Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6gPBEzvIknvHImqnS2gpYCvNzF4.roa
File: 6gPBEzvIknvHImqnS2gpYCvNzF4.roa (raw, json)
Hash identifier: Iz0mAiy+X07RbGIlhyRoZY3VfRv+jEBUASky6N1S5e4=
Subject key identifier: EA:03:C1:13:3B:C8:92:7B:C7:22:6A:A7:4B:68:29:60:2B:CD:CC:5E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8BA46DC9E2F7CB367A4DE67724DB8BD0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6gPBEzvIknvHImqnS2gpYCvNzF4.roa
Signing time: Thu 21 Dec 2023 09:10:58 +0000
ROA not before: Thu 21 Dec 2023 09:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:a4:6d:c9:e2:f7:cb:36:7a:4d:e6:77:24:db:8b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 09:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea03c1133bc8927bc7226aa74b6829602bcdcc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:49:11:4c:8b:d5:2c:fa:03:11:16:15:12:8f:
12:92:84:bb:ce:a8:64:27:22:0d:c3:5a:85:15:b8:
83:37:a3:10:49:4c:6c:53:d3:98:80:f2:09:0a:ea:
17:d7:98:fb:57:08:fc:53:10:96:b4:1f:dd:90:76:
63:47:a3:6a:13:34:d7:85:ea:6e:61:b9:35:26:ce:
f0:54:1f:4f:95:a6:85:b2:f4:e4:92:19:07:17:25:
72:c5:c6:be:a5:e4:a2:26:c0:ab:40:17:b4:58:b2:
9b:5d:1d:b2:41:7a:e1:8b:58:4c:02:1f:16:ce:d2:
61:25:59:11:ef:e5:09:49:e6:53:75:17:96:9d:9a:
42:e1:d3:a7:f6:17:5c:df:0d:de:10:d5:cc:26:84:
d1:da:dc:c3:4b:ca:a4:5f:9e:da:c4:63:50:ea:58:
29:b5:0e:88:f6:0b:1d:c2:16:9b:2c:f9:14:d0:d7:
f6:0e:62:24:c1:32:87:87:cd:5c:6e:6e:b8:df:08:
b9:c9:1b:3f:86:df:91:96:36:d9:d9:9c:3b:96:a2:
02:7f:0d:0f:22:fc:ce:70:54:91:bf:61:7d:75:49:
0b:c6:b3:0f:8f:cb:02:9a:f6:23:17:67:a0:73:61:
d7:8e:b8:6c:62:a7:1c:d5:e0:51:7f:cc:7a:56:5e:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:03:C1:13:3B:C8:92:7B:C7:22:6A:A7:4B:68:29:60:2B:CD:CC:5E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6gPBEzvIknvHImqnS2gpYCvNzF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:ff:25:db:9f:64:75:51:9a:2a:58:ca:71:fc:76:00:cb:c6:
6d:5a:08:28:f8:fa:1d:67:6a:19:d0:7c:95:f9:e8:8e:a9:eb:
9c:11:12:92:a3:8b:3c:0e:40:29:e8:b6:4f:3a:ce:ee:8c:7a:
6b:93:cd:b6:ec:c8:69:f0:58:4a:c1:9e:6e:c5:b0:95:ca:b6:
3e:05:1f:98:f0:1e:2f:91:49:b6:37:db:ff:ba:38:04:3d:32:
33:af:24:08:8c:1a:f8:aa:46:ab:37:c0:f5:dd:18:43:ce:16:
e2:3f:0c:10:61:78:ac:9c:99:b1:3e:ac:64:7c:68:0b:9d:f5:
7c:86:60:3b:a4:86:c4:3f:db:cb:69:54:ad:42:50:ac:f7:79:
bd:e8:14:3a:b9:34:0a:c7:51:f9:0a:d1:7a:15:58:29:30:52:
f4:a2:60:6a:cc:9d:41:05:84:6d:8a:0e:e0:03:dc:dc:64:43:
75:33:cd:fc:55:e6:16:2c:44:b9:fe:0f:a1:1a:7e:63:aa:f4:
37:3c:dd:74:12:42:a2:7e:a4:e1:bb:cb:01:16:f5:07:79:c9:
5f:30:b9:eb:86:71:39:33:22:cb:ca:1e:9a:60:4e:0f:c0:10:
80:82:10:b8:14:0e:56:0b:80:bb:40:bb:70:c3:46:bb:e2:61:
9c:1f:26:5e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYyLpG3J4vfLNnpN5nck24vQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjIxMDkxMDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTAzYzExMzNiYzg5MjdiYzcyMjZhYTc0YjY4Mjk2MDJiY2RjYzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkkRTIvVLPoDERYVEo8SkoS7zqhk
JyINw1qFFbiDN6MQSUxsU9OYgPIJCuoX15j7Vwj8UxCWtB/dkHZjR6NqEzTXhepu
Ybk1Js7wVB9PlaaFsvTkkhkHFyVyxca+peSiJsCrQBe0WLKbXR2yQXrhi1hMAh8W
ztJhJVkR7+UJSeZTdReWnZpC4dOn9hdc3w3eENXMJoTR2tzDS8qkX57axGNQ6lgp
tQ6I9gsdwhabLPkU0Nf2DmIkwTKHh81cbm643wi5yRs/ht+RljbZ2Zw7lqICfw0P
IvzOcFSRv2F9dUkLxrMPj8sCmvYjF2egc2HXjrhsYqcc1eBRf8x6Vl7MuwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOoDwRM7yJJ7xyJqp0toKWArzcxeMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvNmdQQkV6dklrbnZISW1xblMyZ3BZQ3ZOekY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADH/JdufZHVRmipYynH8
dgDLxm1aCCj4+h1nahnQfJX56I6p65wREpKjizwOQCnotk86zu6MemuTzbbsyGnw
WErBnm7FsJXKtj4FH5jwHi+RSbY32/+6OAQ9MjOvJAiMGviqRqs3wPXdGEPOFuI/
DBBheKycmbE+rGR8aAud9XyGYDukhsQ/28tpVK1CUKz3eb3oFDq5NArHUfkK0XoV
WCkwUvSiYGrMnUEFhG2KDuAD3NxkQ3UzzfxV5hYsRLn+D6EafmOq9Dc83XQSQqJ+
pOG7ywEW9Qd5yV8wueuGcTkzIsvKHppgTg/AEICCELgUDlYLgLtAu3DDRrviYZwf
Jl4=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:53 2025 by rpki-client