Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/10fhysySA90H-1rHiWFJ09oV0U4.roa
File: 10fhysySA90H-1rHiWFJ09oV0U4.roa (raw, json)
Hash identifier: 4EdEZcFJc6BD/eOukz/j+Rt0nu4tgvnqIoHK1DxVn6I=
Subject key identifier: D7:47:E1:CA:CC:92:03:DD:07:FB:5A:C7:89:61:49:D3:DA:15:D1:4E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB0BE6F0E11EC1F5043C12207DF34362A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/10fhysySA90H-1rHiWFJ09oV0U4.roa
Signing time: Sat 06 Apr 2024 00:10:53 +0000
ROA not before: Sat 06 Apr 2024 00:10:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b0:be:6f:0e:11:ec:1f:50:43:c1:22:07:df:34:36:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 6 00:10:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d747e1cacc9203dd07fb5ac7896149d3da15d14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d7:85:f3:20:2c:c1:63:d4:eb:a8:d3:32:d1:
6a:fc:ba:9b:3b:bb:1a:2d:43:42:31:90:c6:61:51:
79:c5:d0:8e:da:90:d6:24:e6:ef:4a:16:32:39:33:
f8:b4:55:d5:8f:53:17:53:ea:69:0d:9d:87:e0:2d:
17:d1:2e:6e:57:4b:2f:4a:15:2d:61:e3:63:11:49:
4b:75:40:1c:c3:93:76:5d:34:9b:f7:ea:8b:2e:e1:
b8:88:d8:53:8d:fc:61:ff:cb:8d:a5:ba:e8:0b:9d:
be:7a:03:6f:96:43:b5:dc:33:c3:06:bc:72:9f:14:
21:de:dd:52:f7:7c:6e:82:fa:08:c5:69:e1:e1:31:
e9:c4:fe:6e:20:07:f0:29:98:08:15:58:a8:f2:6f:
cb:9e:a2:0d:b0:20:9b:1b:d3:5f:4a:3f:48:46:98:
52:d2:67:c0:f2:76:29:7e:18:a1:7b:ba:31:67:e1:
5f:0d:61:e4:46:4e:85:2f:19:83:d2:1e:8f:65:b9:
8f:7f:1a:fe:37:0d:38:42:5e:cb:bc:4f:f0:5a:5a:
ac:38:e8:2f:8d:e5:f2:84:9c:76:f3:3c:21:c2:97:
ae:37:d0:b8:f6:19:fe:8f:9e:8e:d6:8f:71:88:fe:
a3:c2:a7:52:26:b5:21:c5:48:f6:5d:04:32:94:a5:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:47:E1:CA:CC:92:03:DD:07:FB:5A:C7:89:61:49:D3:DA:15:D1:4E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/10fhysySA90H-1rHiWFJ09oV0U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:a4:9a:98:fc:00:3d:94:79:4e:f2:0b:92:d9:9f:a5:5e:88:
7a:ce:97:dc:c8:ef:ed:c1:69:b1:bf:dd:e9:eb:43:cf:53:58:
04:df:c8:5d:c2:33:9c:9d:f5:b7:a7:f8:a2:71:d9:49:7f:71:
08:a7:ed:41:18:03:76:35:c0:ca:39:8b:73:3a:65:e8:f0:2a:
38:96:31:81:60:92:a4:21:79:51:80:a2:3e:f2:b2:11:21:97:
a2:52:7d:23:26:f8:92:52:20:53:b5:c4:d3:19:a5:cd:3d:db:
24:4a:d5:99:06:05:9a:b9:c5:40:4e:79:da:39:bc:80:81:8f:
15:26:21:68:43:bf:d7:94:b0:b8:1f:3f:41:e2:00:32:4c:bd:
6d:73:5f:8f:de:46:de:c6:92:fa:bb:2b:38:74:45:e8:80:77:
58:26:23:01:a8:1b:ce:c8:2e:87:c8:07:69:ca:6a:f3:94:39:
82:79:c1:8e:0b:55:54:a1:83:f8:e7:ed:0e:6e:76:57:96:fe:
48:18:87:56:f9:44:ce:4a:ac:e6:cf:7d:33:68:74:b9:64:ad:
1a:fd:f2:8e:66:ac:c3:b1:af:0a:8c:98:41:d6:00:d7:9b:b7:
38:4d:22:15:f6:d4:e8:9f:7a:60:1b:11:4d:a6:51:39:2e:08:
52:c5:98:9b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6wvm8OEewfUEPBIgffNDYqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDA2MDAxMDUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzQ3ZTFjYWNjOTIwM2RkMDdmYjVhYzc4OTYxNDlkM2RhMTVkMTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdeF8yAswWPU66jTMtFq/LqbO7sa
LUNCMZDGYVF5xdCO2pDWJObvShYyOTP4tFXVj1MXU+ppDZ2H4C0X0S5uV0svShUt
YeNjEUlLdUAcw5N2XTSb9+qLLuG4iNhTjfxh/8uNpbroC52+egNvlkO13DPDBrxy
nxQh3t1S93xugvoIxWnh4THpxP5uIAfwKZgIFVio8m/LnqINsCCbG9NfSj9IRphS
0mfA8nYpfhihe7oxZ+FfDWHkRk6FLxmD0h6PZbmPfxr+Nw04Ql7LvE/wWlqsOOgv
jeXyhJx28zwhwpeuN9C49hn+j56O1o9xiP6jwqdSJrUhxUj2XQQylKUcMwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNdH4crMkgPdB/tax4lhSdPaFdFOMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvMTBmaHlzeVNBOTBILTFySGlXRkowOW9WMFU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACikmpj8AD2UeU7yC5LZ
n6VeiHrOl9zI7+3BabG/3enrQ89TWATfyF3CM5yd9ben+KJx2Ul/cQin7UEYA3Y1
wMo5i3M6ZejwKjiWMYFgkqQheVGAoj7yshEhl6JSfSMm+JJSIFO1xNMZpc092yRK
1ZkGBZq5xUBOedo5vICBjxUmIWhDv9eUsLgfP0HiADJMvW1zX4/eRt7Gkvq7Kzh0
ReiAd1gmIwGoG87ILofIB2nKavOUOYJ5wY4LVVShg/jn7Q5udleW/kgYh1b5RM5K
rObPfTNodLlkrRr98o5mrMOxrwqMmEHWANebtzhNIhX21OifemAbEU2mUTkuCFLF
mJs=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:51 2025 by rpki-client