Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/G91XA87ZzgZJ1oOUk1VMWnQ5bMU.roa
File: G91XA87ZzgZJ1oOUk1VMWnQ5bMU.roa (raw, json)
Hash identifier: AZSEWOPnX+jYe+JAFq3FLVrkNNBGfgahk/31D0dG2BA=
Subject key identifier: 1B:DD:57:03:CE:D9:CE:06:49:D6:83:94:93:55:4C:5A:74:39:6C:C5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E4BE558C010D255455C1F3C2492D9DA31
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/G91XA87ZzgZJ1oOUk1VMWnQ5bMU.roa
Signing time: Sun 17 Mar 2024 10:11:45 +0000
ROA not before: Sun 17 Mar 2024 10:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4b:e5:58:c0:10:d2:55:45:5c:1f:3c:24:92:d9:da:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 17 10:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bdd5703ced9ce0649d6839493554c5a74396cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:80:e7:4e:b4:17:d4:e0:de:ac:bd:8d:86:d1:
ce:21:94:7a:3c:ee:da:54:26:89:88:28:d1:be:7c:
21:7a:d1:d1:dc:74:63:f5:12:0e:d0:5f:96:35:9d:
ba:e2:92:25:9c:cb:b6:90:c5:85:6d:72:79:c9:50:
de:ae:d3:07:1b:e5:14:c4:49:e1:f5:ad:9b:5b:00:
06:e4:bf:7a:21:e9:4c:10:c9:cb:b1:e6:ca:4c:59:
4f:c6:86:0e:87:e2:f4:bc:d1:e0:ae:8b:72:f9:81:
0a:d7:dc:05:5d:40:c8:d7:92:86:f7:88:20:0a:a1:
a6:40:64:9c:78:a4:86:61:ef:06:0e:5d:0a:ca:17:
e7:57:19:42:77:77:76:9f:e4:b4:f5:d6:d8:d5:52:
dc:13:f7:35:9b:e0:be:a1:70:9e:d9:4c:d3:3c:a1:
0e:35:92:25:97:c5:3d:dd:bb:b1:70:1b:6d:8f:67:
a2:19:60:3c:77:cf:1a:99:1a:1d:d5:77:da:41:cf:
14:19:31:d7:bc:e2:df:fa:dc:33:7a:af:07:04:cd:
62:36:8a:19:35:66:63:7a:58:65:0a:c3:77:44:9f:
7c:5f:36:58:58:1f:98:8b:9a:4f:c7:31:26:c4:64:
0f:11:cf:06:fc:de:c2:b0:6d:b1:fe:a5:93:10:20:
64:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DD:57:03:CE:D9:CE:06:49:D6:83:94:93:55:4C:5A:74:39:6C:C5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/G91XA87ZzgZJ1oOUk1VMWnQ5bMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:ca:43:b0:e7:78:57:6a:48:0f:95:8c:f4:6a:38:04:ba:95:
8f:92:60:89:35:33:84:0a:a7:b8:c7:2b:12:56:47:cb:a3:c0:
35:f2:18:23:d8:cf:a7:8e:f7:04:ed:8c:c5:51:ac:5e:a4:a7:
e8:d6:60:52:3f:14:67:15:ba:05:40:ae:78:d0:26:f0:14:14:
84:32:4c:19:cb:41:16:32:a8:52:69:5b:1f:e9:be:b7:ff:76:
66:33:b8:33:22:e5:b6:a9:eb:ac:3e:09:24:4d:c5:7e:51:2a:
ff:d7:b2:e4:92:52:f5:58:3e:fb:98:11:ae:6e:ad:74:f5:1e:
d9:2d:5a:02:1f:9d:78:a5:ea:0c:f2:0f:c1:7d:01:bd:60:f2:
7e:e2:4c:56:38:ca:37:90:ec:a8:ec:1a:dd:f2:31:5c:0a:81:
b9:95:c1:a8:d1:87:c0:ae:47:61:ae:b9:79:d0:cd:62:7b:ef:
ce:0c:c1:3e:1a:b5:c6:b5:44:59:a3:9a:c0:27:50:e7:e8:1a:
00:65:8d:6e:43:19:0c:2d:37:e5:5b:e1:d6:d0:90:88:d1:48:
af:f2:71:94:8b:13:b3:73:da:33:e1:74:f8:64:43:bb:fb:63:
3c:01:42:f5:d1:c3:86:f6:96:5f:66:5a:b7:8a:b7:97:fa:d6:
e4:e6:c8:74
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5L5VjAENJVRVwfPCSS2doxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzE3MTAxMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmRkNTcwM2NlZDljZTA2NDlkNjgzOTQ5MzU1NGM1YTc0Mzk2Y2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYDnTrQX1ODerL2NhtHOIZR6PO7a
VCaJiCjRvnwhetHR3HRj9RIO0F+WNZ264pIlnMu2kMWFbXJ5yVDertMHG+UUxEnh
9a2bWwAG5L96IelMEMnLsebKTFlPxoYOh+L0vNHgroty+YEK19wFXUDI15KG94gg
CqGmQGSceKSGYe8GDl0KyhfnVxlCd3d2n+S09dbY1VLcE/c1m+C+oXCe2UzTPKEO
NZIll8U93buxcBttj2eiGWA8d88amRod1XfaQc8UGTHXvOLf+twzeq8HBM1iNooZ
NWZjelhlCsN3RJ98XzZYWB+Yi5pPxzEmxGQPEc8G/N7CsG2x/qWTECBkdQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBvdVwPO2c4GSdaDlJNVTFp0OWzFMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvRzkxWEE4N1p6Z1pKMW9PVWsxVk1XblE1Yk1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAjKQ7DneFdqSA+VjPRq
OAS6lY+SYIk1M4QKp7jHKxJWR8ujwDXyGCPYz6eO9wTtjMVRrF6kp+jWYFI/FGcV
ugVArnjQJvAUFIQyTBnLQRYyqFJpWx/pvrf/dmYzuDMi5bap66w+CSRNxX5RKv/X
suSSUvVYPvuYEa5urXT1HtktWgIfnXil6gzyD8F9Ab1g8n7iTFY4yjeQ7KjsGt3y
MVwKgbmVwajRh8CuR2GuuXnQzWJ7784MwT4atca1RFmjmsAnUOfoGgBljW5DGQwt
N+Vb4dbQkIjRSK/ycZSLE7Nz2jPhdPhkQ7v7YzwBQvXRw4b2ll9mWreKt5f61uTm
yHQ=
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:41 2025 by rpki-client