Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3pLHz17F-6KZG43cMrDGmTD3ZLU.roa
File: 3pLHz17F-6KZG43cMrDGmTD3ZLU.roa (raw, json)
Hash identifier: Vrvzerv6gDOjoRIbIFQYKfRBjVPDpwasE+e5JIm1eV4=
Subject key identifier: DE:92:C7:CF:5E:C5:FB:A2:99:1B:8D:DC:32:B0:C6:99:30:F7:64:B5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CC4BAFEAE49452B66025538E8E371946B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3pLHz17F-6KZG43cMrDGmTD3ZLU.roa
Signing time: Mon 01 Jan 2024 11:13:58 +0000
ROA not before: Mon 01 Jan 2024 11:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:ba:fe:ae:49:45:2b:66:02:55:38:e8:e3:71:94:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 1 11:13:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de92c7cf5ec5fba2991b8ddc32b0c69930f764b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:df:25:77:be:6d:f4:88:32:79:f1:4a:45:3d:
0b:2b:87:89:3b:2c:85:81:fa:6a:ee:97:a5:f6:df:
3c:18:e5:77:3f:58:1b:ac:cc:5f:20:f5:53:cf:09:
0c:7f:35:9a:54:5c:91:7d:ec:ce:0d:49:41:ba:25:
37:ac:9b:a5:0d:42:7c:3b:d5:aa:78:7c:85:da:4a:
d3:08:e4:ee:1d:f0:69:c9:46:3c:b1:7e:db:8d:50:
15:9f:e5:fb:ad:e1:f0:d8:c1:d5:6c:ba:00:10:32:
c5:8d:31:15:26:6f:a5:dc:f0:27:db:03:ce:1d:57:
96:29:38:d5:e0:e6:ba:a3:7d:12:cf:3f:48:1d:4c:
cf:c0:6f:8e:b1:c0:47:41:6f:8b:7d:d9:c7:08:5b:
9c:6c:09:87:16:c9:6c:33:c6:03:50:ba:0a:9d:43:
c9:c8:29:75:17:b0:a3:e8:99:05:ea:13:9e:2e:3c:
24:92:1f:c6:ea:c2:79:b2:3e:8f:1e:8f:bf:4b:ce:
6b:c1:45:7d:fc:71:4c:ca:86:ab:49:b0:98:28:e8:
6c:d9:9b:bb:e3:65:27:28:d3:a9:ef:fd:68:ed:dd:
9d:44:ea:0e:00:93:c8:8f:78:74:97:49:25:7f:a6:
96:76:2a:e3:d8:30:0d:bf:12:86:6f:fd:0a:0a:4c:
73:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:92:C7:CF:5E:C5:FB:A2:99:1B:8D:DC:32:B0:C6:99:30:F7:64:B5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3pLHz17F-6KZG43cMrDGmTD3ZLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:8f:ba:a3:ff:f5:41:5d:20:88:d2:f8:6b:83:ca:99:a1:9d:
13:a0:5f:93:c7:65:ac:29:29:e3:a4:6a:ce:02:30:57:e7:99:
66:16:3a:3b:eb:b4:43:76:1c:ba:2d:1a:db:8e:48:d6:2e:70:
09:80:61:f8:f7:3f:49:cd:4d:de:45:e9:f1:e4:86:a0:06:fd:
f4:bf:84:0f:50:7d:ef:14:f6:3d:6b:f4:3c:b4:22:a1:ca:bd:
46:90:e5:e8:a1:6e:08:df:14:a9:e2:c4:7e:a2:ab:26:a5:eb:
02:4a:7d:9b:e0:9b:f0:78:6d:74:9c:f3:88:11:ba:ab:4f:8e:
57:cd:2a:f8:d0:e0:d8:3d:dd:32:e0:ec:6d:a7:12:6e:77:55:
b5:79:9c:c8:d7:87:f7:39:0f:8a:a8:4e:30:cb:a3:1f:1d:9d:
03:c2:9d:d6:04:cf:05:c3:65:84:80:20:45:d9:9e:c3:1b:e8:
b5:b6:1b:d9:84:7d:db:63:73:eb:ed:80:80:27:37:1d:59:e5:
bc:95:32:a6:91:08:ce:0a:07:c0:9f:81:a2:e3:11:21:6c:7b:
a9:aa:63:b2:e4:40:4d:c0:f2:79:c0:4a:35:21:48:0f:e9:ac:
6a:f8:ff:10:92:d7:57:c7:bc:93:7b:a8:e6:39:df:f7:15:6e:
60:2d:95:89
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzEuv6uSUUrZgJVOOjjcZRrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTAxMTExMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTkyYzdjZjVlYzVmYmEyOTkxYjhkZGMzMmIwYzY5OTMwZjc2NGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt8ld75t9IgyefFKRT0LK4eJOyyF
gfpq7pel9t88GOV3P1gbrMxfIPVTzwkMfzWaVFyRfezODUlBuiU3rJulDUJ8O9Wq
eHyF2krTCOTuHfBpyUY8sX7bjVAVn+X7reHw2MHVbLoAEDLFjTEVJm+l3PAn2wPO
HVeWKTjV4Oa6o30Szz9IHUzPwG+OscBHQW+LfdnHCFucbAmHFslsM8YDULoKnUPJ
yCl1F7Cj6JkF6hOeLjwkkh/G6sJ5sj6PHo+/S85rwUV9/HFMyoarSbCYKOhs2Zu7
42UnKNOp7/1o7d2dROoOAJPIj3h0l0klf6aWdirj2DANvxKGb/0KCkxzlwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN6Sx89exfuimRuN3DKwxpkw92S1MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvM3BMSHoxN0YtNktaRzQzY01yREdtVEQzWkxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACqPuqP/9UFdIIjS+GuD
ypmhnROgX5PHZawpKeOkas4CMFfnmWYWOjvrtEN2HLotGtuOSNYucAmAYfj3P0nN
Td5F6fHkhqAG/fS/hA9Qfe8U9j1r9Dy0IqHKvUaQ5eihbgjfFKnixH6iqyal6wJK
fZvgm/B4bXSc84gRuqtPjlfNKvjQ4Ng93TLg7G2nEm53VbV5nMjXh/c5D4qoTjDL
ox8dnQPCndYEzwXDZYSAIEXZnsMb6LW2G9mEfdtjc+vtgIAnNx1Z5byVMqaRCM4K
B8CfgaLjESFse6mqY7LkQE3A8nnASjUhSA/prGr4/xCS11fHvJN7qOY53/cVbmAt
lYk=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:17 2025 by rpki-client