Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6Rv6i2MyxXfRcYwwIP7goXXmF0A.roa
File: 6Rv6i2MyxXfRcYwwIP7goXXmF0A.roa (raw, json)
Hash identifier: dBDQ5JPLMEqKfwEoMPRkT9o+c+hb3lbCjrGnl6jm5JA=
Subject key identifier: E9:1B:FA:8B:63:32:C5:77:D1:71:8C:30:20:FE:E0:A1:75:E6:17:40
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CB809C945BA1AE0200D336CBA3929C00F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6Rv6i2MyxXfRcYwwIP7goXXmF0A.roa
Signing time: Sat 30 Dec 2023 00:04:58 +0000
ROA not before: Sat 30 Dec 2023 00:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:b809:31e0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b8:09:c9:45:ba:1a:e0:20:0d:33:6c:ba:39:29:c0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 30 00:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e91bfa8b6332c577d1718c3020fee0a175e61740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:5b:c6:8d:95:81:6b:ad:59:48:28:57:e4:
70:08:05:a6:4e:10:e9:11:38:14:e2:8f:27:2b:c7:
f7:d1:b6:1a:2a:e9:b0:46:bd:4a:49:31:7e:73:3a:
e0:7d:24:60:a3:80:e7:33:90:e9:81:50:84:ac:7b:
67:2c:86:9e:f3:55:d0:a4:77:ec:7a:c6:0c:b6:f0:
b5:7d:df:4a:1f:26:a7:94:d3:c7:00:17:39:53:fb:
68:f2:f1:6b:f8:ac:7f:0b:10:6c:02:1b:af:88:8a:
0d:d2:37:87:7b:a4:ed:5e:0e:0a:e9:34:a7:1f:f7:
d9:81:1e:44:17:e9:85:f2:69:c4:44:53:59:70:13:
88:de:7c:da:af:5a:47:1c:d8:8c:ea:aa:cb:62:e2:
95:1c:f9:b0:fd:94:d0:92:f9:28:d3:72:45:42:ff:
3e:f5:eb:26:ab:e8:56:66:33:51:cd:80:6c:74:c7:
93:cb:61:8b:a1:c0:1d:30:78:bf:bc:23:d5:75:82:
a0:15:e4:43:e5:c1:b4:04:63:65:d3:ba:8e:a9:a4:
f5:8f:50:c4:be:4d:de:c6:bb:66:a6:ba:b4:ec:85:
3e:de:63:74:99:6c:80:d5:5b:91:4f:ba:4c:c8:86:
8c:e2:cc:10:92:87:9f:b4:5b:0c:50:58:a4:15:cd:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1B:FA:8B:63:32:C5:77:D1:71:8C:30:20:FE:E0:A1:75:E6:17:40
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6Rv6i2MyxXfRcYwwIP7goXXmF0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:a5:b1:a3:cb:cc:be:79:94:4f:d7:1f:35:4e:2e:22:b9:44:
cb:dd:f8:56:84:ee:bb:2c:ad:9e:51:00:71:68:2b:88:34:35:
1b:21:68:4b:67:65:17:36:6d:56:06:f3:58:ab:cf:db:85:4c:
fa:0d:2c:c3:c5:76:83:a4:8d:f7:5f:50:a5:06:1d:57:ac:41:
68:0c:5d:62:e3:2c:e0:fe:f9:13:22:df:0d:45:c9:21:59:ab:
aa:9b:fe:35:f6:e8:e6:e9:85:93:27:e4:2f:9f:24:47:3c:f2:
55:28:f4:71:c8:15:9b:da:14:72:7d:66:14:c1:3c:a8:02:4b:
24:a6:fc:5a:0d:cd:e6:11:7d:92:d0:d2:df:c8:27:bf:f8:b9:
58:1d:37:6a:65:19:c2:b4:1a:ba:41:8d:70:43:8a:74:9d:67:
fd:f4:9a:0b:e6:84:e3:79:47:2e:58:0c:36:34:f4:9c:35:43:
1f:9a:ab:50:50:b0:72:75:ae:0a:32:3c:d1:5e:19:cf:fb:cb:
4a:7f:2b:0d:f9:2d:46:ea:34:86:76:17:47:c6:e0:8a:95:bb:
cf:47:b6:09:f0:87:05:4a:23:74:92:25:10:0e:62:2a:d2:52:
a0:40:60:4b:51:0a:d4:30:13:f2:ba:4f:5c:0b:48:89:81:3f:
a3:a7:1d:a9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYy4CclFuhrgIA0zbLo5KcAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjMwMDAwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTFiZmE4YjYzMzJjNTc3ZDE3MThjMzAyMGZlZTBhMTc1ZTYxNzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEdbxo2VgWutWUgoV+RwCAWmThDp
ETgU4o8nK8f30bYaKumwRr1KSTF+czrgfSRgo4DnM5DpgVCErHtnLIae81XQpHfs
esYMtvC1fd9KHyanlNPHABc5U/to8vFr+Kx/CxBsAhuviIoN0jeHe6TtXg4K6TSn
H/fZgR5EF+mF8mnERFNZcBOI3nzar1pHHNiM6qrLYuKVHPmw/ZTQkvko03JFQv8+
9esmq+hWZjNRzYBsdMeTy2GLocAdMHi/vCPVdYKgFeRD5cG0BGNl07qOqaT1j1DE
vk3exrtmprq07IU+3mN0mWyA1VuRT7pMyIaM4swQkoeftFsMUFikFc15sQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOkb+otjMsV30XGMMCD+4KF15hdAMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvNlJ2NmkyTXl4WGZSY1l3d0lQN2dvWFhtRjBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADOlsaPLzL55lE/XHzVO
LiK5RMvd+FaE7rssrZ5RAHFoK4g0NRshaEtnZRc2bVYG81irz9uFTPoNLMPFdoOk
jfdfUKUGHVesQWgMXWLjLOD++RMi3w1FySFZq6qb/jX26ObphZMn5C+fJEc88lUo
9HHIFZvaFHJ9ZhTBPKgCSySm/FoNzeYRfZLQ0t/IJ7/4uVgdN2plGcK0GrpBjXBD
inSdZ/30mgvmhON5Ry5YDDY09Jw1Qx+aq1BQsHJ1rgoyPNFeGc/7y0p/Kw35LUbq
NIZ2F0fG4IqVu89HtgnwhwVKI3SSJRAOYirSUqBAYEtRCtQwE/K6T1wLSImBP6On
Hak=
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:02:11 2025 by rpki-client