Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3yKbAnPNsIOas-kennKDBfv919w.roa
File: 3yKbAnPNsIOas-kennKDBfv919w.roa (raw, json)
Hash identifier: 5klTlFmDfDUUcZJqNQb6buhpEXpDW7a8edeu6xw/aQE=
Subject key identifier: DF:22:9B:02:73:CD:B0:83:9A:B3:E9:1E:9E:72:83:05:FB:FD:D7:DC
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EC03303625F32223A9A8A217B1CF4C015
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3yKbAnPNsIOas-kennKDBfv919w.roa
Signing time: Tue 09 Apr 2024 00:12:32 +0000
ROA not before: Tue 09 Apr 2024 00:12:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c0:33:03:62:5f:32:22:3a:9a:8a:21:7b:1c:f4:c0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 9 00:12:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df229b0273cdb0839ab3e91e9e728305fbfdd7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5e:a7:80:9d:43:10:c7:b1:b4:14:ae:83:57:
9b:f3:64:25:e4:61:24:95:e3:68:d5:45:c0:a1:7e:
c9:82:12:13:a7:f3:d8:25:b4:ce:a7:8e:a6:fc:33:
49:36:62:e7:01:92:6d:30:fe:29:64:30:2a:b9:9b:
8d:ce:4a:ee:ba:c1:28:16:48:98:3d:67:73:a8:c9:
46:b2:f5:bd:83:d1:6e:9c:20:3d:61:90:8a:f5:14:
6f:17:e8:68:80:6c:d6:34:2e:77:e0:fe:1e:c6:08:
09:3d:f7:ca:b6:bd:38:02:02:eb:e3:12:21:d2:d2:
57:e5:98:00:72:2e:7e:87:e6:61:d5:3e:11:e6:62:
cc:d1:aa:70:e6:da:f8:45:2d:f4:7e:0e:09:45:a3:
60:12:e3:db:83:0e:58:78:9f:fa:aa:d5:4b:47:91:
80:3c:0f:7b:bf:a7:e5:e5:3a:35:a3:2d:6f:57:c1:
50:38:62:2b:c5:42:65:37:2a:23:de:eb:bb:f5:68:
80:b9:f8:7c:0c:41:4c:81:63:3f:d8:ec:b4:ea:42:
55:44:a2:ad:73:c3:2c:34:ce:3e:a4:bd:7f:04:81:
29:3d:29:c9:ec:e6:dc:25:dd:99:c4:ab:54:5c:04:
b4:f5:c5:ee:32:c2:69:57:80:3b:2f:64:b7:3e:7c:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:22:9B:02:73:CD:B0:83:9A:B3:E9:1E:9E:72:83:05:FB:FD:D7:DC
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3yKbAnPNsIOas-kennKDBfv919w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:9d:e3:10:52:05:fc:12:10:b0:29:ef:3a:13:10:09:c8:72:
de:18:49:15:62:65:f1:f5:b1:c1:e4:e7:0f:b6:e8:bc:1f:a8:
64:cc:1c:09:5c:d5:9c:a5:62:f1:65:07:c9:73:7e:e4:f5:aa:
97:73:59:ca:97:26:4a:09:4e:84:5d:94:9f:c8:02:3b:fc:66:
c1:89:98:bc:59:6f:8b:f1:d7:0c:c9:8b:72:ed:e1:ca:c4:3c:
07:43:9c:64:2c:b8:a2:83:1b:a4:1b:f5:22:64:88:cb:67:3b:
cb:a1:75:68:c2:28:ba:d1:e6:9b:f0:7b:8b:18:35:a8:b0:24:
36:05:50:22:6b:c9:c3:a6:fd:07:6b:89:3c:f5:89:ce:9c:74:
b4:02:7b:79:06:cc:7e:f0:ab:ac:01:be:6c:ce:9b:a5:e2:aa:
d5:76:a2:52:69:94:09:86:58:61:70:42:b9:51:8e:33:e0:55:
09:3e:86:95:b0:49:f5:c8:96:47:8c:9c:39:8f:54:30:74:de:
e6:4d:ef:67:4c:5d:ff:25:e6:24:92:00:a3:ce:5a:3e:7e:f8:
5b:bf:9e:d5:cb:04:a3:41:19:39:4e:42:29:b6:c7:91:87:a4:
ba:29:4e:cf:38:8f:a5:47:da:c8:fd:ee:47:08:db:6c:3d:7f:
52:f8:8a:37
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY7AMwNiXzIiOpqKIXsc9MAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDA5MDAxMjMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjIyOWIwMjczY2RiMDgzOWFiM2U5MWU5ZTcyODMwNWZiZmRkN2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l6ngJ1DEMextBSug1eb82Ql5GEk
leNo1UXAoX7JghITp/PYJbTOp46m/DNJNmLnAZJtMP4pZDAquZuNzkruusEoFkiY
PWdzqMlGsvW9g9FunCA9YZCK9RRvF+hogGzWNC534P4exggJPffKtr04AgLr4xIh
0tJX5ZgAci5+h+Zh1T4R5mLM0apw5tr4RS30fg4JRaNgEuPbgw5YeJ/6qtVLR5GA
PA97v6fl5To1oy1vV8FQOGIrxUJlNyoj3uu79WiAufh8DEFMgWM/2Oy06kJVRKKt
c8MsNM4+pL1/BIEpPSnJ7ObcJd2ZxKtUXAS09cXuMsJpV4A7L2S3PnzLFQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN8imwJzzbCDmrPpHp5ygwX7/dfcMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvM3lLYkFuUE5zSU9hcy1rZW5uS0RCZnY5MTl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIOd4xBSBfwSELAp7zoT
EAnIct4YSRViZfH1scHk5w+26LwfqGTMHAlc1ZylYvFlB8lzfuT1qpdzWcqXJkoJ
ToRdlJ/IAjv8ZsGJmLxZb4vx1wzJi3Lt4crEPAdDnGQsuKKDG6Qb9SJkiMtnO8uh
dWjCKLrR5pvwe4sYNaiwJDYFUCJrycOm/QdriTz1ic6cdLQCe3kGzH7wq6wBvmzO
m6XiqtV2olJplAmGWGFwQrlRjjPgVQk+hpWwSfXIlkeMnDmPVDB03uZN72dMXf8l
5iSSAKPOWj5++Fu/ntXLBKNBGTlOQim2x5GHpLopTs84j6VH2sj97kcI22w9f1L4
ijc=
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:54 2025 by rpki-client