Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MD_1NTKjf5bGxhtZJAl-DubQjzk.roa
File: MD_1NTKjf5bGxhtZJAl-DubQjzk.roa (raw, json)
Hash identifier: SOODb1xHaqlQ0pHYFOtLNA/HhUQKDF7tqcqLSeHwPOI=
Subject key identifier: 30:3F:F5:35:32:A3:7F:96:C6:C6:1B:59:24:09:7E:0E:E6:D0:8F:39
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D5821FFBE3DA54F0BFB2E56EADAA4BF5D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MD_1NTKjf5bGxhtZJAl-DubQjzk.roa
Signing time: Tue 30 Jan 2024 02:10:39 +0000
ROA not before: Tue 30 Jan 2024 02:10:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:58:21:ff:be:3d:a5:4f:0b:fb:2e:56:ea:da:a4:bf:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 30 02:10:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=303ff53532a37f96c6c61b5924097e0ee6d08f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:b1:0a:d0:ea:a4:d7:f5:c3:7b:70:c0:5d:
6b:d0:f2:36:13:0e:36:71:ce:8c:87:30:07:6e:5b:
df:f7:31:04:ee:c3:82:0e:71:79:3b:f0:68:94:bc:
ea:34:d8:7d:60:d1:52:29:27:f1:d2:d8:b1:e6:5f:
eb:2b:9d:8a:ae:35:55:8b:f4:a8:64:fa:c9:56:65:
b8:89:e6:33:82:f7:d6:e5:33:5e:61:f2:bc:00:a4:
8f:11:cb:f7:bc:b0:cc:43:ce:05:5b:cf:3d:1e:98:
a1:52:c5:76:5f:a3:61:65:ad:37:7f:0f:85:c0:a6:
a3:d6:62:e4:af:fc:7d:88:65:4e:25:bd:65:5a:76:
90:f9:50:f8:9c:83:37:90:2b:fc:49:e9:5c:99:43:
b5:40:82:3c:cd:9e:a8:3c:24:d1:df:ed:c3:86:56:
22:a5:ba:57:ff:f9:3d:93:cb:a2:ad:28:8c:d1:62:
8b:19:90:be:26:ee:23:2d:00:5d:5c:d5:76:84:a9:
cf:c3:fd:6e:fa:56:0e:20:31:28:09:34:79:74:94:
73:f6:0f:16:79:7a:95:94:61:80:49:12:87:02:e1:
93:3c:af:7c:81:1d:69:ff:c4:d0:c0:fb:c1:e9:70:
88:ef:22:b8:af:1f:a5:18:d9:cc:46:72:69:88:d1:
ce:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3F:F5:35:32:A3:7F:96:C6:C6:1B:59:24:09:7E:0E:E6:D0:8F:39
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MD_1NTKjf5bGxhtZJAl-DubQjzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:96:49:e7:76:14:a6:64:16:d7:e8:1d:9b:9f:66:62:68:54:
0f:aa:c7:42:31:8c:35:4f:ed:6a:fc:2a:86:a7:1b:f6:e7:4a:
7e:92:6b:f8:d2:ca:c7:d7:04:33:8f:5a:66:2d:c2:9b:e0:a8:
de:dd:01:24:50:a0:37:e5:f2:8a:cb:fb:fe:14:46:14:87:f9:
0c:7f:2f:f2:75:08:2d:e4:5e:e8:7a:15:9c:54:6a:fe:ba:cf:
0d:ca:aa:c4:6a:15:76:bf:60:30:d5:2b:fb:57:51:51:c1:b3:
cc:26:a9:41:6e:99:96:70:04:db:b0:c5:da:2a:76:0f:e4:28:
95:d1:e2:b2:1f:58:7a:17:be:86:d6:00:7c:27:bf:a8:27:bc:
27:10:c1:33:98:41:06:bb:90:9f:3d:17:30:a1:e0:4b:6d:b2:
d1:df:45:f4:27:54:48:b2:b1:0a:93:57:1f:b1:14:f8:a7:d6:
70:3d:50:9b:eb:4c:a9:6c:2e:21:83:a2:d0:9c:01:ce:2e:ad:
bf:60:0c:9d:9d:b2:fd:39:64:f8:90:ba:4e:15:08:cb:d6:a7:
5d:57:cc:71:9b:fb:15:bd:63:ad:03:3b:3e:d3:3f:ee:33:79:
33:88:11:d6:5e:f3:88:fd:d4:c3:4b:24:ea:e0:d8:9f:ae:54:
e9:47:fa:78
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY1YIf++PaVPC/suVurapL9dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTMwMDIxMDM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDNmZjUzNTMyYTM3Zjk2YzZjNjFiNTkyNDA5N2UwZWU2ZDA4ZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMOxCtDqpNf1w3twwF1r0PI2Ew42
cc6MhzAHblvf9zEE7sOCDnF5O/BolLzqNNh9YNFSKSfx0tix5l/rK52KrjVVi/So
ZPrJVmW4ieYzgvfW5TNeYfK8AKSPEcv3vLDMQ84FW889HpihUsV2X6NhZa03fw+F
wKaj1mLkr/x9iGVOJb1lWnaQ+VD4nIM3kCv8SelcmUO1QII8zZ6oPCTR3+3DhlYi
pbpX//k9k8uirSiM0WKLGZC+Ju4jLQBdXNV2hKnPw/1u+lYOIDEoCTR5dJRz9g8W
eXqVlGGASRKHAuGTPK98gR1p/8TQwPvB6XCI7yK4rx+lGNnMRnJpiNHOTQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDA/9TUyo3+WxsYbWSQJfg7m0I85MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvTURfMU5US2pmNWJHeGh0WkpBbC1EdWJRanprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH2WSed2FKZkFtfoHZuf
ZmJoVA+qx0IxjDVP7Wr8KoanG/bnSn6Sa/jSysfXBDOPWmYtwpvgqN7dASRQoDfl
8orL+/4URhSH+Qx/L/J1CC3kXuh6FZxUav66zw3KqsRqFXa/YDDVK/tXUVHBs8wm
qUFumZZwBNuwxdoqdg/kKJXR4rIfWHoXvobWAHwnv6gnvCcQwTOYQQa7kJ89FzCh
4EttstHfRfQnVEiysQqTVx+xFPin1nA9UJvrTKlsLiGDotCcAc4urb9gDJ2dsv05
ZPiQuk4VCMvWp11XzHGb+xW9Y60DOz7TP+4zeTOIEdZe84j91MNLJOrg2J+uVOlH
+ng=
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:43 2025 by rpki-client