Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6fncMPhx6iBJy-sVr06RQa-SSO4.roa
File: 6fncMPhx6iBJy-sVr06RQa-SSO4.roa (raw, json)
Hash identifier: qYqWYcJEjJ5GTOU0P0yikI+z1foATqylyzAqO8CQKq8=
Subject key identifier: E9:F9:DC:30:F8:71:EA:20:49:CB:EB:15:AF:4E:91:41:AF:92:48:EE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E0C9343D14B3F754C45865CD601882EC0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6fncMPhx6iBJy-sVr06RQa-SSO4.roa
Signing time: Tue 05 Mar 2024 03:06:01 +0000
ROA not before: Tue 05 Mar 2024 03:06:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:c92:962d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0c:93:43:d1:4b:3f:75:4c:45:86:5c:d6:01:88:2e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 5 03:06:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9f9dc30f871ea2049cbeb15af4e9141af9248ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:1d:29:10:98:27:a2:42:27:a2:40:c8:b1:
05:61:9e:d3:30:2a:b7:bb:5c:83:b2:96:7d:75:38:
d3:8e:74:52:18:da:34:ac:c1:fe:1a:2a:55:37:60:
85:c0:c5:82:ca:12:33:76:6c:4b:ee:8a:ee:f2:8c:
ee:e7:90:16:4f:81:40:09:0a:6f:a3:bf:b5:8b:14:
5a:43:9d:df:cf:07:ed:63:fa:9e:f7:a3:f0:63:f4:
46:a9:78:a6:70:ca:d9:68:98:df:ea:3f:fc:a7:d8:
df:4a:fc:b1:68:86:14:43:a9:69:b5:79:6f:7f:ff:
da:0a:cd:de:43:51:60:9f:aa:04:6b:5f:ff:e3:a8:
82:c3:cd:b7:bf:83:bc:95:e3:b8:12:aa:e4:81:de:
40:97:6c:56:8d:35:33:1f:34:66:56:c2:6e:f2:6c:
4c:12:98:a3:0e:86:4e:e8:ce:39:74:f3:03:29:fc:
d2:9e:d1:82:b2:90:71:17:11:1c:9e:70:f2:8d:9c:
b9:0a:7c:01:ef:fb:6a:83:15:82:66:cb:d1:78:bc:
37:c4:f2:e6:83:29:2d:db:de:d4:02:ec:6c:60:91:
a2:69:b7:16:0c:2d:b6:a6:82:3b:a0:0b:a5:83:12:
a8:64:db:cf:56:25:ef:4f:74:e1:61:69:81:30:0a:
4c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F9:DC:30:F8:71:EA:20:49:CB:EB:15:AF:4E:91:41:AF:92:48:EE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6fncMPhx6iBJy-sVr06RQa-SSO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:b3:63:15:7f:2a:54:d6:72:b4:bd:90:93:8e:45:88:5b:1a:
c2:6d:bd:d4:6c:4a:d2:2c:0e:68:ce:db:27:3c:75:2b:86:ac:
dd:08:c5:c1:a2:7d:17:9e:29:ce:49:5a:2b:95:b2:d4:57:bc:
fd:01:a3:82:d3:65:c1:aa:55:56:b1:5a:c0:44:05:ee:24:63:
0b:3f:9e:b0:80:02:21:a6:b2:a8:31:b2:53:41:a8:ed:cc:3e:
1b:1a:66:87:08:c8:ce:e5:17:29:80:d0:63:ba:39:ac:2e:e0:
32:f2:e9:6c:bf:db:70:5a:e2:db:2f:33:c9:20:79:93:06:c4:
7a:ed:a0:70:d3:74:f6:9d:c8:b1:93:be:a1:58:0c:0b:bd:e4:
bb:8c:7f:29:d7:54:18:f4:cf:2f:bc:85:a4:52:46:a8:db:ee:
02:2a:da:f8:b7:b2:43:51:ac:a1:7d:c8:7f:cb:15:0c:87:83:
bd:f8:4f:31:79:59:61:05:32:9c:6c:30:b2:d9:c4:82:b6:bd:
1a:ca:03:5d:dc:0b:20:54:f0:de:90:0c:c3:31:c9:9f:a8:36:
2f:25:f7:9c:8f:3a:42:eb:1d:21:d0:c9:62:cb:d8:df:2c:8c:
f4:8a:98:d3:36:6a:02:38:46:48:d0:76:17:df:74:a5:55:ed:
fb:ac:61:0e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY4Mk0PRSz91TEWGXNYBiC7AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzA1MDMwNjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWY5ZGMzMGY4NzFlYTIwNDljYmViMTVhZjRlOTE0MWFmOTI0OGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNodKRCYJ6JCJ6JAyLEFYZ7TMCq3
u1yDspZ9dTjTjnRSGNo0rMH+GipVN2CFwMWCyhIzdmxL7oru8ozu55AWT4FACQpv
o7+1ixRaQ53fzwftY/qe96PwY/RGqXimcMrZaJjf6j/8p9jfSvyxaIYUQ6lptXlv
f//aCs3eQ1Fgn6oEa1//46iCw823v4O8leO4Eqrkgd5Al2xWjTUzHzRmVsJu8mxM
EpijDoZO6M45dPMDKfzSntGCspBxFxEcnnDyjZy5CnwB7/tqgxWCZsvReLw3xPLm
gykt297UAuxsYJGiabcWDC22poI7oAulgxKoZNvPViXvT3ThYWmBMApMpwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOn53DD4ceogScvrFa9OkUGvkkjuMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvNmZuY01QaHg2aUJKeS1zVnIwNlJRYS1TU080LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAByzYxV/KlTWcrS9kJOO
RYhbGsJtvdRsStIsDmjO2yc8dSuGrN0IxcGifReeKc5JWiuVstRXvP0Bo4LTZcGq
VVaxWsBEBe4kYws/nrCAAiGmsqgxslNBqO3MPhsaZocIyM7lFymA0GO6Oawu4DLy
6Wy/23Ba4tsvM8kgeZMGxHrtoHDTdPadyLGTvqFYDAu95LuMfynXVBj0zy+8haRS
Rqjb7gIq2vi3skNRrKF9yH/LFQyHg734TzF5WWEFMpxsMLLZxIK2vRrKA13cCyBU
8N6QDMMxyZ+oNi8l95yPOkLrHSHQyWLL2N8sjPSKmNM2agI4RkjQdhffdKVV7fus
YQ4=
-----END CERTIFICATE-----
Generated at Mon Jun 9 10:55:47 2025 by rpki-client