Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9RY4_jABDdDF1h6_gF_7HYGIgbU.roa
File: 9RY4_jABDdDF1h6_gF_7HYGIgbU.roa (raw, json)
Hash identifier: ey1H581E6Heg50yDr8pq+ygKkpsr71LpJLohYZPs7pE=
Subject key identifier: F5:16:38:FE:30:01:0D:D0:C5:D6:1E:BF:80:5F:FB:1D:81:88:81:B5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DB845D9FB0A41D8265301E68F3F58E7D9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9RY4_jABDdDF1h6_gF_7HYGIgbU.roa
Signing time: Sat 17 Feb 2024 18:13:21 +0000
ROA not before: Sat 17 Feb 2024 18:13:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b8:45:d9:fb:0a:41:d8:26:53:01:e6:8f:3f:58:e7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 17 18:13:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f51638fe30010dd0c5d61ebf805ffb1d818881b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:35:51:e2:71:da:75:89:21:8d:c4:e2:7d:
9c:d3:9e:f0:0d:1c:e1:36:a7:eb:cf:4a:68:76:f1:
84:74:6c:37:46:c3:d2:c9:d6:a6:5a:3f:ca:28:3d:
76:96:a9:1b:fd:e7:f4:4f:eb:89:7a:95:50:d3:08:
46:cd:96:87:ab:93:cb:bd:a9:1d:54:7e:58:63:86:
ec:d3:e8:7f:35:21:bf:94:e7:08:45:50:3c:b2:5f:
bb:bf:43:9a:bb:20:ce:17:60:5e:68:8a:15:3d:75:
45:24:a3:11:c8:49:33:a3:45:82:bc:8a:fa:1a:3c:
f4:70:b1:90:41:ac:0d:86:11:72:93:7d:e2:ca:79:
63:88:4a:a2:20:7a:bd:53:82:fb:23:fb:de:34:f0:
79:23:5c:3b:69:18:26:ea:13:6d:3a:9a:d4:37:66:
4e:a6:39:1a:74:ee:92:ce:92:ca:1e:53:8e:f0:9d:
f4:49:31:f3:f1:8b:15:7d:80:d2:f8:e4:84:53:c6:
03:9c:ec:33:02:09:5b:16:50:c1:9a:83:1c:28:22:
1f:b6:f9:9e:10:ec:d0:bb:f4:91:90:e8:71:f9:93:
eb:39:b2:c2:5a:35:ba:5a:61:1a:5d:15:9c:c4:17:
e3:7c:84:2a:98:a8:80:d5:58:cd:f7:aa:60:e4:51:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:16:38:FE:30:01:0D:D0:C5:D6:1E:BF:80:5F:FB:1D:81:88:81:B5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9RY4_jABDdDF1h6_gF_7HYGIgbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:f1:73:88:b3:63:1b:ad:d4:92:88:ea:d0:53:32:ed:78:ce:
9a:c8:57:ba:3c:1f:50:9c:a9:36:f6:a4:8a:8a:f1:6d:44:7a:
28:83:6d:4a:cd:5e:b5:dd:1d:63:b2:18:2f:30:07:32:55:08:
b2:cc:6f:99:8d:9b:cb:50:53:6f:c2:e9:e3:b2:c6:3b:b2:31:
52:b3:bd:5a:58:42:e4:81:6b:ae:3e:ef:50:78:87:12:b2:52:
7f:58:9b:0d:0a:f4:b4:9f:4f:fd:af:79:af:e3:9e:19:9c:e8:
2e:66:40:a8:1c:25:f2:1b:f0:b9:4c:bb:b3:3f:2b:e0:61:5d:
08:1d:e8:c6:61:ce:30:86:ab:b2:f7:60:01:6f:65:f9:b0:ab:
a7:8d:0a:41:de:29:e8:a6:5c:fe:ea:4f:fa:4c:f3:e9:26:03:
d2:ee:f9:c7:49:c6:b0:f5:40:7d:9e:99:9b:c3:79:46:61:3b:
89:ae:80:11:23:28:1b:f6:71:5d:72:ae:b0:70:2e:88:85:83:
2c:bd:f2:27:ad:d9:b6:f3:8c:83:e8:e9:4b:38:31:fa:d5:a3:
6c:bb:bf:74:8c:4c:90:60:bb:5e:90:66:fa:4b:40:d9:13:6d:
04:77:65:da:85:94:4f:45:0a:a4:41:27:4e:74:41:0f:05:a6:
78:d1:7c:8e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY24Rdn7CkHYJlMB5o8/WOfZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjE3MTgxMzIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTE2MzhmZTMwMDEwZGQwYzVkNjFlYmY4MDVmZmIxZDgxODg4MWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS01UeJx2nWJIY3E4n2c057wDRzh
Nqfrz0podvGEdGw3RsPSydamWj/KKD12lqkb/ef0T+uJepVQ0whGzZaHq5PLvakd
VH5YY4bs0+h/NSG/lOcIRVA8sl+7v0OauyDOF2BeaIoVPXVFJKMRyEkzo0WCvIr6
Gjz0cLGQQawNhhFyk33iynljiEqiIHq9U4L7I/veNPB5I1w7aRgm6hNtOprUN2ZO
pjkadO6SzpLKHlOO8J30STHz8YsVfYDS+OSEU8YDnOwzAglbFlDBmoMcKCIftvme
EOzQu/SRkOhx+ZPrObLCWjW6WmEaXRWcxBfjfIQqmKiA1VjN96pg5FF3owIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPUWOP4wAQ3QxdYev4Bf+x2BiIG1MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvOVJZNF9qQUJEZERGMWg2X2dGXzdIWUdJZ2JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB3xc4izYxut1JKI6tBT
Mu14zprIV7o8H1CcqTb2pIqK8W1EeiiDbUrNXrXdHWOyGC8wBzJVCLLMb5mNm8tQ
U2/C6eOyxjuyMVKzvVpYQuSBa64+71B4hxKyUn9Ymw0K9LSfT/2vea/jnhmc6C5m
QKgcJfIb8LlMu7M/K+BhXQgd6MZhzjCGq7L3YAFvZfmwq6eNCkHeKeimXP7qT/pM
8+kmA9Lu+cdJxrD1QH2emZvDeUZhO4mugBEjKBv2cV1yrrBwLoiFgyy98iet2bbz
jIPo6Us4MfrVo2y7v3SMTJBgu16QZvpLQNkTbQR3ZdqFlE9FCqRBJ050QQ8FpnjR
fI4=
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:57:28 2025 by rpki-client