Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CzD2BeGSa0fKbThdZhY-ezNd19I.roa
File: CzD2BeGSa0fKbThdZhY-ezNd19I.roa (raw, json)
Hash identifier: 0GCkWZWEZlSQqAbARsItDoEM1flZYnkjXfC/ZarjY1w=
Subject key identifier: 0B:30:F6:05:E1:92:6B:47:CA:6D:38:5D:66:16:3E:7B:33:5D:D7:D2
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E01DEE460DD0022A69EA4A2BF0FC0C6B0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CzD2BeGSa0fKbThdZhY-ezNd19I.roa
Signing time: Sun 03 Mar 2024 01:12:48 +0000
ROA not before: Sun 03 Mar 2024 01:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:01:de:e4:60:dd:00:22:a6:9e:a4:a2:bf:0f:c0:c6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 3 01:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b30f605e1926b47ca6d385d66163e7b335dd7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:62:a8:ae:40:6c:a6:10:6c:83:b2:c5:4c:
c5:4a:6c:be:c9:b6:cb:7c:6c:77:18:9e:a2:98:ac:
74:49:6f:1b:f2:f2:fb:e7:b0:e5:1d:d7:13:09:92:
a8:92:08:c2:c7:25:33:8a:37:c1:6a:c7:90:00:0e:
b4:01:b5:d2:6b:6a:64:88:f4:38:50:6a:fb:9f:4d:
d4:c0:62:86:38:c7:f9:ab:9d:39:59:4e:45:e8:d4:
80:9e:80:c0:08:30:79:7e:1a:1a:78:29:ce:4a:12:
e8:90:77:2f:30:f2:84:c0:e5:6f:dd:94:76:f6:d1:
32:84:51:4a:b5:62:92:91:37:a9:c2:c0:9c:bb:a7:
1b:c4:fb:bd:60:38:21:58:38:d9:9c:4b:8d:06:53:
5b:04:e1:76:49:b7:68:bb:94:0d:e4:e8:dd:3d:e9:
90:6f:6b:de:02:d5:4a:79:e4:84:9d:91:a4:91:27:
81:c2:74:7f:66:58:5e:6b:94:6a:3c:e6:cc:bb:bf:
11:08:0f:63:3c:7e:ff:72:0c:ec:ea:09:fb:c6:6f:
77:c2:71:3e:0b:de:cc:47:37:03:8f:77:f0:38:d2:
3b:e3:70:71:cb:37:7a:e1:a3:51:59:28:4d:78:cb:
cc:be:ef:ed:1a:7b:dd:c0:94:63:de:9d:ce:8f:5d:
64:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:30:F6:05:E1:92:6B:47:CA:6D:38:5D:66:16:3E:7B:33:5D:D7:D2
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CzD2BeGSa0fKbThdZhY-ezNd19I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:d3:5a:05:45:98:99:7b:b2:12:a7:9a:51:94:52:c9:54:0b:
d1:12:35:a9:9e:b6:87:72:81:fb:e3:e2:4e:37:d5:62:7c:dd:
8c:6d:1e:38:91:26:9f:00:eb:58:d6:0e:05:dd:5c:63:b0:09:
df:0c:8b:8f:dd:48:0b:21:dd:a8:8b:9e:3e:6a:66:d3:ec:0f:
2b:9b:85:56:9f:42:ad:1a:89:4a:8e:5a:82:25:de:ca:59:4e:
b1:4f:46:e9:27:73:6c:1d:f9:91:75:1a:03:20:d7:b8:f4:e7:
7a:22:c7:b5:b3:6b:b0:5a:dc:ec:6e:79:89:63:c5:c9:f0:fa:
3f:7e:31:1f:6d:65:18:56:8d:c5:74:a9:d2:13:02:29:eb:c6:
79:7b:30:af:f6:5b:09:81:5a:2f:47:6e:94:e3:63:00:77:41:
14:09:05:2f:94:4c:74:7f:04:a6:45:41:36:7c:7a:02:81:96:
fe:50:be:d8:cd:3f:16:98:31:f1:40:3e:8f:09:62:b3:85:67:
07:06:28:76:76:ec:4a:57:68:3a:64:1c:85:77:88:35:cf:01:
16:e9:b7:ec:a7:5a:fc:4b:ec:ad:f7:a0:b6:3a:5d:99:fb:75:
90:40:9f:95:10:77:ab:b8:19:3e:d7:87:5d:51:90:ff:b1:6e:
8e:9c:1e:12
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY4B3uRg3QAipp6kor8PwMawMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzAzMDExMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjMwZjYwNWUxOTI2YjQ3Y2E2ZDM4NWQ2NjE2M2U3YjMzNWRkN2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCFiqK5AbKYQbIOyxUzFSmy+ybbL
fGx3GJ6imKx0SW8b8vL757DlHdcTCZKokgjCxyUzijfBaseQAA60AbXSa2pkiPQ4
UGr7n03UwGKGOMf5q505WU5F6NSAnoDACDB5fhoaeCnOShLokHcvMPKEwOVv3ZR2
9tEyhFFKtWKSkTepwsCcu6cbxPu9YDghWDjZnEuNBlNbBOF2Sbdou5QN5OjdPemQ
b2veAtVKeeSEnZGkkSeBwnR/Zlhea5RqPObMu78RCA9jPH7/cgzs6gn7xm93wnE+
C97MRzcDj3fwONI743Bxyzd64aNRWShNeMvMvu/tGnvdwJRj3p3Oj11kbQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAsw9gXhkmtHym04XWYWPnszXdfSMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvQ3pEMkJlR1NhMGZLYlRoZFpoWS1lek5kMTlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGfTWgVFmJl7shKnmlGU
UslUC9ESNametodygfvj4k431WJ83YxtHjiRJp8A61jWDgXdXGOwCd8Mi4/dSAsh
3aiLnj5qZtPsDyubhVafQq0aiUqOWoIl3spZTrFPRuknc2wd+ZF1GgMg17j053oi
x7Wza7Ba3OxueYljxcnw+j9+MR9tZRhWjcV0qdITAinrxnl7MK/2WwmBWi9HbpTj
YwB3QRQJBS+UTHR/BKZFQTZ8egKBlv5QvtjNPxaYMfFAPo8JYrOFZwcGKHZ27EpX
aDpkHIV3iDXPARbpt+ynWvxL7K33oLY6XZn7dZBAn5UQd6u4GT7Xh11RkP+xbo6c
HhI=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:33 2025 by rpki-client