Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/G4YiIcl8-eDb_tr39fhGBhzS7kA.roa
File: G4YiIcl8-eDb_tr39fhGBhzS7kA.roa (raw, json)
Hash identifier: t//5mwOgLISt6cXj0zz2lJS1Ggo7OigkLp8Pvic7Zfw=
Subject key identifier: 1B:86:22:21:C9:7C:F9:E0:DB:FE:DA:F7:F5:F8:46:06:1C:D2:EE:40
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE21A64DBC584D708BFD1841BFBC987E2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/G4YiIcl8-eDb_tr39fhGBhzS7kA.roa
Signing time: Sun 07 Jan 2024 04:07:09 +0000
ROA not before: Sun 07 Jan 2024 04:07:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:e218:1956/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e2:1a:64:db:c5:84:d7:08:bf:d1:84:1b:fb:c9:87:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 7 04:07:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b862221c97cf9e0dbfedaf7f5f846061cd2ee40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:79:a5:1a:50:33:73:7a:b7:82:e8:52:08:0e:
8a:02:74:db:b4:65:83:18:e4:b4:54:4f:1e:b3:b7:
3d:6a:e8:eb:4b:d6:2e:b5:86:6d:db:03:57:4d:af:
e9:5f:d7:e0:dd:78:fb:70:0d:8b:b4:db:70:30:96:
db:4d:4d:66:63:0f:0c:02:6d:3b:67:e2:64:8b:66:
64:88:41:fe:94:2c:00:ff:c0:36:dc:e5:54:30:85:
f8:d4:0d:13:fd:79:63:68:04:3c:0c:8c:1e:db:71:
2f:bd:f7:16:14:d6:1b:a9:3a:23:6a:52:9d:11:28:
8d:5f:14:53:83:02:15:d0:b3:1d:15:9c:80:51:be:
9d:48:af:c0:29:14:9e:2f:d0:16:7f:09:e7:24:5a:
03:a2:61:60:8a:63:6c:74:e0:9b:d5:b6:ef:ca:48:
cf:fe:50:13:ad:aa:bd:62:be:d6:c3:8b:a0:63:67:
dd:26:c0:67:dd:20:d1:aa:76:4f:e6:8c:62:91:cf:
35:96:0a:fc:7b:37:6f:f0:4e:80:c4:e2:f9:b3:bc:
c1:02:16:f7:87:bb:ae:cf:a4:e4:d5:98:e5:f6:c4:
e0:2f:04:03:8a:c6:c0:29:b1:62:68:f1:8b:69:07:
20:45:bc:d0:85:08:2f:29:98:54:b2:42:59:38:84:
e1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:86:22:21:C9:7C:F9:E0:DB:FE:DA:F7:F5:F8:46:06:1C:D2:EE:40
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/G4YiIcl8-eDb_tr39fhGBhzS7kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:0f:ca:bd:4e:64:1c:27:1b:f0:df:9a:cc:c0:84:bc:53:61:
7d:32:d8:72:06:8c:2e:82:29:c2:7e:40:d9:7f:e7:b3:55:bb:
cc:96:df:7a:c8:c4:cb:45:be:22:11:d6:65:7d:ee:9a:d7:01:
ce:5c:f9:bf:dc:6c:19:32:47:64:0f:50:08:63:55:b2:97:53:
8e:30:1c:bc:7c:cd:d4:57:57:82:0b:29:bc:0f:3d:49:26:9c:
85:99:7e:4a:e1:d8:41:94:80:6e:48:d3:39:4d:7e:3e:1b:89:
98:ea:bb:75:f4:3d:72:41:e2:1d:2e:7b:d6:40:58:5f:30:9f:
94:d8:23:9f:7b:28:a7:cb:90:4d:f4:13:e0:5d:27:ff:c5:04:
f3:e6:e9:aa:bc:49:41:5d:61:a4:b4:9b:dc:f9:ec:17:49:a1:
4a:df:29:f3:81:52:d2:1f:8d:83:5c:ca:ff:4b:07:8d:4e:cf:
28:33:2d:10:1a:2b:7d:2b:14:0c:e1:10:aa:8d:4e:d0:2a:34:
ef:fb:17:54:97:da:af:1c:c6:3a:d2:92:84:92:56:be:94:cb:
1d:37:ce:5b:5a:02:7a:b3:fa:36:7e:90:bf:70:f4:ee:83:9e:
07:57:04:5b:d0:4a:2a:86:37:33:8f:b7:e2:f3:f8:e2:40:74:
5f:f6:c2:b2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYziGmTbxYTXCL/RhBv7yYfiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTA3MDQwNzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjg2MjIyMWM5N2NmOWUwZGJmZWRhZjdmNWY4NDYwNjFjZDJlZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknmlGlAzc3q3guhSCA6KAnTbtGWD
GOS0VE8es7c9aujrS9YutYZt2wNXTa/pX9fg3Xj7cA2LtNtwMJbbTU1mYw8MAm07
Z+Jki2ZkiEH+lCwA/8A23OVUMIX41A0T/XljaAQ8DIwe23EvvfcWFNYbqTojalKd
ESiNXxRTgwIV0LMdFZyAUb6dSK/AKRSeL9AWfwnnJFoDomFgimNsdOCb1bbvykjP
/lATraq9Yr7Ww4ugY2fdJsBn3SDRqnZP5oxikc81lgr8ezdv8E6AxOL5s7zBAhb3
h7uuz6Tk1Zjl9sTgLwQDisbAKbFiaPGLaQcgRbzQhQgvKZhUskJZOIThkQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBuGIiHJfPng2/7a9/X4RgYc0u5AMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvRzRZaUljbDgtZURiX3RyMzlmaEdCaHpTN2tBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAwPyr1OZBwnG/DfmszA
hLxTYX0y2HIGjC6CKcJ+QNl/57NVu8yW33rIxMtFviIR1mV97prXAc5c+b/cbBky
R2QPUAhjVbKXU44wHLx8zdRXV4ILKbwPPUkmnIWZfkrh2EGUgG5I0zlNfj4biZjq
u3X0PXJB4h0ue9ZAWF8wn5TYI597KKfLkE30E+BdJ//FBPPm6aq8SUFdYaS0m9z5
7BdJoUrfKfOBUtIfjYNcyv9LB41OzygzLRAaK30rFAzhEKqNTtAqNO/7F1SX2q8c
xjrSkoSSVr6Uyx03zltaAnqz+jZ+kL9w9O6DngdXBFvQSiqGNzOPt+Lz+OJAdF/2
wrI=
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:41 2025 by rpki-client