Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-rDtkwm_qSGjv7dOQJHGoNhuW-Y.roa
File: 1-rDtkwm_qSGjv7dOQJHGoNhuW-Y.roa (raw, json)
Hash identifier: jpltzJpGzCR9eiF5FKPMWxd+3y3AuA2mq9f+0ICq0M8=
Subject key identifier: FA:B0:ED:93:09:BF:A9:21:A3:BF:B7:4E:40:91:C6:A0:D8:6E:5B:E6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D64CE458302A1EF5439E9F933A6615B05
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-rDtkwm_qSGjv7dOQJHGoNhuW-Y.roa
Signing time: Thu 01 Feb 2024 13:14:16 +0000
ROA not before: Thu 01 Feb 2024 13:14:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:ce:45:83:02:a1:ef:54:39:e9:f9:33:a6:61:5b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 1 13:14:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fab0ed9309bfa921a3bfb74e4091c6a0d86e5be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:cc:1f:fd:b6:2a:ca:63:96:da:4d:c3:0b:
f3:3b:96:be:e6:1b:63:ec:8a:2e:03:32:41:58:23:
b6:87:41:c0:66:a4:e9:12:04:28:af:60:12:ab:46:
1c:07:8b:cd:ca:8e:34:48:2c:eb:ba:20:03:ef:6f:
87:1b:17:a5:22:e5:d4:9f:13:4a:ee:9b:71:11:6e:
f7:ea:83:76:92:a2:fa:6e:94:a6:b5:a5:d2:b1:4f:
d7:39:e1:e7:a6:2c:88:b0:00:3d:c1:b3:2a:c9:f6:
2b:da:36:0c:34:7a:79:49:6b:0d:11:b2:23:aa:fa:
62:24:7a:16:80:40:91:04:7a:5f:38:07:8f:3b:c8:
c4:f9:ed:4c:dc:3a:63:46:fe:ec:10:3d:22:18:47:
7b:d8:32:bd:46:01:48:b2:3b:26:8a:80:f6:97:dd:
62:f8:16:81:92:d8:be:ba:8a:d0:5d:26:8d:97:6e:
5b:68:83:46:f4:70:c4:07:d0:99:58:51:f8:a3:0a:
5c:95:fe:73:ad:5b:4b:b4:7f:14:27:c5:1e:1c:56:
31:e2:3f:c8:1c:39:d3:39:ac:93:91:b3:f4:fa:8e:
41:29:9f:96:2a:75:bf:38:8e:72:8c:b9:ab:97:c7:
75:cc:21:79:36:f4:7f:36:c1:3d:34:86:a8:4c:b3:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B0:ED:93:09:BF:A9:21:A3:BF:B7:4E:40:91:C6:A0:D8:6E:5B:E6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-rDtkwm_qSGjv7dOQJHGoNhuW-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:a5:0a:bd:03:0a:a8:be:be:51:fa:eb:3d:74:be:f5:c4:e0:
8a:f0:04:2d:b2:ce:99:83:11:9d:e0:17:af:42:f8:fa:0a:44:
90:a9:8d:06:40:28:91:68:e8:84:a3:0d:55:5e:c9:58:73:84:
ad:53:20:3e:1e:ea:b3:22:97:18:a0:5c:af:b8:1e:3d:78:9b:
b5:81:57:57:5f:cf:2f:fb:5f:44:60:7c:f7:5f:f0:81:d9:29:
41:d3:c5:fc:54:c8:29:26:38:b3:9d:8e:83:6a:26:2c:68:60:
08:4a:54:02:59:41:fc:61:36:aa:1e:60:33:a2:6c:08:53:d5:
d2:38:c6:59:b9:9f:4f:79:e1:0e:49:11:91:94:7d:33:3b:77:
f3:0a:0b:da:35:80:e0:8f:c9:19:ef:a4:e7:a3:37:cd:c9:66:
3c:e1:d8:22:1a:52:bc:45:cf:99:38:1c:cf:fc:bb:8a:c8:2b:
29:61:76:1b:64:d6:a8:14:4c:90:a5:ba:b6:c2:b5:2e:45:c4:
39:df:10:e3:41:b9:d2:73:4c:e4:d4:3a:c7:ef:ef:e1:13:2d:
06:3a:86:a4:e2:7c:e2:ab:8b:fb:2b:56:3d:d6:df:6f:43:50:
f5:fb:2b:e3:e7:bb:51:c7:65:5a:29:0c:c8:d6:b6:ac:0d:a8:
93:87:83:fe
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY1kzkWDAqHvVDnp+TOmYVsFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjAxMTMxNDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWIwZWQ5MzA5YmZhOTIxYTNiZmI3NGU0MDkxYzZhMGQ4NmU1YmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeLMH/22KspjltpNwwvzO5a+5htj
7IouAzJBWCO2h0HAZqTpEgQor2ASq0YcB4vNyo40SCzruiAD72+HGxelIuXUnxNK
7ptxEW736oN2kqL6bpSmtaXSsU/XOeHnpiyIsAA9wbMqyfYr2jYMNHp5SWsNEbIj
qvpiJHoWgECRBHpfOAePO8jE+e1M3DpjRv7sED0iGEd72DK9RgFIsjsmioD2l91i
+BaBkti+uorQXSaNl25baING9HDEB9CZWFH4owpclf5zrVtLtH8UJ8UeHFYx4j/I
HDnTOayTkbP0+o5BKZ+WKnW/OI5yjLmrl8d1zCF5NvR/NsE9NIaoTLNjQwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPqw7ZMJv6kho7+3TkCRxqDYblvmMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvMS1yRHRrd21fcVNHanY3ZE9RSkhHb05odVctWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGIvZTA1MjBkLTliYTYtNDFhMy04Zjg3LWM1Mzk3OWQ2NmNh
NS8xLzA3UGFQc3VLZlVNOTQ0TTRabnMxNW8zM1A0dy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQBFpQq9Awqovr5R+us9
dL71xOCK8AQtss6ZgxGd4BevQvj6CkSQqY0GQCiRaOiEow1VXslYc4StUyA+Huqz
IpcYoFyvuB49eJu1gVdXX88v+19EYHz3X/CB2SlB08X8VMgpJjiznY6DaiYsaGAI
SlQCWUH8YTaqHmAzomwIU9XSOMZZuZ9PeeEOSRGRlH0zO3fzCgvaNYDgj8kZ76Tn
ozfNyWY84dgiGlK8Rc+ZOBzP/LuKyCspYXYbZNaoFEyQpbq2wrUuRcQ53xDjQbnS
c0zk1DrH7+/hEy0GOoak4nziq4v7K1Y91t9vQ1D1+yvj57tRx2VaKQzI1rasDaiT
h4P+
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:45 2025 by rpki-client