Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7AcBvEqWVBWE33WUlBOgVJaomrM.roa
File: 7AcBvEqWVBWE33WUlBOgVJaomrM.roa (raw, json)
Hash identifier: 8Qh7vuDfoSh1iFOZp7GSgl2mqpxT4FszPh78pPGyBsE=
Subject key identifier: EC:07:01:BC:4A:96:54:15:84:DF:75:94:94:13:A0:54:96:A8:9A:B3
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DBC51508086C4714CE1CB36DE6E11D06D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7AcBvEqWVBWE33WUlBOgVJaomrM.roa
Signing time: Sun 18 Feb 2024 13:04:22 +0000
ROA not before: Sun 18 Feb 2024 13:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:bc51:2fc3/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bc:51:50:80:86:c4:71:4c:e1:cb:36:de:6e:11:d0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 18 13:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec0701bc4a96541584df75949413a05496a89ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:00:8d:b8:d1:65:4a:7c:e8:64:d5:7e:1d:
b6:3f:98:93:28:d7:8b:a5:fe:89:ef:25:f1:95:44:
9e:c8:b7:de:ef:3c:b7:9e:8f:c6:b3:45:30:6c:6f:
5d:0b:56:a9:67:10:69:d3:af:57:4d:f3:44:fd:cd:
27:17:65:1a:19:a2:ca:03:2f:45:c9:2c:7d:04:ec:
3a:b7:5b:89:d6:0c:f7:81:d9:15:68:9b:21:f4:af:
7f:16:f5:c9:21:da:f6:91:06:d8:8a:00:4f:21:5e:
1b:f9:86:3c:93:e7:04:74:e4:81:98:bb:9d:5c:cd:
3b:3c:36:fc:22:92:c2:d0:7e:20:91:a9:4f:d5:38:
5d:fa:fe:df:27:5e:61:a5:ab:5b:b1:19:d6:2f:e9:
83:e2:81:a2:d8:0c:ee:b1:f5:68:75:13:d0:28:32:
e6:90:a5:15:38:ed:f0:a2:7e:81:de:d5:12:84:68:
33:d4:3e:ed:be:74:ca:57:d1:57:c4:be:40:0f:84:
d6:ae:35:6c:50:eb:1f:29:df:c9:8a:96:17:dd:4e:
65:85:dd:48:6c:ec:f7:24:38:c8:af:6e:a6:69:82:
bd:29:37:c5:57:d0:f5:7e:9e:70:ef:37:b8:ab:67:
ee:fb:6c:f5:04:28:7b:82:50:12:c0:bc:7c:e0:16:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:07:01:BC:4A:96:54:15:84:DF:75:94:94:13:A0:54:96:A8:9A:B3
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7AcBvEqWVBWE33WUlBOgVJaomrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:18:bc:9a:42:0a:a7:a9:49:a3:73:f0:34:84:a5:d1:e4:5f:
c6:b5:42:d1:1f:0f:a4:bd:11:c4:b2:ea:71:a1:a9:e2:32:58:
e2:7b:cb:26:b4:aa:a8:bb:8d:75:af:80:b5:75:a8:8f:81:c4:
9f:8e:45:97:97:bf:f8:d4:14:f3:c5:e0:c9:9c:2c:78:20:b3:
1e:e9:aa:50:d3:89:85:6b:5f:8d:54:35:36:b3:9f:65:4f:ff:
c5:3a:92:b0:68:a6:63:65:c5:6c:2c:0b:52:45:99:78:fc:e2:
d1:e4:90:8b:58:52:5b:96:00:0b:35:a9:ca:2c:be:ba:fa:54:
7e:96:3f:88:f0:e4:d2:98:23:d4:1b:fb:b7:1d:8e:9e:1e:cd:
80:76:82:5e:51:2b:5f:92:a9:c2:a3:49:65:1d:b6:67:7f:e6:
6f:06:02:27:8d:81:07:5f:c6:21:29:e1:34:bd:32:62:b6:b7:
06:02:72:3a:68:91:df:25:99:80:d0:cf:46:81:f7:0d:cc:9a:
4f:7c:ec:29:12:ea:a4:1d:35:77:b1:6a:92:49:81:17:5c:35:
3d:c4:c1:91:e3:46:1d:ba:95:72:c9:79:12:23:37:ec:8f:e6:
8d:42:d3:67:a1:71:60:77:9a:d6:02:a6:3d:17:56:18:64:9a:
8a:43:e5:8a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY28UVCAhsRxTOHLNt5uEdBtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjE4MTMwNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzA3MDFiYzRhOTY1NDE1ODRkZjc1OTQ5NDEzYTA1NDk2YTg5YWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnQAjbjRZUp86GTVfh22P5iTKNeL
pf6J7yXxlUSeyLfe7zy3no/Gs0UwbG9dC1apZxBp069XTfNE/c0nF2UaGaLKAy9F
ySx9BOw6t1uJ1gz3gdkVaJsh9K9/FvXJIdr2kQbYigBPIV4b+YY8k+cEdOSBmLud
XM07PDb8IpLC0H4gkalP1Thd+v7fJ15hpatbsRnWL+mD4oGi2AzusfVodRPQKDLm
kKUVOO3won6B3tUShGgz1D7tvnTKV9FXxL5AD4TWrjVsUOsfKd/JipYX3U5lhd1I
bOz3JDjIr26maYK9KTfFV9D1fp5w7ze4q2fu+2z1BCh7glASwLx84BbVWQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOwHAbxKllQVhN91lJQToFSWqJqzMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvN0FjQnZFcVdWQldFMzNXVWxCT2dWSmFvbXJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABAYvJpCCqepSaNz8DSE
pdHkX8a1QtEfD6S9EcSy6nGhqeIyWOJ7yya0qqi7jXWvgLV1qI+BxJ+ORZeXv/jU
FPPF4MmcLHggsx7pqlDTiYVrX41UNTazn2VP/8U6krBopmNlxWwsC1JFmXj84tHk
kItYUluWAAs1qcosvrr6VH6WP4jw5NKYI9Qb+7cdjp4ezYB2gl5RK1+SqcKjSWUd
tmd/5m8GAieNgQdfxiEp4TS9MmK2twYCcjpokd8lmYDQz0aB9w3Mmk987CkS6qQd
NXexapJJgRdcNT3EwZHjRh26lXLJeRIjN+yP5o1C02ehcWB3mtYCpj0XVhhkmopD
5Yo=
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:38 2025 by rpki-client