Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8iU1ktOB8Z00SOPnE7vf02Jbt2c.roa
File: 8iU1ktOB8Z00SOPnE7vf02Jbt2c.roa (raw, json)
Hash identifier: 5cErEqzmrGCGgnOPEGEXv6sbWJiO/VlNk27iR0dOrEE=
Subject key identifier: F2:25:35:92:D3:81:F1:9D:34:48:E3:E7:13:BB:DF:D3:62:5B:B7:67
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E96FF69E2D9A9E3051945E964CFC394AA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8iU1ktOB8Z00SOPnE7vf02Jbt2c.roa
Signing time: Mon 01 Apr 2024 00:11:44 +0000
ROA not before: Mon 01 Apr 2024 00:11:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:96:ff:69:e2:d9:a9:e3:05:19:45:e9:64:cf:c3:94:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 1 00:11:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2253592d381f19d3448e3e713bbdfd3625bb767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:ec:f7:84:57:75:9d:6d:12:1b:d1:30:6a:
a3:17:d1:d5:be:1c:eb:7e:12:30:b8:7f:06:c4:4d:
ea:ba:b7:a9:76:ab:5a:e1:b1:cd:b2:ce:c8:9c:ac:
1f:03:3a:26:1b:59:12:49:c0:e0:b1:6d:38:48:72:
91:dc:a5:6f:05:91:7d:6d:dc:14:68:77:80:ef:7a:
3f:08:dc:2a:9e:e1:4a:c3:d0:1e:77:f8:5f:e9:ea:
f1:3c:86:a5:d8:61:77:21:3b:50:5a:69:37:8d:72:
ac:71:d9:73:8a:bd:ce:14:7e:56:c9:e9:fb:8f:7a:
91:5e:1e:5f:1a:e1:2c:c4:ad:38:42:4a:09:d7:61:
6c:c5:1a:a7:b6:8a:86:b3:3c:b0:ce:7c:d0:fc:e4:
9c:ba:a6:97:f6:02:34:ca:15:c1:d3:fb:6f:cc:fb:
fa:af:c8:4f:30:b4:44:d2:71:38:d7:98:2a:66:ae:
c0:c4:9b:58:04:09:be:52:af:44:ff:d6:d5:b8:d6:
f6:7f:47:b7:b9:33:cf:e1:3d:10:80:64:22:d5:6c:
f4:a7:73:16:b1:41:65:83:01:e9:00:48:24:b3:f3:
7f:af:8c:8e:bd:07:65:40:2a:65:32:c7:d7:72:20:
87:e8:94:96:45:a2:6d:9d:ca:ee:c3:ee:8d:5b:8a:
88:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:25:35:92:D3:81:F1:9D:34:48:E3:E7:13:BB:DF:D3:62:5B:B7:67
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8iU1ktOB8Z00SOPnE7vf02Jbt2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:68:5e:b5:64:ff:30:78:3c:ba:74:b5:d0:20:f6:18:6b:16:
7c:50:15:3b:43:74:4a:a4:bc:22:88:a1:56:8a:c2:76:22:9a:
03:34:27:e0:ca:71:f7:04:de:a2:72:84:2e:df:c3:5d:06:37:
cc:b1:68:e2:12:2e:3f:57:23:10:25:9c:83:0a:bc:75:59:25:
75:ab:2f:54:56:f0:d5:c0:83:69:82:2a:7a:c0:34:46:6c:61:
ab:56:6f:5b:0c:28:9a:cf:37:7c:bf:4e:3b:f1:13:09:72:68:
00:23:29:67:23:3d:ec:b8:4c:4e:16:17:98:39:d3:82:62:1b:
3d:6c:e3:24:91:f7:d5:0b:0c:bb:d8:7f:a0:77:a9:76:ca:7f:
5b:ea:00:ce:cd:be:30:7e:4a:f6:75:34:98:7e:cb:6f:93:09:
6e:40:5f:04:6a:f0:ea:47:06:28:dc:61:dd:67:03:da:49:b0:
30:d0:47:7c:8e:1f:d5:b6:d4:02:d6:2b:fd:27:94:93:25:89:
67:1e:b2:be:d6:77:e3:39:c5:f0:0e:2c:68:02:97:8a:c9:be:
68:37:35:60:03:f5:92:72:46:34:18:10:12:64:52:43:ee:70:
25:21:41:a2:91:c2:2e:e2:ba:8b:ca:98:24:49:71:8f:2f:59:
d1:f7:51:63
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6W/2ni2anjBRlF6WTPw5SqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDAxMDAxMTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjI1MzU5MmQzODFmMTlkMzQ0OGUzZTcxM2JiZGZkMzYyNWJiNzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5bs94RXdZ1tEhvRMGqjF9HVvhzr
fhIwuH8GxE3qurepdqta4bHNss7InKwfAzomG1kSScDgsW04SHKR3KVvBZF9bdwU
aHeA73o/CNwqnuFKw9Aed/hf6erxPIal2GF3ITtQWmk3jXKscdlzir3OFH5Wyen7
j3qRXh5fGuEsxK04QkoJ12FsxRqntoqGszywznzQ/OScuqaX9gI0yhXB0/tvzPv6
r8hPMLRE0nE415gqZq7AxJtYBAm+Uq9E/9bVuNb2f0e3uTPP4T0QgGQi1Wz0p3MW
sUFlgwHpAEgks/N/r4yOvQdlQCplMsfXciCH6JSWRaJtncruw+6NW4qI8QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPIlNZLTgfGdNEjj5xO739NiW7dnMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvOGlVMWt0T0I4WjAwU09QbkU3dmYwMkpidDJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADhoXrVk/zB4PLp0tdAg
9hhrFnxQFTtDdEqkvCKIoVaKwnYimgM0J+DKcfcE3qJyhC7fw10GN8yxaOISLj9X
IxAlnIMKvHVZJXWrL1RW8NXAg2mCKnrANEZsYatWb1sMKJrPN3y/TjvxEwlyaAAj
KWcjPey4TE4WF5g504JiGz1s4ySR99ULDLvYf6B3qXbKf1vqAM7NvjB+SvZ1NJh+
y2+TCW5AXwRq8OpHBijcYd1nA9pJsDDQR3yOH9W21ALWK/0nlJMliWcesr7Wd+M5
xfAOLGgCl4rJvmg3NWAD9ZJyRjQYEBJkUkPucCUhQaKRwi7iuovKmCRJcY8vWdH3
UWM=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:41 2025 by rpki-client