Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JFympm1oY4Z8-49dLHR-6bKQvGw.roa
File: JFympm1oY4Z8-49dLHR-6bKQvGw.roa (raw, json)
Hash identifier: PtP6c7uLhitGsPhvAgiBdqWM5vX16ySDaAgpPXcy6BI=
Subject key identifier: 24:5C:A6:A6:6D:68:63:86:7C:FB:8F:5D:2C:74:7E:E9:B2:90:BC:6C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DDBAEE361412ED14A16E075D29C302A19
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JFympm1oY4Z8-49dLHR-6bKQvGw.roa
Signing time: Sat 24 Feb 2024 15:14:48 +0000
ROA not before: Sat 24 Feb 2024 15:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:db:ae:e3:61:41:2e:d1:4a:16:e0:75:d2:9c:30:2a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 24 15:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=245ca6a66d6863867cfb8f5d2c747ee9b290bc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:33:e4:66:e0:aa:4c:45:56:27:66:08:f4:ab:
60:0f:82:0e:f8:a2:1c:de:d0:b7:3a:0b:88:4e:0c:
37:fa:7f:5e:74:87:8a:29:91:b5:11:99:90:30:30:
4f:37:2a:7f:25:24:85:e6:ef:18:1c:1a:a9:d0:48:
21:b8:18:dd:c4:a6:e1:62:8c:4d:47:c5:81:7f:5a:
c6:59:a6:67:0b:fc:da:53:4a:73:c3:15:5c:c5:4e:
e9:0e:e8:68:6b:02:70:cb:28:cd:c5:fc:f1:63:29:
a3:20:85:f4:6d:6a:1d:03:2d:7e:cf:d5:b8:d4:02:
ae:20:a0:db:31:3b:ac:34:69:ac:1a:99:11:2c:03:
7d:0c:18:02:d0:25:6b:e1:22:88:16:9c:ae:4e:64:
91:f7:63:f9:4f:4b:22:f5:d4:30:13:71:63:33:04:
9d:03:b4:2a:af:04:5b:00:57:7c:18:68:82:39:d1:
54:2b:58:bd:92:21:fc:c1:ec:a3:51:f2:22:5c:f7:
1a:53:83:6b:c7:c6:90:08:46:86:02:2e:73:b5:6e:
c7:f3:05:35:41:b8:9c:30:ab:d3:34:85:3b:ba:04:
a9:dc:35:2e:c1:5f:2e:7d:bc:08:d1:66:bb:c0:41:
e2:2c:be:80:5d:5f:0b:aa:9c:4d:48:d1:db:09:ab:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5C:A6:A6:6D:68:63:86:7C:FB:8F:5D:2C:74:7E:E9:B2:90:BC:6C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/JFympm1oY4Z8-49dLHR-6bKQvGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:6f:62:71:25:5d:b7:93:3f:27:ab:87:14:96:72:d2:0e:a6:
c3:05:4a:1d:52:e7:6e:ec:e8:9d:41:1b:41:2c:f1:76:5e:14:
19:18:78:6b:57:09:42:66:6f:85:32:e6:48:32:95:17:82:62:
9e:c8:76:84:6e:5a:d1:b1:fc:4b:ed:5e:b3:6c:e9:7c:2c:4b:
3e:88:b6:5a:ee:f9:e0:87:ae:e3:75:da:51:ab:51:93:95:3a:
68:09:b7:61:be:b0:97:53:a0:52:70:86:22:49:56:26:b5:3b:
05:67:10:b8:70:2c:c1:98:02:16:6d:4e:47:ef:79:38:db:3b:
a1:9d:6f:e2:de:28:fb:49:d1:c0:5a:86:db:94:f0:49:7c:06:
24:8e:e9:d2:13:07:f9:c2:2f:43:6f:bf:9f:af:d2:71:ed:9b:
9b:2e:bd:5f:d0:76:4e:56:67:8b:4f:0a:5c:1c:5d:53:8d:4c:
9a:23:3c:ec:ad:1f:44:06:e1:3d:02:5b:44:94:7e:80:54:57:
5c:cc:a8:8b:df:9a:e4:91:34:0c:bf:49:0f:38:02:e1:f1:bd:
38:f8:2a:1a:c5:d7:f6:2c:9d:0a:eb:5d:09:a4:28:a1:41:61:
b0:5d:a6:88:63:ef:92:b9:6d:c9:0c:6f:b4:43:19:8c:b0:ab:
bc:2c:5c:84
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3bruNhQS7RShbgddKcMCoZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjI0MTUxNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDVjYTZhNjZkNjg2Mzg2N2NmYjhmNWQyYzc0N2VlOWIyOTBiYzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzPkZuCqTEVWJ2YI9KtgD4IO+KIc
3tC3OguITgw3+n9edIeKKZG1EZmQMDBPNyp/JSSF5u8YHBqp0EghuBjdxKbhYoxN
R8WBf1rGWaZnC/zaU0pzwxVcxU7pDuhoawJwyyjNxfzxYymjIIX0bWodAy1+z9W4
1AKuIKDbMTusNGmsGpkRLAN9DBgC0CVr4SKIFpyuTmSR92P5T0si9dQwE3FjMwSd
A7QqrwRbAFd8GGiCOdFUK1i9kiH8weyjUfIiXPcaU4Nrx8aQCEaGAi5ztW7H8wU1
QbicMKvTNIU7ugSp3DUuwV8ufbwI0Wa7wEHiLL6AXV8LqpxNSNHbCasI+QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCRcpqZtaGOGfPuPXSx0fumykLxsMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvSkZ5bXBtMW9ZNFo4LTQ5ZExIUi02YktRdkd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIpvYnElXbeTPyerhxSW
ctIOpsMFSh1S527s6J1BG0Es8XZeFBkYeGtXCUJmb4Uy5kgylReCYp7IdoRuWtGx
/EvtXrNs6XwsSz6Itlru+eCHruN12lGrUZOVOmgJt2G+sJdToFJwhiJJVia1OwVn
ELhwLMGYAhZtTkfveTjbO6Gdb+LeKPtJ0cBahtuU8El8BiSO6dITB/nCL0Nvv5+v
0nHtm5suvV/Qdk5WZ4tPClwcXVONTJojPOytH0QG4T0CW0SUfoBUV1zMqIvfmuSR
NAy/SQ84AuHxvTj4KhrF1/YsnQrrXQmkKKFBYbBdpohj75K5bckMb7RDGYywq7ws
XIQ=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:14 2025 by rpki-client