Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/A4-e1372gH_RM0Sq7eqAfBfcjYE.roa
File: A4-e1372gH_RM0Sq7eqAfBfcjYE.roa (raw, json)
Hash identifier: 3/a8EAp3MsEyFBU5lxFnMfWRSUMVPWsl6lL2ba/+WMQ=
Subject key identifier: 03:8F:9E:D7:7E:F6:80:7F:D1:33:44:AA:ED:EA:80:7C:17:DC:8D:81
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E6F4EE5227E80443D270641B961A3EF81
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/A4-e1372gH_RM0Sq7eqAfBfcjYE.roa
Signing time: Sun 24 Mar 2024 07:13:45 +0000
ROA not before: Sun 24 Mar 2024 07:13:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6f:4e:e5:22:7e:80:44:3d:27:06:41:b9:61:a3:ef:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 24 07:13:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=038f9ed77ef6807fd13344aaedea807c17dc8d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:7b:e1:07:1e:0a:c9:be:d7:e5:d0:8f:87:
83:fd:91:90:62:23:6f:3e:25:2d:56:33:47:a6:0d:
e2:50:18:b3:6e:32:5a:e5:7c:43:11:90:4b:cd:c8:
fe:7a:1f:51:23:18:f8:be:b7:38:f9:41:f4:49:64:
e6:7f:53:9e:97:84:c1:d3:96:d8:37:cc:54:af:9f:
42:8d:64:cc:13:20:a1:5f:73:2e:5b:b6:3f:df:fb:
15:57:fc:42:43:4c:0b:7e:60:31:17:31:5a:d2:be:
ff:4a:79:57:9f:8d:4b:b5:3d:af:79:0a:3b:9d:73:
31:82:eb:82:40:7b:02:a5:d9:3a:b3:a3:19:2b:f1:
e4:4d:fc:83:9e:40:83:a3:8a:86:4e:40:78:e9:47:
13:34:fc:ac:71:b2:c4:13:94:f6:46:14:46:ff:dd:
78:a6:8c:74:81:9d:d5:aa:b5:6f:3d:d8:64:f1:16:
f9:28:21:70:7d:58:7a:98:22:bb:f8:d3:21:a9:b8:
fe:d5:23:70:cf:5d:f0:8b:16:25:f8:8b:c7:60:25:
27:4d:7c:5a:e8:c0:26:18:f9:17:91:15:ce:63:9c:
9a:fb:45:14:fa:ba:84:12:f7:68:9c:60:ee:84:8e:
1f:0e:4b:92:b0:78:59:ec:04:fd:aa:b4:45:3a:83:
71:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8F:9E:D7:7E:F6:80:7F:D1:33:44:AA:ED:EA:80:7C:17:DC:8D:81
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/A4-e1372gH_RM0Sq7eqAfBfcjYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:e9:63:6b:43:e3:70:b7:c8:89:6d:da:f8:a4:c8:b2:82:df:
ea:f7:d6:e9:08:9c:fd:43:3f:3c:94:db:24:0a:b6:6d:8f:2d:
9f:03:d8:42:07:db:3e:98:4d:3a:32:14:de:fc:ea:a0:06:09:
3f:58:30:17:cd:8a:9f:09:25:02:da:ff:c2:8c:78:d6:d1:f9:
f9:50:e7:db:34:b1:42:6c:86:ee:e0:ef:1c:a5:e9:b2:5f:37:
3e:ba:55:86:54:a2:19:a2:c1:25:9b:22:36:63:c3:ba:12:39:
5a:81:c2:e1:0d:63:b0:7c:a9:fc:c7:dc:9e:02:e0:a6:ac:28:
49:9f:c4:e2:ac:96:87:72:a5:5b:b8:d7:c7:b0:4a:19:1a:b3:
60:e2:d6:96:35:5d:77:9a:12:66:28:2e:0a:8b:04:58:54:9a:
16:8e:c0:76:28:31:f8:fc:ac:9d:2d:07:86:84:49:3d:86:e3:
0e:a2:4c:23:f2:0e:19:0f:ee:4b:9a:e9:fa:5c:62:97:cf:88:
3e:ea:18:e9:75:a8:69:86:53:29:96:fb:75:fe:9e:74:c4:26:
73:d2:7b:4f:74:18:77:62:8f:eb:7a:d8:a8:97:98:2d:71:af:
47:39:52:aa:52:d7:63:71:2f:f7:24:f6:d7:db:b0:3d:30:a5:
56:b4:c1:70
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5vTuUifoBEPScGQblho++BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzI0MDcxMzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzhmOWVkNzdlZjY4MDdmZDEzMzQ0YWFlZGVhODA3YzE3ZGM4ZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVx74QceCsm+1+XQj4eD/ZGQYiNv
PiUtVjNHpg3iUBizbjJa5XxDEZBLzcj+eh9RIxj4vrc4+UH0SWTmf1Oel4TB05bY
N8xUr59CjWTMEyChX3MuW7Y/3/sVV/xCQ0wLfmAxFzFa0r7/SnlXn41LtT2veQo7
nXMxguuCQHsCpdk6s6MZK/HkTfyDnkCDo4qGTkB46UcTNPyscbLEE5T2RhRG/914
pox0gZ3VqrVvPdhk8Rb5KCFwfVh6mCK7+NMhqbj+1SNwz13wixYl+IvHYCUnTXxa
6MAmGPkXkRXOY5ya+0UU+rqEEvdonGDuhI4fDkuSsHhZ7AT9qrRFOoNxuQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAOPntd+9oB/0TNEqu3qgHwX3I2BMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvQTQtZTEzNzJnSF9STTBTcTdlcUFmQmZjallFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAITpY2tD43C3yIlt2vik
yLKC3+r31ukInP1DPzyU2yQKtm2PLZ8D2EIH2z6YTToyFN786qAGCT9YMBfNip8J
JQLa/8KMeNbR+flQ59s0sUJshu7g7xyl6bJfNz66VYZUohmiwSWbIjZjw7oSOVqB
wuENY7B8qfzH3J4C4KasKEmfxOKslodypVu418ewShkas2Di1pY1XXeaEmYoLgqL
BFhUmhaOwHYoMfj8rJ0tB4aEST2G4w6iTCPyDhkP7kua6fpcYpfPiD7qGOl1qGmG
UymW+3X+nnTEJnPSe090GHdij+t62KiXmC1xr0c5UqpS12NxL/ck9tfbsD0wpVa0
wXA=
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:44 2025 by rpki-client