelfywwrMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvMGVDMGItN1VUNTVxWVNjU1lDVTU2Vl9MRENzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHtSpmivlGOmp0VNG9eJ
BJFih6E5TQrywX1aHP5P77Txku/FQe0DhCQQqK23srKzYKNfMc6dpSS7e85XTU9b
TUZxJLc2aToYleywIoH15f5ALu844dsiAZlf8fV2er9FtWgtUJF88tJ1kieeMKuJ
EOgUo9cP164QPwSZKXywKfV2j+pONTq67NTH5kFD/Q1ad+qIlTOnwI6457BdOIhq
TVWosBJv2epzfDRKZ/QvPriEXsjOvShTfg/FW56jVtrMVbRyN/O41+u+1SWrd5Qj
iYnX5HLTr+cy1rBwlubVKtRcKEGtjXsrnJRgiJnsp8YHFLBm/gXod+MsyMPI0W/z
kj8=
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:14 2025 by rpki-client