Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LlKnNzelcSC_DCZDewoAnTQ0bbk.roa
File: LlKnNzelcSC_DCZDewoAnTQ0bbk.roa (raw, json)
Hash identifier: vJTOzJt4hB+81uHflQ+yxDdUr7mXWp7O9YEJraSPVxU=
Subject key identifier: 2E:52:A7:37:37:A5:71:20:BF:0C:26:43:7B:0A:00:9D:34:34:6D:B9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D53363C655521953605E1C901AAC80334
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LlKnNzelcSC_DCZDewoAnTQ0bbk.roa
Signing time: Mon 29 Jan 2024 03:14:39 +0000
ROA not before: Mon 29 Jan 2024 03:14:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:53:36:3c:65:55:21:95:36:05:e1:c9:01:aa:c8:03:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 29 03:14:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e52a73737a57120bf0c26437b0a009d34346db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5b:89:c8:34:9a:42:60:31:75:3e:11:98:50:
17:fc:73:97:c1:bd:69:af:f1:9a:18:c4:b7:c1:e3:
85:0a:e1:11:69:3e:f5:39:48:d2:2f:de:42:54:3f:
64:f0:0b:0b:7f:e1:86:b4:b6:f7:fa:e3:d4:2c:c1:
b2:63:f6:4d:c1:39:5c:88:13:66:b2:d8:65:a0:ab:
2e:f8:52:43:6b:66:ac:fb:83:0b:41:89:f0:7c:4d:
1c:45:d8:75:d2:6c:47:ed:9a:41:8e:5a:d6:0a:e9:
41:1b:21:47:bc:b6:12:29:29:1e:2a:cc:c4:de:8e:
d7:c2:61:53:20:0d:29:2e:93:9c:14:95:e7:cf:3e:
11:3f:b2:3e:b5:9e:6c:e9:49:6f:1f:6a:ea:aa:e2:
7b:c3:e8:51:7f:9f:e6:b2:9a:37:27:d2:57:14:5a:
88:4c:a9:a4:bb:38:b3:7f:4a:31:0d:02:37:2b:4b:
13:f5:25:fc:c5:d5:84:84:c1:3d:f4:6f:d7:5e:d7:
17:94:eb:35:a7:59:18:81:2a:9b:2c:a4:ba:d3:19:
84:b1:cd:1c:ed:0d:c9:45:91:04:cd:de:5d:f6:69:
0e:66:6c:f1:5b:21:6f:1a:45:db:27:5f:db:42:9d:
59:18:93:22:df:2b:54:1e:61:42:c3:3d:67:84:af:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:52:A7:37:37:A5:71:20:BF:0C:26:43:7B:0A:00:9D:34:34:6D:B9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LlKnNzelcSC_DCZDewoAnTQ0bbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:b2:6d:c7:d7:00:37:94:04:5d:c6:a4:e5:af:e0:2b:0c:2d:
05:59:70:dd:f7:94:1f:a0:45:1b:09:86:19:4f:d1:a5:50:1a:
a4:00:2a:84:94:68:31:25:44:82:45:18:a7:7b:14:2a:b7:80:
6a:a6:03:d3:db:00:a7:34:6a:29:a3:b3:06:3d:a5:21:db:d6:
de:a5:55:01:a4:b6:af:cb:6c:32:4d:8d:aa:15:a9:6c:51:3f:
05:c2:dd:e8:3c:8f:3b:b9:27:ce:7c:a2:c9:80:3f:93:08:92:
55:d6:5a:31:43:5c:09:94:61:ea:de:8e:6c:27:c0:b8:c6:58:
67:4a:83:15:32:0f:01:62:80:45:a7:c5:d1:68:76:47:92:1d:
13:0a:41:c1:24:16:17:e4:ef:f6:18:df:48:46:4a:11:fb:33:
d5:ce:34:84:f4:91:56:ac:86:a2:90:5f:36:ef:78:ab:9d:dc:
34:a3:df:80:0c:7e:fc:e7:79:a4:05:80:bb:71:bc:3b:20:78:
63:68:1b:cb:26:36:b4:c7:b7:05:3d:ea:7a:6e:fd:3e:0b:99:
59:d9:3b:29:e2:78:3c:7f:cf:43:4f:57:62:13:cb:59:13:a3:
30:c3:3c:fd:c8:19:c9:9d:e4:69:aa:93:e1:2d:3e:a1:10:99:
99:e1:4a:ea
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY1TNjxlVSGVNgXhyQGqyAM0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTI5MDMxNDM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTUyYTczNzM3YTU3MTIwYmYwYzI2NDM3YjBhMDA5ZDM0MzQ2ZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVuJyDSaQmAxdT4RmFAX/HOXwb1p
r/GaGMS3weOFCuERaT71OUjSL95CVD9k8AsLf+GGtLb3+uPULMGyY/ZNwTlciBNm
sthloKsu+FJDa2as+4MLQYnwfE0cRdh10mxH7ZpBjlrWCulBGyFHvLYSKSkeKszE
3o7XwmFTIA0pLpOcFJXnzz4RP7I+tZ5s6UlvH2rqquJ7w+hRf5/mspo3J9JXFFqI
TKmkuzizf0oxDQI3K0sT9SX8xdWEhME99G/XXtcXlOs1p1kYgSqbLKS60xmEsc0c
7Q3JRZEEzd5d9mkOZmzxWyFvGkXbJ1/bQp1ZGJMi3ytUHmFCwz1nhK90xwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC5Spzc3pXEgvwwmQ3sKAJ00NG25MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvTGxLbk56ZWxjU0NfRENaRGV3b0FuVFEwYmJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABGybcfXADeUBF3GpOWv
4CsMLQVZcN33lB+gRRsJhhlP0aVQGqQAKoSUaDElRIJFGKd7FCq3gGqmA9PbAKc0
aimjswY9pSHb1t6lVQGktq/LbDJNjaoVqWxRPwXC3eg8jzu5J858osmAP5MIklXW
WjFDXAmUYerejmwnwLjGWGdKgxUyDwFigEWnxdFodkeSHRMKQcEkFhfk7/YY30hG
ShH7M9XONIT0kVashqKQXzbveKud3DSj34AMfvzneaQFgLtxvDsgeGNoG8smNrTH
twU96npu/T4LmVnZOynieDx/z0NPV2ITy1kTozDDPP3IGcmd5Gmqk+EtPqEQmZnh
Suo=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:48 2025 by rpki-client