Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/73RN_tvQ1NW5f2ma-2aaTQ8bicI.roa
File: 73RN_tvQ1NW5f2ma-2aaTQ8bicI.roa (raw, json)
Hash identifier: 4LDzmZOrCp1pLxUajbgO9wPJpzoJKZmbJvhXy2WIUmM=
Subject key identifier: EF:74:4D:FE:DB:D0:D4:D5:B9:7F:69:9A:FB:66:9A:4D:0F:1B:89:C2
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA4F91BDD57904602A76011F15E9CF6EC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/73RN_tvQ1NW5f2ma-2aaTQ8bicI.roa
Signing time: Tue 26 Dec 2023 07:13:58 +0000
ROA not before: Tue 26 Dec 2023 07:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a4:f9:1b:dd:57:90:46:02:a7:60:11:f1:5e:9c:f6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 26 07:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef744dfedbd0d4d5b97f699afb669a4d0f1b89c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b9:ce:2a:46:15:38:6d:64:03:e2:25:48:46:
53:d9:21:ff:b0:ce:1c:ce:b0:0a:23:cf:8b:ae:79:
ac:ac:7f:56:09:4e:f8:38:4c:d9:24:a9:3f:2d:c9:
8c:62:87:8c:ae:80:cf:6f:39:0e:2a:84:9a:44:11:
7c:26:5e:6b:58:54:63:b8:1f:9a:86:84:8d:08:3b:
dd:64:77:b8:6b:09:3e:58:83:75:a1:ca:7b:e7:02:
fd:d5:45:c4:c7:83:a1:14:30:75:56:d6:9e:7a:3c:
f5:96:ba:55:55:21:cd:4b:2f:d8:8d:24:e2:b5:3f:
95:fa:12:81:21:38:0d:98:be:2a:5e:16:91:f0:fa:
ce:7d:4c:7c:e6:5b:84:67:c4:ef:e2:89:c7:6e:d5:
0b:53:33:8b:a7:ba:a1:01:16:25:c7:79:82:5a:44:
a8:05:af:e7:72:ef:62:50:6d:02:ef:3d:cf:2b:a9:
f2:17:12:2e:b9:cc:63:a9:59:c7:d6:17:31:44:b9:
50:72:7c:ff:7d:11:57:4b:6f:13:ee:22:87:83:00:
d0:3a:ad:85:1b:ad:f4:f9:95:d8:ac:a4:ed:f4:b2:
2b:a1:8f:f6:94:16:89:08:04:f0:70:64:af:e6:99:
50:31:5e:63:60:4f:b7:9c:b8:06:d0:9e:89:e9:8b:
bc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:74:4D:FE:DB:D0:D4:D5:B9:7F:69:9A:FB:66:9A:4D:0F:1B:89:C2
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/73RN_tvQ1NW5f2ma-2aaTQ8bicI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:11:8a:86:92:a8:d7:ae:bb:0e:2a:71:00:3b:1c:96:ae:fd:
ce:f2:62:d8:fc:6b:cd:50:ae:cb:c1:c4:11:ba:0c:20:ed:98:
3b:37:b8:98:e1:8b:f4:0b:99:5f:67:54:3f:13:f8:9e:2b:15:
c3:8f:84:ec:e8:3f:44:41:d8:13:c9:26:3c:61:54:ef:1b:f1:
a7:e1:f8:9a:b6:6c:a2:4d:99:82:a6:d8:33:27:95:7c:b0:36:
f0:8a:1d:f4:75:83:5b:15:5d:cf:96:3f:52:c9:9c:95:4e:a1:
61:52:1b:06:cb:d4:f0:1f:88:4b:87:3c:83:2e:fa:36:9c:e1:
b4:bd:26:7d:a1:3d:78:d2:5a:ef:a9:a9:ce:46:70:af:1a:c8:
dc:93:fb:be:54:2f:cd:a2:fb:fb:1f:05:7a:b2:e2:e2:80:aa:
fb:4f:18:7d:d5:3a:9a:4e:1f:fa:ce:bf:38:34:eb:97:5a:46:
b9:7e:aa:0b:ce:b2:92:de:7e:ba:f0:0d:47:79:fa:c6:e5:d5:
8e:a5:81:e9:47:87:ef:1b:7f:f4:1d:a8:b8:32:7b:36:af:d7:
f6:b7:74:a1:7e:7c:20:7a:fd:36:96:39:dc:e9:6a:a2:ed:12:
a9:83:15:c8:fd:14:b6:e1:97:46:98:b9:69:f4:38:c2:fc:d1:
a7:5e:da:d7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYyk+RvdV5BGAqdgEfFenPbsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjI2MDcxMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjc0NGRmZWRiZDBkNGQ1Yjk3ZjY5OWFmYjY2OWE0ZDBmMWI4OWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbnOKkYVOG1kA+IlSEZT2SH/sM4c
zrAKI8+LrnmsrH9WCU74OEzZJKk/LcmMYoeMroDPbzkOKoSaRBF8Jl5rWFRjuB+a
hoSNCDvdZHe4awk+WIN1ocp75wL91UXEx4OhFDB1Vtaeejz1lrpVVSHNSy/YjSTi
tT+V+hKBITgNmL4qXhaR8PrOfUx85luEZ8Tv4onHbtULUzOLp7qhARYlx3mCWkSo
Ba/ncu9iUG0C7z3PK6nyFxIuucxjqVnH1hcxRLlQcnz/fRFXS28T7iKHgwDQOq2F
G630+ZXYrKTt9LIroY/2lBaJCATwcGSv5plQMV5jYE+3nLgG0J6J6Yu8WQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO90Tf7b0NTVuX9pmvtmmk0PG4nCMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvNzNSTl90dlExTlc1ZjJtYS0yYWFUUThiaWNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAQRioaSqNeuuw4qcQA7
HJau/c7yYtj8a81QrsvBxBG6DCDtmDs3uJjhi/QLmV9nVD8T+J4rFcOPhOzoP0RB
2BPJJjxhVO8b8afh+Jq2bKJNmYKm2DMnlXywNvCKHfR1g1sVXc+WP1LJnJVOoWFS
GwbL1PAfiEuHPIMu+jac4bS9Jn2hPXjSWu+pqc5GcK8ayNyT+75UL82i+/sfBXqy
4uKAqvtPGH3VOppOH/rOvzg065daRrl+qgvOspLefrrwDUd5+sbl1Y6lgelHh+8b
f/QdqLgyezav1/a3dKF+fCB6/TaWOdzpaqLtEqmDFcj9FLbhl0aYuWn0OML80ade
2tc=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:35 2025 by rpki-client