Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KJepsf6gqpxspfne1Ue4L8RC9OA.roa
File: KJepsf6gqpxspfne1Ue4L8RC9OA.roa (raw, json)
Hash identifier: OqERiBMh9mApZgbhaN+aYVLcmzy3tZT3vCzasj/pZl4=
Subject key identifier: 28:97:A9:B1:FE:A0:AA:9C:6C:A5:F9:DE:D5:47:B8:2F:C4:42:F4:E0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E2C5C99F3908212EECE7E0689CE4ED278
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KJepsf6gqpxspfne1Ue4L8RC9OA.roa
Signing time: Mon 11 Mar 2024 07:14:09 +0000
ROA not before: Mon 11 Mar 2024 07:14:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2c:5c:99:f3:90:82:12:ee:ce:7e:06:89:ce:4e:d2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 11 07:14:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2897a9b1fea0aa9c6ca5f9ded547b82fc442f4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:be:65:88:8d:b4:64:f6:e2:d0:a3:e6:64:f5:
9f:49:52:dd:b2:f3:fe:d8:a3:6e:7a:75:d5:33:61:
26:b1:64:e7:12:12:b3:73:8f:1f:48:56:78:95:57:
cc:96:30:31:93:9f:29:19:fe:bc:ad:df:a0:4a:a4:
b5:4d:de:3e:69:72:35:5e:96:3e:48:23:21:08:12:
87:fd:5c:d5:74:55:72:9a:4c:1b:8b:55:52:01:34:
31:7e:43:8f:28:05:17:cc:9f:5b:10:c4:06:0c:30:
c5:8f:4a:85:3d:eb:42:28:88:91:16:b8:5b:81:10:
58:8e:57:4b:93:e5:f7:15:52:32:bc:3a:48:13:76:
98:6a:ea:4e:66:62:aa:a7:4a:0e:b5:5b:af:c5:a8:
b5:e7:5b:88:ee:0a:2a:10:a2:26:eb:13:63:ce:fc:
5a:f0:a1:7a:bf:99:7a:26:e3:5b:8c:8b:7f:f4:44:
7a:f2:77:0f:a0:b3:d9:fa:fe:c0:48:31:fe:ac:04:
4e:72:62:81:2d:5f:bb:67:ab:fe:e1:e4:76:7b:34:
41:44:09:74:38:ff:e5:c4:fe:2f:48:17:2f:e1:14:
bd:7b:3c:11:41:d0:8d:bf:31:e5:5d:4a:f1:af:cd:
cf:ff:97:40:3b:0e:5f:f0:d4:b6:a5:1f:4e:38:04:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:97:A9:B1:FE:A0:AA:9C:6C:A5:F9:DE:D5:47:B8:2F:C4:42:F4:E0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KJepsf6gqpxspfne1Ue4L8RC9OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:f2:71:87:71:40:1a:5e:25:e2:a1:e6:9f:ac:eb:09:1c:94:
49:57:65:04:1a:61:e6:88:8b:ac:4e:dc:9f:cf:12:3e:92:6e:
36:0d:d4:e6:d4:bb:7f:16:f1:80:38:92:b4:11:e2:7e:d1:37:
a8:e0:04:17:7b:b1:bf:8d:75:e0:3d:85:b2:28:c3:d8:03:d6:
33:73:2a:15:59:d5:7b:01:d6:76:b3:4f:09:7e:37:ca:fc:7c:
63:a2:f5:7c:5d:43:d0:d0:9e:c8:39:e9:98:69:c3:c2:06:ea:
77:fd:ec:b8:68:92:71:47:6b:06:30:f3:af:09:aa:a7:8f:84:
8c:40:58:3f:e6:57:53:c5:53:c6:01:14:6c:11:d4:18:49:33:
80:32:48:d3:24:4f:3d:00:b3:46:68:95:4b:0a:f7:cf:86:0b:
fa:84:e2:63:09:dd:e0:91:71:90:08:bc:7a:66:71:55:70:ec:
48:9f:a6:22:49:88:54:d6:6d:09:85:09:d3:20:b9:5c:a0:40:
a0:9f:54:f2:f9:4e:95:14:61:78:bb:9e:72:44:2b:c9:bf:57:
a3:e2:fd:e9:9d:1c:e6:78:a6:88:6d:0c:80:91:4e:89:7d:52:
61:e6:9e:ee:22:b5:2d:9e:e6:4d:ba:3f:15:ff:15:3b:d9:6b:
4f:e7:a6:40
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY4sXJnzkIIS7s5+BonOTtJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzExMDcxNDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODk3YTliMWZlYTBhYTljNmNhNWY5ZGVkNTQ3YjgyZmM0NDJmNGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL5liI20ZPbi0KPmZPWfSVLdsvP+
2KNuenXVM2EmsWTnEhKzc48fSFZ4lVfMljAxk58pGf68rd+gSqS1Td4+aXI1XpY+
SCMhCBKH/VzVdFVymkwbi1VSATQxfkOPKAUXzJ9bEMQGDDDFj0qFPetCKIiRFrhb
gRBYjldLk+X3FVIyvDpIE3aYaupOZmKqp0oOtVuvxai151uI7goqEKIm6xNjzvxa
8KF6v5l6JuNbjIt/9ER68ncPoLPZ+v7ASDH+rAROcmKBLV+7Z6v+4eR2ezRBRAl0
OP/lxP4vSBcv4RS9ezwRQdCNvzHlXUrxr83P/5dAOw5f8NS2pR9OOARPpQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCiXqbH+oKqcbKX53tVHuC/EQvTgMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvS0plcHNmNmdxcHhzcGZuZTFVZTRMOFJDOU9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFTycYdxQBpeJeKh5p+s
6wkclElXZQQaYeaIi6xO3J/PEj6SbjYN1ObUu38W8YA4krQR4n7RN6jgBBd7sb+N
deA9hbIow9gD1jNzKhVZ1XsB1nazTwl+N8r8fGOi9XxdQ9DQnsg56Zhpw8IG6nf9
7LhoknFHawYw868JqqePhIxAWD/mV1PFU8YBFGwR1BhJM4AySNMkTz0As0ZolUsK
98+GC/qE4mMJ3eCRcZAIvHpmcVVw7EifpiJJiFTWbQmFCdMguVygQKCfVPL5TpUU
YXi7nnJEK8m/V6Pi/emdHOZ4pohtDICRTol9UmHmnu4itS2e5k26PxX/FTvZa0/n
pkA=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:26 2025 by rpki-client