Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6vnfbprOONMEuBvPzdS-Fqj4-gU.roa
File: 6vnfbprOONMEuBvPzdS-Fqj4-gU.roa (raw, json)
Hash identifier: PzWNKqWUNvI6tEFw5o+OXzi23rab+x8kOsPxMWJxBuI=
Subject key identifier: EA:F9:DF:6E:9A:CE:38:D3:04:B8:1B:CF:CD:D4:BE:16:A8:F8:FA:05
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D9B19CBF38B6BA08619AC0A1D6C0328BA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6vnfbprOONMEuBvPzdS-Fqj4-gU.roa
Signing time: Mon 12 Feb 2024 02:16:15 +0000
ROA not before: Mon 12 Feb 2024 02:16:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9b:19:cb:f3:8b:6b:a0:86:19:ac:0a:1d:6c:03:28:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 12 02:16:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaf9df6e9ace38d304b81bcfcdd4be16a8f8fa05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:f0:6c:ea:9a:7d:e0:69:ee:7e:52:b9:a9:
51:bd:aa:f1:c4:00:4d:67:bd:7c:bf:c4:20:98:be:
a3:e8:92:23:46:46:62:8b:5d:bd:93:e6:a4:8c:52:
ef:82:64:5e:c1:92:3d:d8:8b:c5:a2:86:f3:7e:3a:
d3:0f:99:35:1c:c3:af:a7:c6:33:77:97:7c:06:34:
eb:81:13:18:be:46:b0:18:85:63:5e:ea:50:a5:e0:
fd:82:63:3e:fd:a6:cb:1c:30:aa:16:48:fb:04:4a:
a9:f6:9d:60:30:90:f9:17:f5:b7:af:3d:e9:77:01:
85:ce:ee:5d:27:31:e3:28:1c:e3:03:d6:6f:c6:11:
4d:26:33:ce:15:47:c9:70:85:98:ac:b2:cc:c0:af:
e2:3d:52:ce:d2:fe:f3:24:89:d4:a2:d7:4c:af:c7:
6f:c8:78:00:f5:dd:e7:c2:a1:2e:41:30:bc:de:c5:
19:51:a4:c6:33:d1:6e:4c:9e:88:c8:72:49:d0:42:
9a:2e:ee:de:50:56:ec:d9:a2:98:f5:18:aa:b3:71:
87:a4:1a:f3:60:89:ef:5a:bf:6d:73:c1:2a:b9:f4:
19:39:bc:d1:11:43:f4:84:a9:99:38:8c:ce:ef:a7:
a7:ef:a2:6f:ef:0b:3a:a5:7d:c9:a5:20:d8:b8:9a:
c6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F9:DF:6E:9A:CE:38:D3:04:B8:1B:CF:CD:D4:BE:16:A8:F8:FA:05
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6vnfbprOONMEuBvPzdS-Fqj4-gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:fa:97:2c:c4:a9:c6:f7:c9:72:4c:ed:46:25:c6:f5:a7:bd:
cd:cc:44:d2:00:ce:7e:1b:8f:80:97:b7:af:40:cc:8f:b4:a9:
66:71:90:f0:3f:9d:d5:39:72:19:c8:b2:21:39:be:9e:cb:fe:
eb:68:1d:a6:20:c1:bf:fc:2a:01:2a:6e:01:cf:54:90:fc:7a:
62:61:63:04:55:e6:2e:a3:a4:66:4c:73:4a:12:ce:19:98:09:
76:55:92:30:ae:12:dd:fa:4d:11:b4:bf:b1:87:9b:a2:b7:5b:
1d:a9:c6:98:c7:55:d7:b9:b5:a8:46:c0:0e:d9:02:f3:21:dc:
b3:27:70:aa:d5:64:af:47:8a:4a:81:f3:1f:38:9b:8f:83:48:
2e:2e:d1:3b:e7:22:7c:e8:2b:a7:47:6a:e6:26:84:24:2f:e1:
20:b4:5c:49:a0:09:c9:45:6d:47:68:1e:a6:6a:d4:2f:e6:0e:
39:ba:39:32:70:d4:48:d6:d0:05:a7:16:c6:cf:02:4c:a0:eb:
f9:8b:a5:50:39:2f:c2:98:7d:d7:f4:2b:54:9b:c9:38:b8:23:
d7:91:01:59:40:4f:5d:d7:30:c9:e1:b4:c7:e2:d5:96:5d:ad:
66:f5:7f:d7:c4:68:f9:3e:ae:e4:bc:a2:a4:59:3b:dc:e5:b7:
b7:7b:21:4c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY2bGcvzi2ughhmsCh1sAyi6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjEyMDIxNjE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWY5ZGY2ZTlhY2UzOGQzMDRiODFiY2ZjZGQ0YmUxNmE4ZjhmYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5TwbOqafeBp7n5SualRvarxxABN
Z718v8QgmL6j6JIjRkZii129k+akjFLvgmRewZI92IvFoobzfjrTD5k1HMOvp8Yz
d5d8BjTrgRMYvkawGIVjXupQpeD9gmM+/abLHDCqFkj7BEqp9p1gMJD5F/W3rz3p
dwGFzu5dJzHjKBzjA9ZvxhFNJjPOFUfJcIWYrLLMwK/iPVLO0v7zJInUotdMr8dv
yHgA9d3nwqEuQTC83sUZUaTGM9FuTJ6IyHJJ0EKaLu7eUFbs2aKY9Riqs3GHpBrz
YInvWr9tc8EqufQZObzREUP0hKmZOIzO76en76Jv7ws6pX3JpSDYuJrGAQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOr5326azjjTBLgbz83Uvhao+PoFMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvNnZuZmJwck9PTk1FdUJ2UHpkUy1GcWo0LWdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJX6lyzEqcb3yXJM7UYl
xvWnvc3MRNIAzn4bj4CXt69AzI+0qWZxkPA/ndU5chnIsiE5vp7L/utoHaYgwb/8
KgEqbgHPVJD8emJhYwRV5i6jpGZMc0oSzhmYCXZVkjCuEt36TRG0v7GHm6K3Wx2p
xpjHVde5tahGwA7ZAvMh3LMncKrVZK9HikqB8x84m4+DSC4u0TvnInzoK6dHauYm
hCQv4SC0XEmgCclFbUdoHqZq1C/mDjm6OTJw1EjW0AWnFsbPAkyg6/mLpVA5L8KY
fdf0K1SbyTi4I9eRAVlAT13XMMnhtMfi1ZZdrWb1f9fEaPk+ruS8oqRZO9zlt7d7
IUw=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:38 2025 by rpki-client