Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DmOu31m0NxnNK5eGcJgsTp4Bs7k.roa
File: DmOu31m0NxnNK5eGcJgsTp4Bs7k.roa (raw, json)
Hash identifier: t5YFZxdWU4R8Tzr9rtVNVC5L9Tg3ZppNPiBn2iYzu7Q=
Subject key identifier: 0E:63:AE:DF:59:B4:37:19:CD:2B:97:86:70:98:2C:4E:9E:01:B3:B9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D8C11D52AC6F3A64D9A1AF155BDF2A9DC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DmOu31m0NxnNK5eGcJgsTp4Bs7k.roa
Signing time: Fri 09 Feb 2024 04:13:15 +0000
ROA not before: Fri 09 Feb 2024 04:13:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8c:11:d5:2a:c6:f3:a6:4d:9a:1a:f1:55:bd:f2:a9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 9 04:13:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e63aedf59b43719cd2b978670982c4e9e01b3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d8:b9:6d:f4:12:06:20:e4:d7:20:81:93:29:
fb:b2:ca:cf:a1:6c:7e:0d:ec:cd:c8:3d:3a:fc:9b:
bf:7a:a2:2f:d1:01:d7:23:f4:6d:b1:84:f4:80:7e:
57:e7:93:c4:75:f7:68:42:0c:de:45:18:ca:e7:d5:
42:45:ea:79:0f:53:72:f7:32:79:3f:9c:d0:94:2a:
6a:81:bf:02:35:59:c5:c8:1c:55:11:9e:ea:11:40:
62:bc:8d:90:60:fb:77:5d:2e:f2:82:08:4a:a3:35:
88:2f:01:72:9e:a0:ed:f6:65:34:41:67:75:4c:6c:
bd:03:40:e1:9f:f5:1d:7e:dd:04:ee:b3:0f:b6:81:
87:79:2e:b3:d9:23:21:7a:26:59:cd:a8:66:ec:73:
bf:e2:ac:4d:63:33:f4:fc:8c:e6:30:e3:33:2d:6c:
c7:1f:e7:0d:5c:ec:b9:60:99:87:f0:3e:1d:af:14:
b2:d5:ba:f3:69:0e:38:19:05:52:af:d1:2b:32:d8:
03:63:60:fb:fb:23:f5:10:a3:1a:98:03:74:3b:cf:
34:f4:a2:10:84:02:a8:83:f4:fa:27:00:45:32:7f:
77:a6:69:26:d7:c8:df:24:ee:62:5e:90:86:94:bf:
fc:9d:8e:ef:5b:10:dc:7d:41:ad:4c:0e:19:04:a9:
51:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:63:AE:DF:59:B4:37:19:CD:2B:97:86:70:98:2C:4E:9E:01:B3:B9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DmOu31m0NxnNK5eGcJgsTp4Bs7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:df:99:ae:ec:7e:55:38:b7:ae:5b:0c:7b:d2:c6:69:bb:53:
33:31:88:fe:a3:74:01:a9:41:1b:c8:cb:8c:ac:22:e3:51:19:
2a:82:ea:cc:f8:c0:ff:25:c4:63:51:0d:3f:26:a5:e3:68:cc:
4d:3d:66:47:3d:ad:73:07:ef:4a:ae:af:1c:e0:f3:1b:08:23:
90:34:07:c6:af:d3:ca:53:67:56:bc:24:91:32:50:cd:f0:49:
93:80:17:34:7d:ae:0e:96:05:22:bf:7c:c1:b8:e0:a9:8c:0e:
59:19:6e:5a:3a:66:5f:30:36:e8:b2:81:8f:09:34:27:b1:87:
d5:a1:07:11:e0:66:d7:36:46:56:ee:57:d6:ee:3f:60:a7:bd:
bc:41:5a:24:e1:62:cf:0d:fe:a8:4e:4b:8d:82:81:f0:b0:c8:
83:db:47:5a:cf:a2:d9:b7:6a:bd:0d:bf:1d:36:78:3f:55:cb:
39:40:71:3a:77:8e:fb:b1:c9:c0:b0:aa:28:9a:74:08:62:8b:
54:2f:0a:52:67:2d:09:49:08:f7:72:eb:5f:a3:7f:5b:90:97:
a9:7b:e7:dc:3d:b4:58:ea:7b:06:78:ea:8c:6a:0f:4c:dc:fe:
40:3e:cb:3b:cc:6a:5d:48:bd:ad:7c:73:a0:30:8f:0f:7b:dd:
74:d0:69:34
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY2MEdUqxvOmTZoa8VW98qncMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjA5MDQxMzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTYzYWVkZjU5YjQzNzE5Y2QyYjk3ODY3MDk4MmM0ZTllMDFiM2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9i5bfQSBiDk1yCBkyn7ssrPoWx+
DezNyD06/Ju/eqIv0QHXI/RtsYT0gH5X55PEdfdoQgzeRRjK59VCRep5D1Ny9zJ5
P5zQlCpqgb8CNVnFyBxVEZ7qEUBivI2QYPt3XS7ygghKozWILwFynqDt9mU0QWd1
TGy9A0Dhn/Udft0E7rMPtoGHeS6z2SMheiZZzahm7HO/4qxNYzP0/IzmMOMzLWzH
H+cNXOy5YJmH8D4drxSy1brzaQ44GQVSr9ErMtgDY2D7+yP1EKMamAN0O8809KIQ
hAKog/T6JwBFMn93pmkm18jfJO5iXpCGlL/8nY7vWxDcfUGtTA4ZBKlR8QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA5jrt9ZtDcZzSuXhnCYLE6eAbO5MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvRG1PdTMxbTBOeG5OSzVlR2NKZ3NUcDRCczdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADPfma7sflU4t65bDHvS
xmm7UzMxiP6jdAGpQRvIy4ysIuNRGSqC6sz4wP8lxGNRDT8mpeNozE09Zkc9rXMH
70qurxzg8xsII5A0B8av08pTZ1a8JJEyUM3wSZOAFzR9rg6WBSK/fMG44KmMDlkZ
blo6Zl8wNuiygY8JNCexh9WhBxHgZtc2RlbuV9buP2CnvbxBWiThYs8N/qhOS42C
gfCwyIPbR1rPotm3ar0Nvx02eD9VyzlAcTp3jvuxycCwqiiadAhii1QvClJnLQlJ
CPdy61+jf1uQl6l759w9tFjqewZ46oxqD0zc/kA+yzvMal1Iva18c6Awjw973XTQ
aTQ=
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:48:40 2025 by rpki-client