Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6-K5euPvV0Zolb05HR_4YPhI0HA.roa
File: 6-K5euPvV0Zolb05HR_4YPhI0HA.roa (raw, json)
Hash identifier: l+jFLKrsX3o1QMWq6xKZW3TMAMirOmMK7Gsi5vLW8Ag=
Subject key identifier: EB:E2:B9:7A:E3:EF:57:46:68:95:BD:39:1D:1F:F8:60:F8:48:D0:70
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E908F77447D78DD469848BC4CDDC66F0C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6-K5euPvV0Zolb05HR_4YPhI0HA.roa
Signing time: Sat 30 Mar 2024 18:11:44 +0000
ROA not before: Sat 30 Mar 2024 18:11:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:90:8f:77:44:7d:78:dd:46:98:48:bc:4c:dd:c6:6f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 30 18:11:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebe2b97ae3ef57466895bd391d1ff860f848d070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:5e:2e:c3:5a:fc:f4:63:6e:df:e4:53:0a:
05:d1:b0:dd:e8:37:32:90:36:b3:a3:75:3c:b9:40:
bd:9a:69:2f:3d:57:c3:d4:ed:d2:90:e2:e9:c3:26:
6c:d1:e7:6f:e6:ca:19:31:b0:7c:73:0b:9b:d4:17:
ef:22:48:e7:f8:ab:58:74:4f:84:13:b4:e1:b7:6c:
2b:26:d9:d9:17:cd:c1:33:1b:4e:14:93:09:c1:f1:
db:1b:69:4c:30:2e:2c:bd:1a:c5:7b:af:3a:f6:c3:
73:fe:6b:e7:40:99:1b:16:d5:3b:da:a2:f2:4f:cd:
43:fb:72:6b:ba:9e:14:81:d0:66:aa:f7:ef:04:6d:
d0:cc:7f:80:8b:d8:bf:be:05:96:30:8e:86:2d:83:
c1:cd:7e:2d:0a:72:11:44:5d:6f:cc:86:ce:71:00:
de:47:c1:07:0a:ec:4f:6e:8c:af:db:cc:ef:ef:c4:
cd:f1:58:83:aa:ae:4f:65:cb:05:09:5c:71:5d:62:
e2:89:b6:67:2b:6b:0b:60:ff:84:83:00:40:57:66:
9a:92:ae:a3:dc:43:94:37:dc:a8:db:87:d1:e5:f8:
e8:83:a4:07:21:69:ba:5d:61:76:df:93:5d:e7:fd:
31:b2:c3:54:5b:9a:f3:09:ed:9a:19:3a:a9:07:cd:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E2:B9:7A:E3:EF:57:46:68:95:BD:39:1D:1F:F8:60:F8:48:D0:70
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6-K5euPvV0Zolb05HR_4YPhI0HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:8b:72:25:c5:78:b7:a0:ec:7e:64:b6:7f:99:de:c9:71:73:
45:72:10:24:41:0f:44:c4:c6:30:7b:59:32:df:89:b5:39:3e:
9e:c6:c6:3d:47:aa:52:21:4f:67:d2:12:12:b8:41:06:be:cc:
ad:4c:02:17:c2:82:26:8c:50:2c:53:71:3e:46:b6:6c:e5:18:
ed:86:18:16:84:88:2c:aa:72:24:5e:e9:64:d7:57:d7:3b:56:
48:e5:2a:53:cf:5a:83:dd:2e:40:4e:4a:73:74:03:b6:51:bc:
0c:08:68:0f:b3:c9:2c:1a:4a:5d:89:5c:97:06:45:c3:8e:fb:
44:21:44:e8:8a:fc:c8:50:dd:1b:e7:6d:35:f2:99:41:46:7c:
81:f2:88:aa:00:1a:47:20:ae:69:4d:48:8c:25:01:25:7a:94:
85:49:9f:6a:2a:84:91:1e:9c:81:d8:af:90:0c:81:05:41:f8:
00:5a:81:fc:3a:5a:30:f0:5f:12:bf:5f:45:e6:70:f3:32:8e:
b4:f8:2c:cc:67:b2:5a:f1:d8:ea:59:0c:34:6d:b8:10:b5:c5:
a2:a4:52:ec:9f:f0:32:27:e1:08:e6:3a:00:ff:7a:5a:4d:32:
15:29:ae:7e:70:3d:af:6f:b4:4a:aa:28:b5:75:39:b6:ec:ce:
d2:f9:a9:3e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6Qj3dEfXjdRphIvEzdxm8MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzMwMTgxMTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmUyYjk3YWUzZWY1NzQ2Njg5NWJkMzkxZDFmZjg2MGY4NDhkMDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwheLsNa/PRjbt/kUwoF0bDd6Dcy
kDazo3U8uUC9mmkvPVfD1O3SkOLpwyZs0edv5soZMbB8cwub1BfvIkjn+KtYdE+E
E7Tht2wrJtnZF83BMxtOFJMJwfHbG2lMMC4svRrFe6869sNz/mvnQJkbFtU72qLy
T81D+3Jrup4UgdBmqvfvBG3QzH+Ai9i/vgWWMI6GLYPBzX4tCnIRRF1vzIbOcQDe
R8EHCuxPboyv28zv78TN8ViDqq5PZcsFCVxxXWLiibZnK2sLYP+EgwBAV2aakq6j
3EOUN9yo24fR5fjog6QHIWm6XWF235Nd5/0xssNUW5rzCe2aGTqpB815BwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOviuXrj71dGaJW9OR0f+GD4SNBwMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvNi1LNWV1UHZWMFpvbGIwNUhSXzRZUGhJMEhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEWLciXFeLeg7H5ktn+Z
3slxc0VyECRBD0TExjB7WTLfibU5Pp7Gxj1HqlIhT2fSEhK4QQa+zK1MAhfCgiaM
UCxTcT5GtmzlGO2GGBaEiCyqciRe6WTXV9c7VkjlKlPPWoPdLkBOSnN0A7ZRvAwI
aA+zySwaSl2JXJcGRcOO+0QhROiK/MhQ3RvnbTXymUFGfIHyiKoAGkcgrmlNSIwl
ASV6lIVJn2oqhJEenIHYr5AMgQVB+ABagfw6WjDwXxK/X0XmcPMyjrT4LMxnslrx
2OpZDDRtuBC1xaKkUuyf8DIn4QjmOgD/elpNMhUprn5wPa9vtEqqKLV1ObbsztL5
qT4=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:27 2025 by rpki-client