Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BjyZAFzbjwAT6RcVjI4WJHhdUWc.roa
File: BjyZAFzbjwAT6RcVjI4WJHhdUWc.roa (raw, json)
Hash identifier: QxnTa581PWgV/5ozl2a8sfM7EFkDFLZ9TOmXmvJjztA=
Subject key identifier: 06:3C:99:00:5C:DB:8F:00:13:E9:17:15:8C:8E:16:24:78:5D:51:67
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D4F8CBBB6869ABAC48DF0BBBC3CCC12FB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BjyZAFzbjwAT6RcVjI4WJHhdUWc.roa
Signing time: Sun 28 Jan 2024 10:10:39 +0000
ROA not before: Sun 28 Jan 2024 10:10:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4f:8c:bb:b6:86:9a:ba:c4:8d:f0:bb:bc:3c:cc:12:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 28 10:10:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=063c99005cdb8f0013e917158c8e1624785d5167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:06:50:e7:f3:02:de:ac:d0:41:66:60:0b:90:
52:05:c9:ff:17:18:f0:8b:35:41:b0:4e:b4:4a:13:
1d:f1:1d:c5:d1:7b:46:77:fe:45:2a:de:a1:72:ed:
1b:34:e0:aa:bb:6d:30:7a:12:60:d6:82:42:91:14:
7a:cb:10:37:10:8f:31:14:29:50:48:be:06:40:fa:
a7:ca:7e:c0:e4:59:f6:f0:a7:a7:ed:44:20:d1:68:
23:13:d4:4f:17:8f:5a:38:03:17:7c:5a:2e:d4:b3:
cc:39:a0:c3:1c:27:2b:d0:32:d4:0d:19:ae:20:83:
89:a4:b2:4a:68:11:20:1b:39:72:39:95:16:db:13:
31:06:44:32:58:98:a6:74:4c:26:22:a8:72:02:d4:
52:ae:3c:ac:5c:d9:c3:46:77:2f:d6:45:af:03:d1:
bf:08:ea:b4:4c:ee:5c:64:6f:c6:cb:2f:88:50:b9:
26:a3:81:1b:de:84:12:41:99:b1:a1:fc:f9:09:33:
ea:5f:f1:ff:90:90:f0:55:6e:bc:95:1c:61:2f:2c:
4d:87:3a:87:99:c9:3b:05:dd:ba:aa:e2:35:49:2d:
64:7f:b0:2a:17:66:44:51:4f:9b:e2:0c:ab:ab:89:
bc:5a:39:c7:ea:0f:68:e8:b3:43:a7:b9:7b:c1:73:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3C:99:00:5C:DB:8F:00:13:E9:17:15:8C:8E:16:24:78:5D:51:67
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BjyZAFzbjwAT6RcVjI4WJHhdUWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:58:4d:fa:0b:37:90:78:bd:ee:07:6c:24:b3:b9:9f:44:a0:
5c:e3:45:94:cf:ad:af:9d:54:2d:2b:a0:53:c0:cc:fe:6e:8d:
d5:c0:80:b2:b5:91:8a:4b:2e:6a:7a:39:ce:29:01:d6:f5:b3:
e6:28:73:a0:79:b8:2e:fe:b9:aa:92:53:8b:6c:31:3a:07:d8:
5b:9c:8c:d7:9f:0e:1f:1c:d9:34:d0:b3:92:a1:7a:df:6e:85:
95:8e:94:06:58:5d:a2:f7:1c:45:6c:bd:b6:cf:41:a0:9e:7b:
0e:46:d5:b6:80:42:df:52:dc:48:fd:a8:6e:bb:53:36:3b:b7:
b8:d1:0b:fe:40:dc:23:ad:bd:89:ec:e6:16:d5:16:a8:4c:31:
7d:3b:c1:66:9e:99:3e:56:03:4d:4c:c9:f8:f3:06:bf:6d:8d:
1a:94:8a:45:52:ce:c0:c4:78:0b:1b:66:08:4a:3c:79:93:65:
8a:c1:31:1e:e5:b4:c6:89:96:60:6e:3f:26:c1:71:b3:44:9f:
61:4c:35:16:b3:29:e8:5d:07:f0:f0:d3:3b:3f:2a:52:1f:8d:
e9:97:96:32:c8:1d:c3:b4:9a:2a:2d:f4:71:20:32:24:16:3e:
94:bb:32:39:2a:4f:32:4d:6d:fa:22:b2:1d:92:14:f5:83:58:
50:28:9d:d5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY1PjLu2hpq6xI3wu7w8zBL7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTI4MTAxMDM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjNjOTkwMDVjZGI4ZjAwMTNlOTE3MTU4YzhlMTYyNDc4NWQ1MTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgZQ5/MC3qzQQWZgC5BSBcn/Fxjw
izVBsE60ShMd8R3F0XtGd/5FKt6hcu0bNOCqu20wehJg1oJCkRR6yxA3EI8xFClQ
SL4GQPqnyn7A5Fn28Ken7UQg0WgjE9RPF49aOAMXfFou1LPMOaDDHCcr0DLUDRmu
IIOJpLJKaBEgGzlyOZUW2xMxBkQyWJimdEwmIqhyAtRSrjysXNnDRncv1kWvA9G/
COq0TO5cZG/Gyy+IULkmo4Eb3oQSQZmxofz5CTPqX/H/kJDwVW68lRxhLyxNhzqH
mck7Bd26quI1SS1kf7AqF2ZEUU+b4gyrq4m8WjnH6g9o6LNDp7l7wXMPiwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAY8mQBc248AE+kXFYyOFiR4XVFnMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvQmp5WkFGemJqd0FUNlJjVmpJNFdKSGhkVVdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFZYTfoLN5B4ve4HbCSz
uZ9EoFzjRZTPra+dVC0roFPAzP5ujdXAgLK1kYpLLmp6Oc4pAdb1s+Yoc6B5uC7+
uaqSU4tsMToH2FucjNefDh8c2TTQs5Khet9uhZWOlAZYXaL3HEVsvbbPQaCeew5G
1baAQt9S3Ej9qG67UzY7t7jRC/5A3COtvYns5hbVFqhMMX07wWaemT5WA01Myfjz
Br9tjRqUikVSzsDEeAsbZghKPHmTZYrBMR7ltMaJlmBuPybBcbNEn2FMNRazKehd
B/Dw0zs/KlIfjemXljLIHcO0miot9HEgMiQWPpS7MjkqTzJNbfoish2SFPWDWFAo
ndU=
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:05 2025 by rpki-client