Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FOfb14zXLW845Fv07XgiMEwC6vY.roa
File: FOfb14zXLW845Fv07XgiMEwC6vY.roa (raw, json)
Hash identifier: afHlMXqY7JTfm0zWpXWjUL+NhtyGRJDj1j07dbZLaO4=
Subject key identifier: 14:E7:DB:D7:8C:D7:2D:6F:38:E4:5B:F4:ED:78:22:30:4C:02:EA:F6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E468721EFA9723CD96BAF0B8A559F3526
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FOfb14zXLW845Fv07XgiMEwC6vY.roa
Signing time: Sat 16 Mar 2024 09:10:44 +0000
ROA not before: Sat 16 Mar 2024 09:10:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:46:87:21:ef:a9:72:3c:d9:6b:af:0b:8a:55:9f:35:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 16 09:10:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14e7dbd78cd72d6f38e45bf4ed7822304c02eaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f0:0d:ed:33:91:af:82:e2:99:93:a0:4a:86:
65:81:e2:68:db:36:d9:72:75:be:d2:48:64:a2:1f:
41:e4:45:a4:69:c8:68:37:de:50:a1:f7:fa:b5:06:
65:d3:23:8b:1f:08:28:e5:9c:08:a2:a7:c0:36:13:
a6:82:8a:0b:99:b2:ef:9b:b3:d6:45:c3:50:fe:d2:
c2:da:fc:10:34:1f:db:e6:11:ce:d8:b4:a5:ba:04:
7d:d6:de:de:26:c8:56:39:b2:a6:2b:39:8e:e1:37:
7c:4d:b2:9e:e3:03:7a:bd:00:d3:bf:61:06:66:b3:
50:df:5f:fd:b6:f6:fa:a1:71:55:76:44:2f:2d:46:
c2:35:e4:53:bb:96:7c:de:18:17:11:21:a0:04:e2:
cd:31:b7:b6:e6:ed:ab:d7:b5:1c:e0:03:13:33:98:
ef:ab:b1:ee:39:40:45:75:c2:e3:9b:b6:ff:27:68:
ef:70:d3:dc:6e:cf:91:ed:65:6e:b9:66:d4:20:70:
4e:19:d1:65:e9:d5:45:56:e8:35:e6:23:e8:00:33:
9a:b6:3f:04:00:73:a9:69:24:82:5c:15:96:1b:6c:
f5:30:49:dc:c8:e1:94:57:80:bc:09:6a:1a:ac:12:
4e:c6:d8:c4:15:ac:7e:d2:35:50:ac:5d:42:9f:c8:
a6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E7:DB:D7:8C:D7:2D:6F:38:E4:5B:F4:ED:78:22:30:4C:02:EA:F6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FOfb14zXLW845Fv07XgiMEwC6vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:f4:1f:28:64:d5:c3:40:8c:32:c5:39:7d:e6:b1:e8:80:c6:
bf:fe:42:9a:e1:80:ca:00:e7:3e:91:c8:d9:1c:d8:a3:4d:01:
0a:03:a1:d4:7a:de:1c:59:c4:d2:25:ae:16:8d:aa:a5:18:b8:
42:0a:e8:a9:a3:b1:2d:60:af:aa:f8:d5:c6:30:b6:ec:fe:28:
ac:ff:28:15:e9:f0:11:d1:ea:24:6a:f7:01:d2:ea:35:18:cd:
84:17:c9:fa:44:64:04:00:85:76:3d:03:2c:e8:b3:f2:0c:66:
bd:b0:86:b8:f9:53:83:27:23:79:0f:c7:c7:a4:08:00:a9:68:
00:ef:3d:0c:b2:6c:15:68:be:b9:2c:40:52:3a:20:27:d6:68:
0b:39:65:73:17:d1:66:69:2e:53:8f:7d:21:76:e8:a3:65:34:
34:47:2a:d0:0b:c0:31:6d:13:7d:e0:15:34:a8:17:b7:a4:eb:
65:65:83:43:11:ad:5a:91:fd:99:95:c8:e5:a7:f4:14:af:1c:
e2:48:43:24:70:94:0e:ef:a6:f8:d0:f2:95:2e:d7:71:92:98:
84:3c:3d:10:4e:22:91:63:3f:22:28:f7:0a:23:1c:7f:5f:ab:
4c:49:a0:96:f5:38:9c:76:bc:bc:19:7d:13:26:1f:c2:b9:d4:
06:65:08:17
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5GhyHvqXI82WuvC4pVnzUmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzE2MDkxMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGU3ZGJkNzhjZDcyZDZmMzhlNDViZjRlZDc4MjIzMDRjMDJlYWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPAN7TORr4LimZOgSoZlgeJo2zbZ
cnW+0khkoh9B5EWkachoN95Qoff6tQZl0yOLHwgo5ZwIoqfANhOmgooLmbLvm7PW
RcNQ/tLC2vwQNB/b5hHO2LSlugR91t7eJshWObKmKzmO4Td8TbKe4wN6vQDTv2EG
ZrNQ31/9tvb6oXFVdkQvLUbCNeRTu5Z83hgXESGgBOLNMbe25u2r17Uc4AMTM5jv
q7HuOUBFdcLjm7b/J2jvcNPcbs+R7WVuuWbUIHBOGdFl6dVFVug15iPoADOatj8E
AHOpaSSCXBWWG2z1MEncyOGUV4C8CWoarBJOxtjEFax+0jVQrF1Cn8im8QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBTn29eM1y1vOORb9O14IjBMAur2MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvRk9mYjE0elhMVzg0NUZ2MDdYZ2lNRXdDNnZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJX0Hyhk1cNAjDLFOX3m
seiAxr/+QprhgMoA5z6RyNkc2KNNAQoDodR63hxZxNIlrhaNqqUYuEIK6KmjsS1g
r6r41cYwtuz+KKz/KBXp8BHR6iRq9wHS6jUYzYQXyfpEZAQAhXY9Ayzos/IMZr2w
hrj5U4MnI3kPx8ekCACpaADvPQyybBVovrksQFI6ICfWaAs5ZXMX0WZpLlOPfSF2
6KNlNDRHKtALwDFtE33gFTSoF7ek62Vlg0MRrVqR/ZmVyOWn9BSvHOJIQyRwlA7v
pvjQ8pUu13GSmIQ8PRBOIpFjPyIo9wojHH9fq0xJoJb1OJx2vLwZfRMmH8K51AZl
CBc=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:19 2025 by rpki-client