Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2685cqWTUmkUucAoYfqxU7ODZdY.roa
File: 2685cqWTUmkUucAoYfqxU7ODZdY.roa (raw, json)
Hash identifier: LUO4uwJVCWJ9x66JaIDXyTV/KhY9Ih4/MhxiHnQQX9s=
Subject key identifier: DB:AF:39:72:A5:93:52:69:14:B9:C0:28:61:FA:B1:53:B3:83:65:D6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CC338C9AF2B40606CDB75DDCACB6FA73E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2685cqWTUmkUucAoYfqxU7ODZdY.roa
Signing time: Mon 01 Jan 2024 04:12:07 +0000
ROA not before: Mon 01 Jan 2024 04:12:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:38:c9:af:2b:40:60:6c:db:75:dd:ca:cb:6f:a7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 1 04:12:07 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbaf3972a593526914b9c02861fab153b38365d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f9:8a:7f:0c:6a:d6:b7:61:a3:b0:3b:e3:cb:
f2:01:96:b0:5f:16:22:5e:13:30:7e:57:03:a4:75:
c0:f4:62:da:7c:8a:b3:e0:af:50:d1:d3:bc:c1:1f:
02:f2:73:16:2a:dc:54:c3:3f:c9:46:3b:0c:93:c2:
dd:7c:6d:0b:34:76:ec:60:6e:d8:fc:e7:e2:04:23:
82:c5:21:f7:af:4a:72:7a:75:b6:1f:0e:ef:a3:94:
a7:e1:7c:a1:92:97:f8:27:3b:47:54:d5:fc:2c:0b:
ef:7e:8f:02:c3:c2:89:b5:34:62:56:00:75:96:2f:
11:71:3c:cf:10:94:ff:98:d7:36:2e:d6:d3:d2:b7:
eb:a1:2b:20:41:46:1b:fa:ba:35:49:cf:ed:42:2d:
8b:f3:ac:52:62:31:1b:08:de:20:d9:17:24:ed:90:
2e:a6:4a:80:8d:6f:18:5b:4c:95:1a:76:2e:c8:1b:
3f:93:73:a6:95:0d:37:bd:dc:26:89:f7:51:4e:f7:
1b:00:c9:fa:b2:d0:4c:0f:13:bf:c4:89:a5:4d:76:
ef:9f:2e:fe:7a:f5:f8:42:87:49:84:67:91:95:8e:
0d:ec:55:f2:f8:42:f3:81:c7:32:d7:dd:33:31:1f:
83:77:00:a2:2f:4f:ea:31:0a:7c:57:a3:86:bb:11:
65:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AF:39:72:A5:93:52:69:14:B9:C0:28:61:FA:B1:53:B3:83:65:D6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/2685cqWTUmkUucAoYfqxU7ODZdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:ea:27:17:e6:72:02:ad:bb:65:a0:46:23:91:bd:60:c3:f0:
6f:74:8c:aa:52:00:a4:91:11:4d:19:e7:7f:17:54:c4:4c:a7:
b7:7e:aa:61:d8:2e:c3:4e:d6:8f:cc:ca:88:bf:a8:bc:a5:45:
e2:b3:1f:ae:09:42:fe:5d:b6:dc:2f:42:60:06:b2:5a:64:ea:
8e:5c:65:42:5d:aa:dc:55:a5:de:8b:71:31:64:41:a9:9a:4d:
5c:b3:c8:70:41:bf:01:b9:a6:71:89:5c:bf:2e:98:bf:bf:da:
33:39:0b:21:16:00:a1:92:7d:c6:ca:91:ff:88:81:72:a5:b6:
92:bd:02:35:5d:9b:a1:37:fd:69:4d:33:6b:8f:11:40:9e:e7:
eb:9f:e6:7b:ea:c6:9c:63:87:5b:8d:85:2b:a5:81:ae:f2:e6:
33:fb:19:5b:ef:17:72:99:a5:bc:18:74:e1:ab:9e:44:02:bc:
d1:71:01:73:00:f4:c3:0d:55:10:a0:11:2b:c9:e1:b2:19:25:
e8:e5:0a:6f:b4:e4:ac:6e:cb:95:e0:fc:31:56:e8:b0:89:8a:
f4:44:38:44:97:48:14:6c:a8:4f:cd:d3:e8:d5:ff:66:0d:72:
49:0d:dd:97:85:ac:e2:eb:09:17:39:6b:04:11:f0:1d:d1:4a:
20:55:32:d0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzDOMmvK0BgbNt13crLb6c+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTAxMDQxMjA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmFmMzk3MmE1OTM1MjY5MTRiOWMwMjg2MWZhYjE1M2IzODM2NWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPmKfwxq1rdho7A748vyAZawXxYi
XhMwflcDpHXA9GLafIqz4K9Q0dO8wR8C8nMWKtxUwz/JRjsMk8LdfG0LNHbsYG7Y
/OfiBCOCxSH3r0pyenW2Hw7vo5Sn4Xyhkpf4JztHVNX8LAvvfo8Cw8KJtTRiVgB1
li8RcTzPEJT/mNc2LtbT0rfroSsgQUYb+ro1Sc/tQi2L86xSYjEbCN4g2Rck7ZAu
pkqAjW8YW0yVGnYuyBs/k3OmlQ03vdwmifdRTvcbAMn6stBMDxO/xImlTXbvny7+
evX4QodJhGeRlY4N7FXy+ELzgccy190zMR+DdwCiL0/qMQp8V6OGuxFlxwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNuvOXKlk1JpFLnAKGH6sVOzg2XWMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvMjY4NWNxV1RVbWtVdWNBb1lmcXhVN09EWmRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACjqJxfmcgKtu2WgRiOR
vWDD8G90jKpSAKSREU0Z538XVMRMp7d+qmHYLsNO1o/Myoi/qLylReKzH64JQv5d
ttwvQmAGslpk6o5cZUJdqtxVpd6LcTFkQamaTVyzyHBBvwG5pnGJXL8umL+/2jM5
CyEWAKGSfcbKkf+IgXKltpK9AjVdm6E3/WlNM2uPEUCe5+uf5nvqxpxjh1uNhSul
ga7y5jP7GVvvF3KZpbwYdOGrnkQCvNFxAXMA9MMNVRCgESvJ4bIZJejlCm+05Kxu
y5Xg/DFW6LCJivREOESXSBRsqE/N0+jV/2YNckkN3ZeFrOLrCRc5awQR8B3RSiBV
MtA=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:17 2025 by rpki-client